$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa File: 43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa (raw, json) Hash identifier: ULB1tEJxzuEQ1du1ZVGHe5dOcCHdSjPt6tCYCTan4pg= Subject key identifier: B2:BE:E4:CD:6F:E7:60:C0:B3:AF:83:3F:0E:BB:25:B4:64:72:79:2B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F3052905D270A131BE4141B30 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8d:5800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:90:5d:27:0a:13:1b:e4:14:1b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=5e77cf9a-cb40-4adc-aaab-02ca2ee05e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:3a:8d:9c:34:df:0a:08:ec:f7:43:fc:8a: f3:35:a4:47:3e:81:c7:3b:59:da:a3:83:b0:34:66: 67:52:f4:4e:78:5a:12:12:55:6a:6f:e7:bc:f7:8b: 8b:bc:d2:c3:ff:ea:36:07:a3:f7:1e:e8:47:9b:19: 88:26:2e:e9:0b:2e:d1:a4:2f:d6:0e:e9:0a:52:71: a0:b6:d3:08:97:0d:cb:2e:a9:09:50:dd:c9:75:3c: 69:75:0f:a5:be:63:88:32:06:91:3d:74:44:f9:ce: af:a0:54:c8:89:93:5a:2f:2a:39:09:6e:cc:29:ad: a9:41:70:09:a3:46:66:57:5a:46:8c:0f:44:32:91: 8d:ec:6c:e6:fd:bf:e0:2c:c9:fe:38:91:4c:19:7b: f0:8d:63:07:9e:21:01:ec:2f:73:31:c4:40:6a:b0: 4e:38:7f:38:33:97:67:95:11:c6:97:58:9a:bf:18: c3:29:f9:25:93:da:7b:e0:51:66:40:a5:b6:24:35: 75:66:45:d8:c7:a2:2d:b4:14:10:a9:8f:a9:4c:89: 76:da:1a:91:4e:8f:86:72:f9:fb:6b:65:97:5b:0b: 7c:e9:1f:48:10:7a:b4:61:e3:26:e9:06:9f:ff:d7: 8e:47:01:cf:22:6c:d0:85:b4:4b:e7:2f:10:89:b6: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BE:E4:CD:6F:E7:60:C0:B3:AF:83:3F:0E:BB:25:B4:64:72:79:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43b6bf3b-f97d-34f7-bae3-e4f7f4e8eb8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:28:2f:7d:0e:a1:ee:c3:85:68:f2:3c:fd:52:d4:89:81:a2: f2:17:40:7a:d0:53:ea:18:3f:1b:91:42:2b:f1:00:63:7c:36: 67:c1:9b:16:9d:e7:8d:ac:b6:9f:1b:f8:fd:01:58:8a:c9:5d: 0b:0f:c6:c2:58:7d:99:ac:76:1d:78:fa:47:ae:50:2f:55:3c: 58:6d:83:93:55:65:92:9d:3d:5f:36:dd:64:5a:9f:48:f2:b9: 2a:c5:e8:f0:04:b8:9f:5f:89:ba:29:44:4f:65:75:f4:e9:c1: db:17:29:c1:15:bf:ae:a3:47:06:a9:e0:fd:ec:b5:e4:99:27: 5a:69:87:95:18:63:f2:9e:c2:c0:f6:4a:af:3f:0a:73:fe:90: 92:96:7f:9a:81:ac:bf:5d:54:70:24:00:47:b4:1c:a7:71:1b: c5:dd:86:a4:54:1d:89:6a:68:2a:cd:3e:01:79:c4:c9:d8:52: 8e:09:67:ec:c1:ea:e5:46:06:e7:cf:a7:67:57:18:fa:f8:12: 20:27:af:1a:d3:8c:79:5b:11:d8:eb:86:60:45:92:59:67:15: c7:95:9b:5a:b7:ec:53:86:18:83:60:b0:88:25:ab:b0:82:20: f8:b3:d6:94:d7:0b:65:8d:81:d4:2a:72:c2:68:fb:41:e1:97: 4a:7d:e1:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8wUpBdJwoTG+QUGzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NWU3N2NmOWEtY2I0MC00YWRjLWFhYWItMDJjYTJlZTA1ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz06jZw03woI7PdD/IrzNaRHPoHHO1nao4Ow NGZnUvROeFoSElVqb+e894uLvNLD/+o2B6P3HuhHmxmIJi7pCy7RpC/WDukKUnGg ttMIlw3LLqkJUN3JdTxpdQ+lvmOIMgaRPXRE+c6voFTIiZNaLyo5CW7MKa2pQXAJ o0ZmV1pGjA9EMpGN7Gzm/b/gLMn+OJFMGXvwjWMHniEB7C9zMcRAarBOOH84M5dn lRHGl1iavxjDKfklk9p74FFmQKW2JDV1ZkXYx6IttBQQqY+pTIl22hqRTo+Gcvn7 a2WXWwt86R9IEHq0YeMm6Qaf/9eORwHPImzQhbRL5y8QibaYawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLK+5M1v52DAs6+DPw67JbRkcnkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDNiNmJmM2ItZjk3ZC0z NGY3LWJhZTMtZTRmN2Y0ZThlYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaCgvfQ6h7sOFaPI8/VLUiYGi8hdAetBT6hg/G5FCK/EAY3w2Z8Gb Fp3njay2nxv4/QFYisldCw/Gwlh9max2HXj6R65QL1U8WG2Dk1Vlkp09XzbdZFqf SPK5KsXo8AS4n1+JuilET2V19OnB2xcpwRW/rqNHBqng/ey15JknWmmHlRhj8p7C wPZKrz8Kc/6QkpZ/moGsv11UcCQAR7Qcp3Ebxd2GpFQdiWpoKs0+AXnEydhSjgln 7MHq5UYG58+nZ1cY+vgSICevGtOMeVsR2OuGYEWSWWcVx5WbWrfsU4YYg2CwiCWr sIIg+LPWlNcLZY2B1Cpywmj7QeGXSn3hfA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:14 2026 by rpki-client