$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d48c4808-14d1-31fd-ab1c-e234d765193c.roa File: d48c4808-14d1-31fd-ab1c-e234d765193c.roa (raw, json) Hash identifier: Q8feEQO5WeT0HXDFfC46s4UYmQGLBsy2r2NCzJs0CJ4= Subject key identifier: 51:65:E1:60:1B:A2:6D:6C:54:28:11:6A:75:D4:C0:4D:08:9B:85:45 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F2C225D10BAFC8BF023258F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d48c4808-14d1-31fd-ab1c-e234d765193c.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e87:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5d:10:ba:fc:8b:f0:23:25:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=28de75a9-df9a-420a-9f38-3e561a56d6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:a0:78:c7:16:16:30:ac:c3:2a:bd:58:0a: 3d:94:56:63:f8:37:a8:7f:a6:7e:59:ea:84:31:e8: 02:d5:58:94:f7:d2:c1:9a:a1:6e:d4:3c:73:52:21: c3:f8:45:ab:e6:95:0f:91:fe:83:3c:42:09:6c:28: 05:5d:37:62:d5:ea:f6:94:20:ae:ec:9b:ee:09:49: ba:d7:50:53:03:2c:a0:d6:d3:89:f4:2e:d2:87:45: 01:36:b5:26:f3:0c:57:95:04:b7:6f:d8:c0:30:3c: fe:dc:17:ee:df:9e:f8:bb:bf:be:cc:28:2c:d7:98: 00:7f:ed:2d:c6:93:76:31:42:af:0e:8f:ee:9b:df: cc:66:47:09:57:4a:aa:20:1e:ee:66:d1:27:6f:31: 0d:67:42:b1:ee:0b:63:7a:d9:3b:67:52:9d:02:91: 79:12:03:86:bb:d2:1b:53:e6:d4:c0:85:fd:96:b2: 34:bc:6e:d6:52:6c:51:ad:0f:7f:db:44:20:68:da: 83:0f:06:15:c6:92:38:b6:29:7a:05:ad:24:24:47: 19:48:5d:b4:73:60:ca:ed:e7:e8:aa:d1:d8:f0:63: de:18:c3:8f:c4:f3:7d:8a:48:91:0f:d9:48:fc:32: cb:b5:a5:a7:56:58:48:1d:47:20:df:69:b8:26:dc: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:65:E1:60:1B:A2:6D:6C:54:28:11:6A:75:D4:C0:4D:08:9B:85:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d48c4808-14d1-31fd-ab1c-e234d765193c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:fa:e3:60:74:76:d9:fc:4e:e7:37:15:57:91:97:27:f2:56: d5:e2:ca:84:ac:e7:64:98:19:91:e7:06:f2:23:aa:c0:2f:4d: 7f:82:60:94:8c:70:62:fb:da:e0:6d:c9:72:bf:91:ed:69:bd: c7:30:c0:02:1d:41:19:53:99:f2:09:37:6a:0c:d6:91:55:a9: 41:ba:b2:73:6d:23:21:77:9c:e1:ec:1f:41:73:b8:8a:2f:88: 2b:11:93:0c:c5:40:b0:9b:fd:01:10:39:46:b4:59:37:b8:04: fe:93:c7:c6:a5:3d:39:b4:f8:d4:ba:de:f0:66:be:39:87:c5: d4:7a:17:59:09:b9:ea:c7:b2:b1:14:6b:81:e3:16:0d:b4:94: 31:d6:34:8a:4c:d5:e3:44:a9:8f:57:bf:35:3e:90:90:83:2b: 05:fe:68:e6:ec:38:e1:0b:07:44:19:18:13:19:7c:49:33:94: 43:39:57:c5:d1:ef:cd:55:1a:d0:ea:1c:b4:8d:b3:05:19:58: c8:13:a0:e6:9d:72:d1:7d:a9:01:68:62:64:4f:6c:c2:d0:03: f0:a1:cf:a4:49:a6:33:71:fd:63:28:36:c0:fa:83:18:71:cd: 6a:67:b5:96:83:33:a5:e4:10:0b:e6:db:33:1a:af:d7:a7:7d: f7:74:da:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8sIl0QuvyL8CMlj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk MjhkZTc1YTktZGY5YS00MjBhLTlmMzgtM2U1NjFhNTZkNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZWgeMcWFjCswyq9WAo9lFZj+Deof6Z+WeqE MegC1ViU99LBmqFu1DxzUiHD+EWr5pUPkf6DPEIJbCgFXTdi1er2lCCu7JvuCUm6 11BTAyyg1tOJ9C7Sh0UBNrUm8wxXlQS3b9jAMDz+3Bfu3574u7++zCgs15gAf+0t xpN2MUKvDo/um9/MZkcJV0qqIB7uZtEnbzENZ0Kx7gtjetk7Z1KdApF5EgOGu9Ib U+bUwIX9lrI0vG7WUmxRrQ9/20QgaNqDDwYVxpI4til6Ba0kJEcZSF20c2DK7efo qtHY8GPeGMOPxPN9ikiRD9lI/DLLtaWnVlhIHUcg32m4JtxFQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFFl4WAbom1sVCgRanXUwE0Im4VFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDQ4YzQ4MDgtMTRkMS0z MWZkLWFiMWMtZTIzNGQ3NjUxOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh0ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk/rjYHR22fxO5zcVV5GXJ/JW1eLKhKznZJgZkecG8iOqwC9Nf4Jg lIxwYvva4G3Jcr+R7Wm9xzDAAh1BGVOZ8gk3agzWkVWpQbqyc20jIXec4ewfQXO4 ii+IKxGTDMVAsJv9ARA5RrRZN7gE/pPHxqU9ObT41Lre8Ga+OYfF1HoXWQm56sey sRRrgeMWDbSUMdY0ikzV40Spj1e/NT6QkIMrBf5o5uw44QsHRBkYExl8STOUQzlX xdHvzVUa0OoctI2zBRlYyBOg5p1y0X2pAWhiZE9swtAD8KHPpEmmM3H9Yyg2wPqD GHHName1loMzpeQQC+bbMxqv16d993TanA== -----END CERTIFICATE-----Generated at Tue Sep 22 21:08:40 2026 by rpki-client