$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json) Hash identifier: kGNeKkOXkK7muGZ9lAtw7fndgJpBvwU7Cfc+fX/AY7E= Subject key identifier: 39:2A:DA:29:9C:B1:91:99:8F:EE:E6:3C:E2:E3:BF:A2:94:01:45:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498BD260C3E0354F49219AE0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d2:60:c3:e0:35:4f:49:21:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9d3870e5-35ca-48b5-8b09-ddebf92707ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:46:a1:1b:78:0b:24:19:c4:b7:9c:c7:7f: 11:e8:5c:cf:c7:5f:20:1a:2d:d2:e3:aa:4b:fd:44: 8f:2c:79:b8:87:8b:0d:23:4b:48:84:33:be:59:b7: e9:f9:d2:63:33:2d:fe:63:20:ae:a0:d3:10:ee:54: c8:70:99:df:5a:08:49:db:9b:f2:cc:69:f2:8d:72: 2c:bf:b1:93:88:39:f2:0d:9a:4f:99:0f:83:29:d9: d5:25:6d:0e:8d:8e:a4:b3:10:77:42:16:82:76:24: a5:a2:d8:12:48:76:de:89:6a:04:9f:c2:b0:7c:6d: f0:b8:77:1a:87:ff:be:12:2a:49:f2:fb:be:70:6c: 5a:d2:bb:9e:86:5b:e7:6c:37:2a:d0:58:90:41:45: fd:85:ed:31:d3:92:6c:d1:80:27:98:e9:6f:2a:0e: f5:27:e1:44:ad:fc:77:44:bd:32:8d:94:0c:b5:0d: c2:4e:ec:9d:d6:e0:d5:58:7b:6c:c0:ae:e6:e2:d1: 72:4a:e2:b7:85:8e:5d:23:4d:71:be:d8:38:dd:81: d4:f8:e0:d2:6a:8d:b7:89:7f:54:22:3b:23:33:33: 73:9b:d6:39:e4:32:67:20:18:77:dc:35:b9:d3:f3: e9:c4:8f:b5:69:57:fb:b8:49:e8:9f:fc:db:25:87: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2A:DA:29:9C:B1:91:99:8F:EE:E6:3C:E2:E3:BF:A2:94:01:45:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:56:0b:de:f2:1e:b2:2f:bf:d0:ae:7e:b5:d7:31:08:67:53: 59:cc:88:1b:69:9e:8b:4d:7d:35:12:3d:45:7c:12:ad:4f:43: 2e:7b:c8:b8:8b:ff:78:c9:ed:b0:8a:b5:44:b1:4a:b3:01:b5: 78:ca:be:2a:3e:60:66:0c:24:74:8a:0e:c8:58:6a:08:08:70: a2:a4:f3:ae:ca:0d:ea:05:20:c8:14:1b:7b:bb:d3:04:cb:65: 15:1b:b1:cc:67:f1:82:ae:b5:4c:b5:de:c4:d9:bb:de:ff:9c: 27:d3:ba:aa:05:60:3b:e5:3a:cc:1e:5e:1b:72:ee:81:b5:56: 3b:62:2e:d3:07:b0:99:30:b4:f4:bf:6b:c9:b5:1c:49:48:24: f2:e5:5c:8a:61:bc:5e:fc:76:65:53:9e:28:51:57:3a:7d:6f: 4d:47:b0:af:57:14:37:f6:40:fb:89:49:8c:4a:32:e7:18:0f: 55:16:91:d3:57:93:47:f0:14:cb:74:0f:b9:6e:20:99:43:46: 88:5c:45:3c:d6:59:b3:23:4a:0c:fe:6f:b4:d7:8a:bc:f6:83: e8:c2:e8:d6:b6:cb:00:eb:1e:05:74:96:83:9f:41:90:a7:14: 2a:10:11:91:ce:e6:5a:ab:75:d5:39:96:05:d3:14:92:87:ca: dd:b9:45:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Ji9Jgw+A1T0khmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWQzODcwZTUtMzVjYS00OGI1LThiMDktZGRlYmY5MjcwN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhJGoRt4CyQZxLecx38R6FzPx18gGi3S46pL /USPLHm4h4sNI0tIhDO+Wbfp+dJjMy3+YyCuoNMQ7lTIcJnfWghJ25vyzGnyjXIs v7GTiDnyDZpPmQ+DKdnVJW0OjY6ksxB3QhaCdiSlotgSSHbeiWoEn8KwfG3wuHca h/++EipJ8vu+cGxa0ruehlvnbDcq0FiQQUX9he0x05Js0YAnmOlvKg71J+FErfx3 RL0yjZQMtQ3CTuyd1uDVWHtswK7m4tFySuK3hY5dI01xvtg43YHU+ODSao23iX9U IjsjMzNzm9Y55DJnIBh33DW50/PpxI+1aVf7uEnon/zbJYcbMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDkq2imcsZGZj+7mPOLjv6KUAUW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGI4NWFiYjktY2QzNC0z MTJmLWE2YTItNzhkYjI0ZTA1YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuioww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAVYL3vIesi+/0K5+tdcxCGdTWcyIG2mei019NRI9RXwSrU9DLnvI uIv/eMntsIq1RLFKswG1eMq+Kj5gZgwkdIoOyFhqCAhwoqTzrsoN6gUgyBQbe7vT BMtlFRuxzGfxgq61TLXexNm73v+cJ9O6qgVgO+U6zB5eG3LugbVWO2Iu0wewmTC0 9L9rybUcSUgk8uVcimG8Xvx2ZVOeKFFXOn1vTUewr1cUN/ZA+4lJjEoy5xgPVRaR 01eTR/AUy3QPuW4gmUNGiFxFPNZZsyNKDP5vtNeKvPaD6MLo1rbLAOseBXSWg59B kKcUKhARkc7mWqt11TmWBdMUkofK3blFDQ== -----END CERTIFICATE-----Generated at Fri Sep 25 16:39:45 2026 by rpki-client