$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa File: eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa (raw, json) Hash identifier: VE82Sa+Yrc93au6csqov2kWDXR6On+BiINR2RM5MxPo= Subject key identifier: 34:08:A5:DA:3A:93:54:47:76:7F:78:06:2D:2C:FE:D9:26:6B:CE:E8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4972FD0899343A444F18506E Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e89:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fd:08:99:34:3a:44:4f:18:50:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4720f0f0-b31a-4415-bbd0-3b3c61112eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:32:71:33:85:c2:f3:27:40:f4:93:cc:7c: b4:c4:24:fd:13:39:6e:cd:01:48:6c:ae:dd:a3:55: e6:bf:3d:39:87:02:74:3c:79:d1:44:f8:38:38:f3: e1:38:0d:bd:f4:eb:8e:51:22:2a:dc:ac:26:b1:9e: 1b:a6:b9:bf:d6:d4:ac:b9:bd:7b:7d:8a:b5:62:bb: 5c:59:53:c0:86:c0:f0:fe:d8:b2:c1:d0:49:66:00: f9:92:dc:42:f2:9b:14:7f:8b:a5:de:97:13:c5:94: 6a:2d:bb:e9:8c:86:e8:9d:46:f2:11:50:34:68:e9: 52:5c:0a:fe:9a:cb:f2:7a:b4:65:e8:bf:e0:b6:cb: 91:05:ee:4f:3d:69:90:63:e6:99:be:84:8f:37:89: 79:6b:28:17:90:25:e5:8a:a0:49:fb:50:77:48:7e: aa:0e:2f:23:48:3d:e7:44:6e:f0:22:41:43:bf:eb: 94:dd:d3:03:cc:ed:2f:15:93:2c:be:3a:1b:98:f7: 17:10:cd:18:77:6a:0e:e4:99:0d:f5:c7:6a:bc:87: 69:94:59:cc:e1:49:c2:48:7d:16:bd:f3:63:40:c6: eb:02:8f:45:36:65:19:10:b3:0e:7c:f1:a0:65:e4: d3:cb:a1:ef:39:d4:13:75:3e:6a:e9:f1:5c:38:b0: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:A5:DA:3A:93:54:47:76:7F:78:06:2D:2C:FE:D9:26:6B:CE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:90:79:b8:85:b3:83:bb:e0:91:ae:47:7e:cf:60:7e:cb:d0: 1a:13:cc:db:5e:9f:1d:ec:93:56:da:75:d9:89:53:78:b6:94: e0:c8:ea:9d:a6:a0:09:00:6f:d2:2e:6f:b6:dc:b8:28:9e:9c: f1:28:4f:d6:b0:42:0a:e7:8a:c0:5a:76:bd:68:fa:c9:6e:18: db:f1:0b:f9:86:c1:6d:58:f4:93:79:e1:15:12:53:ac:60:a8: 9d:1d:e1:d4:bc:3e:bb:db:a5:36:f3:84:71:00:03:3a:f4:d6: 6c:6b:c3:5a:e3:41:6a:16:cc:3c:a0:a7:cc:2a:d9:22:3a:96: bf:68:5f:14:5c:f4:aa:d4:4d:75:75:8a:1c:44:89:9f:80:a9: 87:20:6d:9f:14:d8:07:05:45:2b:ba:44:b0:a0:2d:f6:fd:08: 30:dd:36:1b:a8:07:be:70:78:e7:cc:74:0c:d0:4a:a2:e4:49: 41:07:b1:04:77:e9:20:d7:a7:8d:f1:54:78:0d:db:b0:f4:c6: 75:83:b0:ce:3b:e3:e8:ad:e3:88:71:3e:d0:ba:77:38:a1:d7: 77:b3:4f:f3:19:09:78:90:ad:e5:b2:df:d1:39:41:7c:b9:c7: 07:79:10:59:fe:cc:c9:88:68:5d:7a:2b:e5:09:64:95:91:f0: e1:76:a3:29 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcv0ImTQ6RE8YUG4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDcyMGYwZjAtYjMxYS00NDE1LWJiZDAtM2IzYzYxMTEyZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1UycTOFwvMnQPSTzHy0xCT9EzluzQFIbK7d o1Xmvz05hwJ0PHnRRPg4OPPhOA299OuOUSIq3KwmsZ4bprm/1tSsub17fYq1Yrtc WVPAhsDw/tiywdBJZgD5ktxC8psUf4ul3pcTxZRqLbvpjIbonUbyEVA0aOlSXAr+ msvyerRl6L/gtsuRBe5PPWmQY+aZvoSPN4l5aygXkCXliqBJ+1B3SH6qDi8jSD3n RG7wIkFDv+uU3dMDzO0vFZMsvjobmPcXEM0Yd2oO5JkN9cdqvIdplFnM4UnCSH0W vfNjQMbrAo9FNmUZELMOfPGgZeTTy6HvOdQTdT5q6fFcOLDaMwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDQIpdo6k1RHdn94Bi0s/tkma87oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWIzZmI0MTQtZDcxZi0z YjdkLTg1ZDktMzRlNGRmYTA5ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIZB5uIWzg7vgka5Hfs9gfsvQGhPM216fHeyTVtp12YlTeLaU4Mjq naagCQBv0i5vtty4KJ6c8ShP1rBCCueKwFp2vWj6yW4Y2/EL+YbBbVj0k3nhFRJT rGConR3h1Lw+u9ulNvOEcQADOvTWbGvDWuNBahbMPKCnzCrZIjqWv2hfFFz0qtRN dXWKHESJn4CphyBtnxTYBwVFK7pEsKAt9v0IMN02G6gHvnB458x0DNBKouRJQQex BHfpINenjfFUeA3bsPTGdYOwzjvj6K3jiHE+0Lp3OKHXd7NP8xkJeJCt5bLf0TlB fLnHB3kQWf7MyYhoXXor5QlklZHw4XajKQ== -----END CERTIFICATE-----Generated at Tue Sep 29 09:49:29 2026 by rpki-client