$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de72c890-619d-3a05-a21b-5fcbead16c8e.roa File: de72c890-619d-3a05-a21b-5fcbead16c8e.roa (raw, json) Hash identifier: d/OqNWw1YOHOpnA7vixGTbWKep5vlStvwK3+Aw3eenE= Subject key identifier: 59:3D:32:97:2E:CB:27:49:EB:05:42:5A:C0:78:FA:D8:A6:91:5E:EE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4987B85E50EC157B03ED5230 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de72c890-619d-3a05-a21b-5fcbead16c8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8b:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b8:5e:50:ec:15:7b:03:ed:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c539e0f-bfc5-487e-bad1-66fd1622a0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:69:53:81:67:7b:04:3c:c1:cd:2a:31:09: bf:41:70:05:ce:3b:00:ad:6b:06:1b:d3:bd:cb:aa: 78:0f:16:36:be:31:ad:35:d7:34:be:4b:ff:d2:bc: 32:74:a5:66:8a:58:ec:46:b1:ba:9e:08:ac:f1:70: 52:73:b5:26:37:8b:bc:e9:e4:0e:14:c1:03:8f:d7: 79:19:07:fc:65:e2:81:3a:f2:d4:c7:a2:3a:79:db: d9:25:5c:df:17:55:1a:58:70:77:9c:b8:fe:56:1b: 5c:ba:62:c9:7e:6e:41:ab:54:ff:af:6c:57:80:1d: 07:71:f6:28:f3:cb:b4:32:f1:2b:0b:16:9c:74:e0: b9:61:f9:9d:cd:1f:e3:20:c7:d0:54:fc:e8:09:c4: 1e:2b:f7:cc:95:1e:d0:20:72:cf:1d:dd:ad:55:0f: 90:de:65:92:a2:f2:06:46:5c:42:a3:f9:df:51:63: 49:e1:8f:99:94:fd:4b:1c:a7:10:62:a0:dc:8a:3c: 9e:e0:2e:63:55:b9:e9:59:21:9b:b7:1d:d8:0d:05: fb:c0:4d:c9:d6:d5:1a:9a:37:43:e0:21:80:88:6a: 79:90:e0:a9:9b:07:c3:0b:c8:0e:d3:c6:ab:32:80: d1:25:98:1f:ce:6d:4a:99:35:db:85:99:27:56:4e: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3D:32:97:2E:CB:27:49:EB:05:42:5A:C0:78:FA:D8:A6:91:5E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de72c890-619d-3a05-a21b-5fcbead16c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d1:22:cb:4e:7e:3d:14:63:33:60:4d:be:08:48:78:9f:2b: c3:ce:74:16:64:22:88:8b:fa:4c:ec:2a:1c:9b:f0:5d:10:fe: 57:31:6c:c2:d9:a9:b9:3b:0e:fd:83:b3:f1:5c:57:16:90:76: 08:7f:64:4a:a1:d7:c3:9a:40:7e:34:47:24:c9:5d:1b:89:26: f5:ef:bd:7d:e2:d8:ef:15:a4:b6:95:6a:c7:4e:a8:3a:56:20: 7c:8a:e9:df:b0:b2:96:89:93:a1:e9:aa:8f:e3:6f:14:10:e9: d5:c1:bc:20:61:e6:86:b5:f0:49:49:4a:bd:a2:df:29:d4:47: 9e:bc:3b:f6:a7:e6:6d:65:40:cf:2e:ac:9b:2f:07:dc:40:b0: 77:64:bb:ba:6c:d3:98:31:9b:04:83:c9:27:b8:dd:e6:a5:65: b9:48:20:b1:c7:03:d1:b3:c9:27:77:17:a0:6a:a4:be:1e:34: 0a:96:17:5a:7b:c6:38:ab:2a:10:b8:67:ce:b4:f3:e8:df:65: 41:d3:1b:75:67:0c:3c:4d:06:eb:21:5f:91:98:a9:a2:b9:f4: bb:73:95:07:ef:3b:0d:f9:12:b9:0f:d6:44:a9:b8:87:0c:22: 0b:12:d1:c8:e9:cb:aa:e8:35:89:37:2f:3c:b9:64:ce:13:83: 60:34:10:67 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh7heUOwVewPtUjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWM1MzllMGYtYmZjNS00ODdlLWJhZDEtNjZmZDE2MjJhMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp5pU4FnewQ8wc0qMQm/QXAFzjsArWsGG9O9 y6p4DxY2vjGtNdc0vkv/0rwydKVmiljsRrG6ngis8XBSc7UmN4u86eQOFMEDj9d5 GQf8ZeKBOvLUx6I6edvZJVzfF1UaWHB3nLj+VhtcumLJfm5Bq1T/r2xXgB0HcfYo 88u0MvErCxacdOC5YfmdzR/jIMfQVPzoCcQeK/fMlR7QIHLPHd2tVQ+Q3mWSovIG RlxCo/nfUWNJ4Y+ZlP1LHKcQYqDcijye4C5jVbnpWSGbtx3YDQX7wE3J1tUamjdD 4CGAiGp5kOCpmwfDC8gO08arMoDRJZgfzm1KmTXbhZknVk7k7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFk9MpcuyydJ6wVCWsB4+timkV7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGU3MmM4OTAtNjE5ZC0z YTA1LWEyMWItNWZjYmVhZDE2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAddEiy05+PRRjM2BNvghIeJ8rw850FmQiiIv6TOwqHJvwXRD+VzFs wtmpuTsO/YOz8VxXFpB2CH9kSqHXw5pAfjRHJMldG4km9e+9feLY7xWktpVqx06o OlYgfIrp37CylomToemqj+NvFBDp1cG8IGHmhrXwSUlKvaLfKdRHnrw79qfmbWVA zy6smy8H3ECwd2S7umzTmDGbBIPJJ7jd5qVluUggsccD0bPJJ3cXoGqkvh40CpYX WnvGOKsqELhnzrTz6N9lQdMbdWcMPE0G6yFfkZiporn0u3OVB+87DfkSuQ/WRKm4 hwwiCxLRyOnLqug1iTcvPLlkzhODYDQQZw== -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:46 2026 by rpki-client