$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa File: a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa (raw, json) Hash identifier: oaysFLNsQ2oxiGLDDj+Wg0Sun3JwYXREb2xeJ05kUxo= Subject key identifier: A2:3F:38:41:F1:61:62:18:78:69:85:A9:D8:F7:2B:AE:17:08:2E:39 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4973062206E75C6199857100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8f:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:06:22:06:e7:5c:61:99:85:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec93fc98-6e23-447f-aed6-4eff55a22fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:6f:fe:ac:95:4b:2e:d4:ad:61:b3:9c:d7: 1a:8c:f3:6b:41:de:d6:a0:5e:75:31:f6:90:42:ad: 3e:27:a8:28:b4:38:99:80:ec:44:f5:38:a4:ba:14: 7b:1a:e7:4d:52:61:77:d1:e9:5a:79:4a:1b:fc:f8: 28:3f:33:21:a3:63:39:2f:ef:81:5b:9c:00:14:03: 03:e3:99:f0:3b:64:c6:e3:c3:80:b9:04:54:8d:30: 02:12:86:fd:a6:47:dc:15:90:97:b5:63:34:a6:10: aa:5a:d3:17:99:90:9b:8e:27:91:05:8d:0b:62:f6: dc:b0:b5:1c:e6:df:18:77:b9:ed:a8:c8:fb:46:f8: 45:e6:87:2d:29:b3:5a:fd:f8:86:91:c8:ff:c3:a8: 0f:15:67:4b:c8:82:d9:b1:4e:b1:5d:d4:1e:b0:99: 21:32:c0:f0:cc:f9:4e:65:24:75:d2:2f:8d:86:3d: 8e:53:8f:fc:3d:45:bf:b9:f8:6c:cb:69:cf:ea:a6: 8d:59:b0:5a:50:c0:0a:a2:20:db:34:ca:55:cf:84: d7:88:67:0e:6f:90:f4:b6:0f:5a:7d:86:e1:b4:ac: e3:18:05:55:3b:61:54:47:1b:4e:cb:ee:53:9a:82: 23:df:a5:54:0c:ca:2d:ac:88:43:17:ad:f3:58:64: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3F:38:41:F1:61:62:18:78:69:85:A9:D8:F7:2B:AE:17:08:2E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a08f4c9a-fef2-36ee-9e67-2f92048c493d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:80:bd:21:a4:3b:81:f7:22:d8:72:c0:a0:be:36:ab:2c: 65:ac:02:e8:bf:e3:e7:ad:5e:ad:7c:1b:aa:e0:5a:99:aa:bf: c1:22:b3:00:57:0b:9f:23:af:7a:3d:80:5e:82:96:53:72:53: a0:82:8a:cf:21:df:2b:eb:b7:6b:50:50:76:8c:93:9e:50:6c: 1e:65:42:cc:5a:ef:16:ef:b1:84:78:38:43:f2:47:53:99:7e: bb:b3:f2:e2:8d:be:c7:3b:6f:9d:c0:ca:1c:29:52:47:5a:fb: aa:5f:ac:17:27:6b:6c:73:d3:a0:b7:35:3a:e2:6d:2a:ad:c1: e9:cd:5d:ed:61:84:56:1f:93:eb:4a:be:d7:45:5b:9f:8e:bf: 79:ce:0c:9b:61:31:da:69:c1:92:04:95:19:a3:f5:1a:f2:88: 32:6a:6f:d3:7b:28:de:e0:d9:3e:00:94:9f:7a:b8:3b:3b:9d: 94:e2:ff:4f:87:01:4f:63:9c:e9:aa:f5:8e:2a:06:52:c8:0f: 7f:00:40:d1:fd:5e:57:1e:9b:55:43:66:cb:b4:e8:8b:cb:b2: 97:cb:bf:13:3a:60:dd:ea:4b:ad:cc:f0:b4:f6:77:9e:0f:ef: 77:17:22:8d:02:fb:80:62:a9:7c:2e:ec:76:39:ef:15:5b:dd: fe:e8:01:6d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcwYiBudcYZmFcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM5M2ZjOTgtNmUyMy00NDdmLWFlZDYtNGVmZjU1YTIyZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9dv/qyVSy7UrWGznNcajPNrQd7WoF51MfaQ Qq0+J6gotDiZgOxE9TikuhR7GudNUmF30elaeUob/PgoPzMho2M5L++BW5wAFAMD 45nwO2TG48OAuQRUjTACEob9pkfcFZCXtWM0phCqWtMXmZCbjieRBY0LYvbcsLUc 5t8Yd7ntqMj7RvhF5octKbNa/fiGkcj/w6gPFWdLyILZsU6xXdQesJkhMsDwzPlO ZSR10i+Nhj2OU4/8PUW/ufhsy2nP6qaNWbBaUMAKoiDbNMpVz4TXiGcOb5D0tg9a fYbhtKzjGAVVO2FURxtOy+5TmoIj36VUDMotrIhDF63zWGTUnwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKI/OEHxYWIYeGmFqdj3K64XCC45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTA4ZjRjOWEtZmVmMi0z NmVlLTllNjctMmY5MjA0OGM0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjFeAvSGkO4H3IthywKC+NqssZawC6L/j561erXwbquBamaq/wSKz AFcLnyOvej2AXoKWU3JToIKKzyHfK+u3a1BQdoyTnlBsHmVCzFrvFu+xhHg4Q/JH U5l+u7Py4o2+xztvncDKHClSR1r7ql+sFydrbHPToLc1OuJtKq3B6c1d7WGEVh+T 60q+10Vbn46/ec4Mm2Ex2mnBkgSVGaP1GvKIMmpv03so3uDZPgCUn3q4OzudlOL/ T4cBT2Oc6ar1jioGUsgPfwBA0f1eVx6bVUNmy7Toi8uyl8u/Ezpg3epLrczwtPZ3 ng/vdxcijQL7gGKpfC7sdjnvFVvd/ugBbQ== -----END CERTIFICATE-----Generated at Mon Sep 28 23:21:37 2026 by rpki-client