$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa File: 496e57df-4052-3374-ae88-e803a24982b0.roa (raw, json) Hash identifier: P5cm1f3ox6KFXwLzrF3BXJDVsemHfZudTEYk7XbqgiM= Subject key identifier: 91:D1:62:20:4D:E6:21:1C:D0:2E:B6:82:B2:61:B9:8A:CA:9C:0D:42 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498798F66E14EFDF58A82340 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8e:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:98:f6:6e:14:ef:df:58:a8:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=22056bc4-6253-47ef-b10e-c03eea711ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:14:f3:cd:96:70:0b:94:6c:ff:de:75:77:24: aa:f6:ec:93:c9:e7:ad:0a:9b:e6:25:ae:48:7f:03: 3f:43:ef:4b:c8:fd:cc:07:48:b7:f0:23:e8:e6:37: 63:37:3b:7a:58:dd:02:77:36:d5:1e:9e:5d:a1:79: f6:f0:ba:fd:f9:da:ac:57:f2:23:90:09:af:eb:50: 03:60:56:b3:3e:9d:da:5f:34:2d:a9:d5:0c:3b:11: 36:97:a7:d8:1f:30:b3:4e:10:b1:50:50:cf:ec:b8: 18:6b:82:b5:0e:b9:72:1f:4b:19:2a:94:be:d8:45: 8c:01:ec:f2:1c:4d:8c:b8:5d:30:8e:c9:8c:a5:6c: 21:67:69:98:e3:d1:53:45:61:0a:6d:0e:9c:6d:3a: 5d:66:a7:f3:5c:91:78:db:7a:f7:b5:67:fa:5f:1a: 36:08:66:93:07:41:d6:53:0a:12:b5:37:f4:65:10: ac:a4:0e:78:77:f9:6d:1b:32:86:e5:99:ca:4c:d8: b2:17:29:83:73:66:b7:c8:f7:ed:fc:4b:f1:a4:14: 3b:7f:ac:2c:12:3f:7b:e1:65:60:8d:57:93:e4:71: 6c:49:74:44:4d:87:2c:c5:8d:99:9f:32:d8:90:0f: 55:e9:27:85:22:07:cc:e5:9f:2c:2c:b6:4f:59:1a: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:62:20:4D:E6:21:1C:D0:2E:B6:82:B2:61:B9:8A:CA:9C:0D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/496e57df-4052-3374-ae88-e803a24982b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:66:61:1c:6e:86:32:df:83:c0:2f:8d:27:44:bf:2b:9e:df: 27:b0:e9:74:e0:23:a9:b2:33:d5:f6:2c:7f:e9:27:7e:49:53: 38:c4:18:ad:a3:25:f4:3a:a3:81:2c:ca:23:13:d2:19:f7:9b: d7:e7:fc:9e:bb:f8:27:90:fc:9c:44:e8:54:9f:11:52:c4:91: 12:eb:b8:42:bc:2f:d3:82:4a:05:e1:f2:c9:54:ff:91:c4:de: da:13:58:65:2c:86:eb:3d:19:64:60:2a:81:2d:ed:6f:4b:dc: 23:2d:a8:77:3b:16:68:ee:44:88:62:e4:13:42:ce:0d:1d:96: e0:38:43:04:7c:33:97:30:13:39:65:e6:dd:41:73:06:42:8f: 89:90:14:cb:e7:02:04:60:9a:9c:f4:70:50:ad:a2:36:21:90: 45:75:c4:a9:e1:04:6e:b6:89:fe:7a:e3:13:91:70:75:b2:8b: e3:9b:ea:d3:39:76:5a:ea:58:c4:4e:a1:b0:a5:77:04:3c:9f: 2a:a8:22:68:93:8e:4d:50:36:b9:e8:c7:73:9f:a0:f2:36:ce: fc:c8:04:19:82:eb:dc:9d:67:37:e9:1e:ee:3a:a4:dc:dc:97: 47:68:1d:87:f4:3c:1f:bd:43:c2:7b:ee:28:7b:af:c9:07:9b: 8f:fa:23:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh5j2bhTv31ioI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjIwNTZiYzQtNjI1My00N2VmLWIxMGUtYzAzZWVhNzExY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRTzzZZwC5Rs/951dySq9uyTyeetCpvmJa5I fwM/Q+9LyP3MB0i38CPo5jdjNzt6WN0CdzbVHp5doXn28Lr9+dqsV/IjkAmv61AD YFazPp3aXzQtqdUMOxE2l6fYHzCzThCxUFDP7LgYa4K1DrlyH0sZKpS+2EWMAezy HE2MuF0wjsmMpWwhZ2mY49FTRWEKbQ6cbTpdZqfzXJF423r3tWf6Xxo2CGaTB0HW UwoStTf0ZRCspA54d/ltGzKG5ZnKTNiyFymDc2a3yPft/EvxpBQ7f6wsEj974WVg jVeT5HFsSXRETYcsxY2ZnzLYkA9V6SeFIgfM5Z8sLLZPWRqeNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJHRYiBN5iEc0C62grJhuYrKnA1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDk2ZTU3ZGYtNDA1Mi0z Mzc0LWFlODgtZTgwM2EyNDk4MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujmAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXWZhHG6GMt+DwC+NJ0S/K57fJ7DpdOAjqbIz1fYsf+knfklTOMQY raMl9DqjgSzKIxPSGfeb1+f8nrv4J5D8nEToVJ8RUsSREuu4Qrwv04JKBeHyyVT/ kcTe2hNYZSyG6z0ZZGAqgS3tb0vcIy2odzsWaO5EiGLkE0LODR2W4DhDBHwzlzAT OWXm3UFzBkKPiZAUy+cCBGCanPRwUK2iNiGQRXXEqeEEbraJ/nrjE5FwdbKL45vq 0zl2WupYxE6hsKV3BDyfKqgiaJOOTVA2uejHc5+g8jbO/MgEGYLr3J1nN+ke7jqk 3NyXR2gdh/Q8H71DwnvuKHuvyQebj/oj+Q== -----END CERTIFICATE-----Generated at Fri Oct 9 22:36:59 2026 by rpki-client