$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa File: 849f8645-e463-3c64-a0a0-fb03b27e32a3.roa (raw, json) Hash identifier: RWq9bDvbizGy+iP3wuLLDgluLocg4qu3i/gL0txAbfo= Subject key identifier: B1:84:35:7D:5A:DC:F8:2B:3A:08:08:B8:33:74:71:DD:42:04:78:B1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49896C07865C554E00309200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8e:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:6c:07:86:5c:55:4e:00:30:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eff04441-7dc5-4a7d-bf02-cece3f03e6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:50:b5:34:76:38:2a:db:7c:73:2f:34:b0: 36:9f:b9:1f:91:66:e1:07:2d:c7:0f:b7:cd:86:62: 03:77:ef:88:4a:9d:49:4e:a1:0b:c8:13:cb:9c:6d: b3:5c:8c:36:cf:74:f8:b5:68:28:70:12:06:5e:fe: 01:d6:f9:0e:cd:6b:a3:de:84:8b:66:66:ab:92:72: 9a:5e:de:46:ae:b2:5c:51:c6:43:d9:8a:10:d1:7c: 50:f0:1d:32:8d:78:87:ad:7a:ea:b0:86:e6:c2:ef: 13:f0:5a:a8:0c:b7:4f:b7:59:50:1a:6f:a1:db:84: 11:e2:61:79:f3:ba:02:44:e6:bb:cb:1c:fb:09:7d: be:98:53:ec:e3:fc:e0:be:de:91:51:9f:55:5d:0d: 72:87:44:c5:62:de:4b:31:6c:6b:70:08:67:70:db: 01:de:23:3d:b4:7f:de:b1:95:b2:82:d3:3e:b3:10: d3:b6:93:c8:9c:49:58:f8:44:ee:55:c5:5c:c6:bf: 21:7e:91:46:64:e4:1c:ff:e6:03:55:9a:7f:84:52: 4a:9e:16:c7:e7:b0:51:98:d7:dc:b4:66:00:90:3c: 0a:18:c3:94:41:6f:56:bc:33:27:6e:19:a7:e8:f4: 8a:16:25:5d:79:32:ce:74:4e:a2:97:30:24:52:b2: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:84:35:7D:5A:DC:F8:2B:3A:08:08:B8:33:74:71:DD:42:04:78:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/849f8645-e463-3c64-a0a0-fb03b27e32a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fd:5b:9b:76:46:3f:19:d3:79:fc:3a:f2:56:d5:a6:d5:e9: 78:eb:15:da:13:00:d2:9d:5b:32:bc:83:c7:40:ab:0d:76:ae: 2f:1c:26:ed:20:e9:c1:5f:ed:e4:43:49:4c:38:28:0a:1c:59: d5:4a:8a:76:8a:83:9a:d2:4b:5a:f9:b8:a8:dc:c5:82:00:27: e0:08:ed:85:f5:99:47:49:90:62:35:95:3e:71:b5:59:95:39: f4:b5:22:c0:ce:8e:d0:00:40:5c:36:da:c3:f5:8e:74:78:b1: 71:17:f2:ac:0e:10:16:a1:0b:ce:d3:c2:c4:73:33:20:a5:62: 24:40:f4:54:bc:e6:ce:70:b7:16:54:36:37:90:7c:8c:f0:c2: 74:d5:60:c3:84:00:61:5d:44:7a:ee:aa:27:f9:d2:e2:86:e6: 21:cc:94:8f:a2:70:8c:e0:2c:46:51:94:89:42:ca:0e:a0:b8: 4d:66:d8:0a:ed:96:bb:48:b3:e9:fb:d2:73:9a:7e:d1:21:9d: 96:8d:94:09:12:ec:8a:6c:08:b9:fd:96:fa:06:da:f1:c7:e2: b2:73:6a:46:be:86:7c:b4:80:bf:55:0f:17:6a:f6:55:74:ed: 21:95:54:c7:db:c7:38:67:c1:be:57:f3:48:6f:06:3f:40:6d: 2a:76:01:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiWwHhlxVTgAwkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZmMDQ0NDEtN2RjNS00YTdkLWJmMDItY2VjZTNmMDNlNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0upQtTR2OCrbfHMvNLA2n7kfkWbhBy3HD7fN hmIDd++ISp1JTqELyBPLnG2zXIw2z3T4tWgocBIGXv4B1vkOzWuj3oSLZmarknKa Xt5GrrJcUcZD2YoQ0XxQ8B0yjXiHrXrqsIbmwu8T8FqoDLdPt1lQGm+h24QR4mF5 87oCROa7yxz7CX2+mFPs4/zgvt6RUZ9VXQ1yh0TFYt5LMWxrcAhncNsB3iM9tH/e sZWygtM+sxDTtpPInElY+ETuVcVcxr8hfpFGZOQc/+YDVZp/hFJKnhbH57BRmNfc tGYAkDwKGMOUQW9WvDMnbhmn6PSKFiVdeTLOdE6ilzAkUrKHWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLGENX1a3PgrOggIuDN0cd1CBHixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQ5Zjg2NDUtZTQ2My0z YzY0LWEwYTAtZmIwM2IyN2UzMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcP1bm3ZGPxnTefw68lbVptXpeOsV2hMA0p1bMryDx0CrDXauLxwm 7SDpwV/t5ENJTDgoChxZ1UqKdoqDmtJLWvm4qNzFggAn4AjthfWZR0mQYjWVPnG1 WZU59LUiwM6O0ABAXDbaw/WOdHixcRfyrA4QFqELztPCxHMzIKViJED0VLzmznC3 FlQ2N5B8jPDCdNVgw4QAYV1Eeu6qJ/nS4obmIcyUj6JwjOAsRlGUiULKDqC4TWbY Cu2Wu0iz6fvSc5p+0SGdlo2UCRLsimwIuf2W+gba8cfisnNqRr6GfLSAv1UPF2r2 VXTtIZVUx9vHOGfBvlfzSG8GP0BtKnYB/Q== -----END CERTIFICATE-----Generated at Fri Sep 25 20:43:23 2026 by rpki-client