$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa File: 598a07d9-5137-35a4-9464-b3e25ddea817.roa (raw, json) Hash identifier: Og0kApdUC+eqGz9OFbVhKLu7IqxG5Fy3cjNwuGzmpww= Subject key identifier: AC:F4:F0:AD:F1:01:2B:88:A5:A8:89:95:90:86:59:48:5F:A6:05:9B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F480D65945E05060FBF9C5C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8a:3800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:65:94:5e:05:06:0f:bf:9c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d6b81df4-9776-4177-a5c0-c8fb0699c1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:60:91:67:70:00:82:68:0e:16:26:aa:ab: cd:14:08:ab:93:d8:ab:b0:4f:12:88:0b:20:77:d5: f0:ec:2d:5c:1a:d6:e0:f0:e2:70:1f:e0:7a:63:dd: 6c:76:ff:80:b5:48:8e:9c:18:43:79:2c:19:05:8a: 7d:a4:29:0c:c5:c8:09:8a:1b:98:b1:14:b1:bd:a9: 39:2a:2e:53:a1:42:bd:43:a3:d8:48:68:f0:eb:e9: 31:29:63:f0:ed:5a:55:a1:aa:97:91:d9:92:33:86: 6b:0d:5e:bd:18:cc:24:6b:d6:c9:e2:e7:7b:c2:55: cb:93:e4:71:5a:c2:2f:8c:1f:7c:0e:bb:02:07:fa: f2:a3:7e:1c:ab:4f:1f:ac:d8:fc:c5:24:1b:f5:da: 01:00:c0:4e:4c:7a:09:72:c9:fc:f4:9c:f2:bf:a2: e1:87:2c:05:df:d3:ca:92:0e:57:b6:99:88:d0:80: fe:7c:c8:3e:0a:ff:1b:70:6b:08:5e:2f:c4:ee:7d: 36:86:17:72:07:3a:b4:11:6e:16:09:55:9f:2c:24: 57:1f:67:f2:5d:cb:52:84:43:a9:5a:76:a8:99:16: 56:cd:02:07:a1:d4:22:5a:14:e4:fa:1d:31:a4:d3: 72:a4:f6:10:c2:fd:ca:51:b7:45:35:96:35:e4:eb: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:F0:AD:F1:01:2B:88:A5:A8:89:95:90:86:59:48:5F:A6:05:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/598a07d9-5137-35a4-9464-b3e25ddea817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:3800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:89:d7:82:f0:e5:5c:db:42:67:c6:5b:96:3e:c2:a6:5b:f8: 6c:51:7c:03:4f:9e:3a:ba:3a:f7:81:92:6e:41:94:64:c2:65: cc:27:e0:5d:88:13:db:de:d1:1a:00:04:41:57:6c:70:77:d8: 45:52:db:7e:47:52:4a:39:6c:de:ff:b1:9f:6b:18:cb:2a:93: d4:58:c1:b8:cc:e5:1c:83:de:29:e7:82:e5:a5:a4:4f:94:41: 57:3f:a6:76:31:5f:64:c5:d9:c6:2f:c7:8d:51:be:e5:d0:a4: e2:9f:cb:c6:a8:ae:a5:9a:8a:f9:e9:13:8e:6b:7f:5b:d0:39: 91:c1:a1:00:0c:d1:5b:f7:d9:dd:a0:1e:ed:2b:09:d2:a5:ce: 1b:ad:26:a6:ef:6b:73:23:e6:d9:0c:80:2c:85:ab:d2:5d:08: c4:08:1e:e8:88:b3:c8:c6:63:b5:c8:cb:95:03:74:3e:51:8e: 32:fa:b3:f4:bc:2d:4b:32:f2:f4:d0:1e:58:c6:6d:d1:24:6a: 26:7c:b0:81:a2:78:6c:32:a4:59:d1:54:c6:70:04:11:4c:d0: d9:f6:a8:9c:c7:f9:b4:cd:c9:6e:c4:57:08:bc:48:5b:fb:60: 40:35:d5:6e:2f:da:f6:92:7f:74:bb:34:30:df:c3:9a:93:d7: 67:22:7a:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9IDWWUXgUGD7+cXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDZiODFkZjQtOTc3Ni00MTc3LWE1YzAtYzhmYjA2OTljMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglNgkWdwAIJoDhYmqqvNFAirk9irsE8SiAsg d9Xw7C1cGtbg8OJwH+B6Y91sdv+AtUiOnBhDeSwZBYp9pCkMxcgJihuYsRSxvak5 Ki5ToUK9Q6PYSGjw6+kxKWPw7VpVoaqXkdmSM4ZrDV69GMwka9bJ4ud7wlXLk+Rx WsIvjB98DrsCB/ryo34cq08frNj8xSQb9doBAMBOTHoJcsn89Jzyv6LhhywF39PK kg5XtpmI0ID+fMg+Cv8bcGsIXi/E7n02hhdyBzq0EW4WCVWfLCRXH2fyXctShEOp WnaomRZWzQIHodQiWhTk+h0xpNNypPYQwv3KUbdFNZY15OsTBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKz08K3xASuIpaiJlZCGWUhfpgWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTk4YTA3ZDktNTEzNy0z NWE0LTk0NjQtYjNlMjVkZGVhODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASInXgvDlXNtCZ8Zblj7Cplv4bFF8A0+eOro694GSbkGUZMJlzCfg XYgT297RGgAEQVdscHfYRVLbfkdSSjls3v+xn2sYyyqT1FjBuMzlHIPeKeeC5aWk T5RBVz+mdjFfZMXZxi/HjVG+5dCk4p/LxqiupZqK+ekTjmt/W9A5kcGhAAzRW/fZ 3aAe7SsJ0qXOG60mpu9rcyPm2QyALIWr0l0IxAge6IizyMZjtcjLlQN0PlGOMvqz 9LwtSzLy9NAeWMZt0SRqJnywgaJ4bDKkWdFUxnAEEUzQ2faonMf5tM3JbsRXCLxI W/tgQDXVbi/a9pJ/dLs0MN/DmpPXZyJ6aQ== -----END CERTIFICATE-----Generated at Sat Oct 3 14:28:48 2026 by rpki-client