$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa File: ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa (raw, json) Hash identifier: lL8Z+8eUq+6QN+lSfIB/9Zt0h+FwH7r4prVkE/5A0DI= Subject key identifier: 8B:75:2E:37:82:68:90:EF:5C:FB:19:96:32:F1:49:F7:C7:35:A9:B6 Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Certificate serial: 010D0C9F4328584F498A0F1C56AD853FB9663180 Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 29843 IP address blocks: 2604:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:0f:1c:56:ad:85:3f:b9:66:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61dfc68f-5b72-4b87-a07a-5a23f2bf7f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:86:9b:6b:cf:c2:5b:dd:7e:cc:f6:02:2f: 29:0b:16:2f:74:07:06:2f:57:d7:97:c9:a7:23:8e: a8:0c:a9:ae:1a:d6:6e:6c:14:a0:4f:16:52:1a:65: 20:b8:b5:8e:7d:47:30:23:8c:04:85:8d:7c:5f:fb: ce:d9:84:5a:70:3a:a7:5a:15:3d:e0:ea:bb:f6:a2: 78:aa:e2:aa:1d:9c:e2:41:c6:1f:75:47:8b:6c:08: be:24:a5:49:36:26:c1:c4:c7:ae:d3:36:af:a8:b6: c6:b4:8c:2b:07:f3:93:9a:03:a3:d2:58:3f:de:b8: 8a:11:39:c8:81:ff:63:6f:c8:8a:36:79:de:f6:1e: 5d:0c:96:a2:ad:5a:d1:91:e2:5c:79:ef:ad:c4:a4: 11:db:2d:26:ba:52:bf:c8:cb:db:8c:bc:c0:06:06: f8:f8:1a:81:55:f6:dd:b7:ba:f9:62:db:ad:70:5f: da:2d:bf:8b:87:22:1b:d5:b5:d2:5b:8d:40:be:94: 98:f1:58:ea:07:89:fd:31:62:6d:bb:a5:b2:86:41: d8:1d:50:9c:17:7b:b2:e5:c5:9c:6f:18:cc:e4:33: 7b:b5:56:a8:a5:c6:8c:ac:e1:46:1d:87:af:6a:21: e2:8c:67:c6:bb:c7:c2:0e:49:17:26:63:76:15:1a: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:75:2E:37:82:68:90:EF:5C:FB:19:96:32:F1:49:F7:C7:35:A9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl X509v3 Authority Key Identifier: keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer sbgp-ipAddrBlock: critical IPv6: 2604:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c9:f5:89:13:e1:99:91:c8:82:2c:78:5f:ff:46:e6:d8:a0: fb:8f:ff:43:e5:62:29:fb:2f:ed:13:fe:b0:56:a6:71:d1:75: 4c:a7:86:06:6e:47:61:2a:bd:a7:81:aa:d8:42:71:b8:91:5e: 23:08:3d:7f:ed:30:79:a0:be:87:5b:20:ef:35:1c:d2:cd:0a: 4a:c4:5f:80:d4:54:c1:8b:5f:53:12:1c:87:03:f1:81:4f:b5: 47:c1:fb:11:ae:91:6c:58:d0:88:64:8b:33:f7:c9:ee:28:bf: 4e:56:30:b3:71:e8:35:13:77:5c:c4:d2:2a:a0:78:ce:f4:f7: 11:d4:55:55:bb:0e:af:75:48:4e:1c:46:7f:57:ba:75:25:4a: 2d:10:be:8a:c7:c0:e4:87:e0:8f:bf:67:0d:44:bc:72:d3:15: 40:64:b5:3d:df:86:30:90:94:45:66:57:50:9b:03:71:ed:13: 7b:ce:25:b7:44:93:d8:22:ce:3e:9c:89:81:5c:01:4e:86:8c: b7:73:f1:b2:65:10:07:45:bc:ba:a1:4a:04:70:d7:70:92:a1: 21:59:06:48:77:d7:d9:31:ae:33:69:f3:71:e0:bc:04:60:c1: ab:b5:dc:51:80:c1:1f:ca:05:c1:bb:5a:2a:17:b3:1a:cf:f6: 40:83:d9:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jig8cVq2FP7lmMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk OTAxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFkZmM2OGYtNWI3Mi00Yjg3LWEwN2EtNWEyM2YyYmY3Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM6Gm2vPwlvdfsz2Ai8pCxYvdAcGL1fXl8mn I46oDKmuGtZubBSgTxZSGmUguLWOfUcwI4wEhY18X/vO2YRacDqnWhU94Oq79qJ4 quKqHZziQcYfdUeLbAi+JKVJNibBxMeu0zavqLbGtIwrB/OTmgOj0lg/3riKETnI gf9jb8iKNnne9h5dDJairVrRkeJcee+txKQR2y0mulK/yMvbjLzABgb4+BqBVfbd t7r5YtutcF/aLb+LhyIb1bXSW41AvpSY8VjqB4n9MWJtu6WyhkHYHVCcF3uy5cWc bxjM5DN7tVaopcaMrOFGHYevaiHijGfGu8fCDkkXJmN2FRoEuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIt1LjeCaJDvXPsZljLxSffHNam2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0 ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvZWJjYTUyZjctZjRiNy0z YTAxLThlNjgtZWYyNTgyM2E5YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5 NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj N2JhM2Q5MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiyfWJE+GZkciCLHhf/0bm2KD7j/9D5WIp+y/tE/6wVqZx0XVMp4YG bkdhKr2ngarYQnG4kV4jCD1/7TB5oL6HWyDvNRzSzQpKxF+A1FTBi19TEhyHA/GB T7VHwfsRrpFsWNCIZIsz98nuKL9OVjCzceg1E3dcxNIqoHjO9PcR1FVVuw6vdUhO HEZ/V7p1JUotEL6Kx8Dkh+CPv2cNRLxy0xVAZLU934YwkJRFZldQmwNx7RN7ziW3 RJPYIs4+nImBXAFOhoy3c/GyZRAHRby6oUoEcNdwkqEhWQZId9fZMa4zafNx4LwE YMGrtdxRgMEfygXBu1oqF7Maz/ZAg9lZ -----END CERTIFICATE-----Generated at Fri Sep 25 06:27:06 2026 by rpki-client