$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa File: f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa (raw, json) Hash identifier: cNlbd7nI6PbcryRfzJXbo2E1xbdQccq6k3kUSyJDRtc= Subject key identifier: 34:C0:C3:38:08:B0:A4:CD:E1:EE:EB:64:25:1E:15:2A:C9:0E:74:D3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3D7025860B567D00366B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8b:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:70:25:86:0b:56:7d:00:36:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=c51c0252-8048-4bf3-97fe-5b2f3d6ba868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:23:84:2e:24:f8:49:a8:60:6f:47:6f:3a: 21:ea:6e:87:bf:d0:82:7d:d2:5f:1a:59:8c:40:6d: 53:da:12:e4:91:4a:ee:ed:6e:36:60:21:00:db:ee: d0:ef:32:7b:01:60:70:a8:ab:94:ae:a8:37:3e:6d: 5f:a5:3f:4a:bf:4f:ac:52:79:95:ed:9e:11:88:4d: d5:4a:61:49:f5:51:fd:6f:a7:f3:ec:33:9c:fa:e7: 2a:02:ee:da:51:6e:5d:03:d2:f7:41:84:9b:22:47: ab:0a:5d:d7:5a:fa:c8:2d:4b:05:8c:25:04:ab:61: fe:71:f5:37:a0:85:cb:de:35:10:58:c7:ff:44:ca: a9:75:6a:12:6d:7d:3d:67:38:6b:e7:ff:be:0e:a4: 4d:06:2a:8a:d4:42:56:c4:94:bd:70:2b:94:52:8e: 3a:9b:17:67:c8:b9:a2:f9:e9:f4:7a:2a:c3:ca:05: 6c:d3:24:0f:fd:41:55:ef:58:da:af:ba:4c:0f:ec: e0:00:e0:34:8f:f7:e7:01:09:02:85:05:05:90:b2: cf:fe:03:7f:38:2e:8f:ee:a4:0d:e7:3f:a8:d3:72: 4f:99:83:93:f2:29:39:d9:7d:d1:1d:f1:df:98:e3: 01:35:a5:56:66:50:90:d8:13:a7:58:8b:25:e9:d4: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:C3:38:08:B0:A4:CD:E1:EE:EB:64:25:1E:15:2A:C9:0E:74:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:56:34:1f:c8:32:a6:36:c5:cc:e6:fa:5b:78:10:d0:41:af: dc:f0:cf:94:d2:f5:3d:b7:bd:c7:67:18:db:8d:52:16:e1:42: 8a:84:a4:86:b8:ee:9f:4e:a5:95:21:c0:e2:9f:ab:69:1b:35: b5:0f:e9:7d:7f:0b:58:6d:07:62:4d:3b:8c:7e:d8:a8:9d:a8: 80:e9:27:d3:31:19:e0:eb:3e:92:ca:1e:be:bb:e0:60:9e:4f: 34:02:f6:1e:5e:67:72:56:3b:b4:97:6a:1c:48:3c:af:f6:7d: cb:d7:31:34:cf:2d:19:78:9c:1c:26:85:be:0b:d1:ac:36:da: 4a:5c:8a:cf:90:e2:d3:52:8d:75:c8:1e:d0:b3:e4:47:2a:3f: 25:47:ad:66:88:2e:06:2e:78:99:4d:70:65:11:1b:aa:7e:6c: fa:72:07:8a:98:01:73:74:d7:f9:d2:a4:61:64:22:4a:1e:40: 24:3c:9d:ab:70:9d:0f:4e:93:4e:46:3e:17:44:85:3f:38:df: d2:87:78:7c:dd:0e:fa:36:30:48:f5:bc:0e:41:58:3e:54:dc: 43:78:60:bb:99:33:ab:e8:25:e9:5c:63:fc:6c:66:f5:e9:be: a2:0f:15:c5:00:a1:33:78:f7:51:25:04:b6:9f:74:13:b0:89: ba:c0:f5:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPXAlhgtWfQA2awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YzUxYzAyNTItODA0OC00YmYzLTk3ZmUtNWIyZjNkNmJhODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL4jhC4k+EmoYG9Hbzoh6m6Hv9CCfdJfGlmM QG1T2hLkkUru7W42YCEA2+7Q7zJ7AWBwqKuUrqg3Pm1fpT9Kv0+sUnmV7Z4RiE3V SmFJ9VH9b6fz7DOc+ucqAu7aUW5dA9L3QYSbIkerCl3XWvrILUsFjCUEq2H+cfU3 oIXL3jUQWMf/RMqpdWoSbX09Zzhr5/++DqRNBiqK1EJWxJS9cCuUUo46mxdnyLmi +en0eirDygVs0yQP/UFV71jar7pMD+zgAOA0j/fnAQkChQUFkLLP/gN/OC6P7qQN 5z+o03JPmYOT8ik52X3RHfHfmOMBNaVWZlCQ2BOnWIsl6dQDnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDTAwzgIsKTN4e7rZCUeFSrJDnTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjNmM2UyYTAtZGRmMC0z YjVmLWFiMzUtYmE4MWUzMmQzYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui9gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkVY0H8gypjbFzOb6W3gQ0EGv3PDPlNL1Pbe9x2cY241SFuFCioSk hrjun06llSHA4p+raRs1tQ/pfX8LWG0HYk07jH7YqJ2ogOkn0zEZ4Os+ksoevrvg YJ5PNAL2Hl5nclY7tJdqHEg8r/Z9y9cxNM8tGXicHCaFvgvRrDbaSlyKz5Di01KN dcge0LPkRyo/JUetZoguBi54mU1wZREbqn5s+nIHipgBc3TX+dKkYWQiSh5AJDyd q3CdD06TTkY+F0SFPzjf0od4fN0O+jYwSPW8DkFYPlTcQ3hgu5kzq+gl6Vxj/Gxm 9em+og8VxQChM3j3USUEtp90E7CJusD1CA== -----END CERTIFICATE-----Generated at Mon Sep 28 16:42:31 2026 by rpki-client