$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ece1fb4d-448b-351a-baaf-e7918cc236ee.roa File: ece1fb4d-448b-351a-baaf-e7918cc236ee.roa (raw, json) Hash identifier: aSwyksjwDcguXCXtOWOWaUHmvrgCf1iA2XICC3yttm8= Subject key identifier: 32:87:1F:37:B7:AF:4E:5D:20:48:6E:A5:D5:26:E2:CD:AA:D3:6D:0C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F331D2C4DC9699BF895AFEC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ece1fb4d-448b-351a-baaf-e7918cc236ee.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 2604:2e8a:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2c:4d:c9:69:9b:f8:95:af:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=72c66883-400e-4c17-b613-91112916f799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:07:38:14:d0:79:2e:47:c5:10:5c:0a:ef: 51:5e:fa:dc:f7:16:6d:db:f9:99:58:07:d7:39:9e: a3:88:1e:59:d2:42:eb:eb:cc:48:e9:11:fb:bf:52: 55:57:01:28:e4:56:44:de:6b:9a:d7:ee:06:80:f3: 3e:11:c2:2e:54:e9:e3:0b:34:90:66:16:e8:eb:fb: c1:45:cc:3c:1b:16:e0:cb:c8:51:03:d6:de:de:67: 7e:35:1a:6f:73:97:ad:a2:df:c9:c8:a9:b0:fb:a8: be:77:b8:85:db:62:a0:0b:2b:61:49:53:91:11:9f: 50:d3:09:47:d6:42:d2:f6:46:21:c9:4c:0a:6f:7c: b9:b3:51:48:ce:fa:6d:c8:f9:32:30:e1:62:e6:3a: 5d:c2:88:85:d2:c2:6f:2e:39:20:86:31:64:f8:d1: f1:ac:6e:8a:34:11:27:f0:16:ee:99:00:a7:ad:d0: ba:78:c0:4e:71:da:4c:4d:e7:36:09:65:1c:db:f4: d8:32:b9:e7:72:e2:99:bf:8d:23:cc:1d:06:78:07: bf:53:1f:f3:7d:fb:a7:70:ef:8f:ca:0a:39:25:86: 02:ab:e3:db:9e:ef:7e:09:0a:01:5e:a1:0f:e1:ca: ce:58:b1:95:a5:1f:f1:06:c4:fa:54:5e:53:04:7e: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:87:1F:37:B7:AF:4E:5D:20:48:6E:A5:D5:26:E2:CD:AA:D3:6D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ece1fb4d-448b-351a-baaf-e7918cc236ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5b:29:bb:72:35:cd:55:a8:e0:f8:f0:74:e9:99:25:08:6f: be:f4:bf:37:d9:15:e3:9a:64:a1:e5:71:fc:84:25:71:4d:e7: 00:53:cf:eb:b2:64:f1:da:18:40:a0:a5:b1:61:73:3c:2f:03: ec:a2:ab:dd:6b:2c:95:97:3a:ea:83:1e:f0:b5:6f:c6:58:53: 4d:82:86:ba:1e:cb:34:b1:7c:1c:37:f0:f1:f5:cf:5f:8c:8e: 86:28:07:a4:ed:b4:e8:3b:b9:1c:56:c4:b0:69:36:96:a8:1e: 42:39:1f:09:17:b5:5a:0b:fa:38:95:3f:06:c6:d8:94:3c:2b: 1b:4f:c6:09:b5:d6:95:58:48:3a:34:ce:b2:e3:cc:b0:3d:b6: 08:06:32:4b:c1:95:e7:bd:59:66:59:2b:f1:ce:ae:2a:bf:3e: 9d:17:4e:64:a4:87:1f:e0:60:79:f3:ba:9f:2c:b5:63:1f:69: d7:c1:d1:1d:35:48:70:46:64:fe:d2:b2:7f:ae:43:8e:34:99: 5e:ac:35:f3:4a:dd:86:30:8f:76:1a:66:37:33:78:69:a8:5d: c6:fa:4a:e9:f1:a6:39:ce:a4:d9:41:55:2c:c6:3d:1a:74:99: a1:f9:6b:7e:03:d7:99:f2:8b:f4:1f:a9:31:fc:20:3a:6d:c9: da:22:d3:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8zHSxNyWmb+JWv7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NzJjNjY4ODMtNDAwZS00YzE3LWI2MTMtOTExMTI5MTZmNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY8HOBTQeS5HxRBcCu9RXvrc9xZt2/mZWAfX OZ6jiB5Z0kLr68xI6RH7v1JVVwEo5FZE3mua1+4GgPM+EcIuVOnjCzSQZhbo6/vB Rcw8Gxbgy8hRA9be3md+NRpvc5etot/JyKmw+6i+d7iF22KgCythSVOREZ9Q0wlH 1kLS9kYhyUwKb3y5s1FIzvptyPkyMOFi5jpdwoiF0sJvLjkghjFk+NHxrG6KNBEn 8BbumQCnrdC6eMBOcdpMTec2CWUc2/TYMrnncuKZv40jzB0GeAe/Ux/zffuncO+P ygo5JYYCq+Pbnu9+CQoBXqEP4crOWLGVpR/xBsT6VF5TBH5EcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDKHHze3r05dIEhupdUm4s2q020MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWNlMWZiNGQtNDQ4Yi0z NTFhLWJhYWYtZTc5MThjYzIzNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXFspu3I1zVWo4PjwdOmZJQhvvvS/N9kV45pkoeVx/IQlcU3nAFPP 67Jk8doYQKClsWFzPC8D7KKr3WsslZc66oMe8LVvxlhTTYKGuh7LNLF8HDfw8fXP X4yOhigHpO206Du5HFbEsGk2lqgeQjkfCRe1Wgv6OJU/BsbYlDwrG0/GCbXWlVhI OjTOsuPMsD22CAYyS8GV571ZZlkr8c6uKr8+nRdOZKSHH+BgefO6nyy1Yx9p18HR HTVIcEZk/tKyf65DjjSZXqw180rdhjCPdhpmNzN4aahdxvpK6fGmOc6k2UFVLMY9 GnSZoflrfgPXmfKL9B+pMfwgOm3J2iLTQw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:23:58 2026 by rpki-client