$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa File: 409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa (raw, json) Hash identifier: B7QNcWFdghGufWyN4oPmKlpFWjTnv5rWmmG0PHaTeT8= Subject key identifier: DA:97:C9:B9:1A:F8:5B:47:A8:01:3E:B5:51:B8:32:3D:7A:60:9C:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F629318E7A423638C9B56BB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8d:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:18:e7:a4:23:63:8c:9b:56:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=85b4aa17-f227-429c-9af3-d951f2605e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:44:ef:dc:d5:b8:fd:c8:3e:46:e9:2d:80: 67:45:31:e0:3b:f7:5d:71:94:73:81:f7:4a:d5:8e: 98:8b:53:72:3a:30:5a:a9:65:47:05:07:61:32:0b: 6a:e8:90:a6:7b:53:9f:76:b8:3f:53:a2:eb:53:01: ff:47:ba:7e:3c:1e:6e:df:a0:55:2a:1a:5f:cd:02: e1:be:0d:67:a7:41:c6:16:ed:33:06:2c:31:ed:58: da:57:e9:8c:35:00:ba:16:83:0f:24:64:17:9b:be: 6b:36:e9:ad:b8:bd:a8:09:65:4f:b3:16:d3:29:37: 7d:1c:b5:b1:58:c6:f6:21:22:13:9d:28:ba:59:92: 25:bc:3a:14:54:32:30:b4:8b:52:95:b4:34:f0:fd: a3:d2:86:6b:2b:78:cf:41:9d:ed:7c:ed:70:e4:5e: 70:04:85:f2:29:5d:de:c9:a5:9b:96:63:c1:f3:3c: 6b:7c:79:13:3d:08:39:00:16:59:22:35:1f:e3:c9: 76:9a:ad:0b:0f:c6:39:97:80:48:8c:38:6b:61:8f: dc:9e:02:2b:33:92:d1:69:b6:c7:1e:a3:3f:86:ca: 53:19:31:0a:37:60:ac:f9:37:34:80:20:a6:d2:b9: 94:3b:01:cd:df:60:42:c5:1e:49:9c:90:b9:4d:e5: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:C9:B9:1A:F8:5B:47:A8:01:3E:B5:51:B8:32:3D:7A:60:9C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/409de6e4-7502-3c59-bbf5-7c64173f2dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5a:8b:61:29:44:bf:1f:26:22:a2:4f:96:14:c1:6a:cb:61: c4:df:f5:ff:34:dc:3f:50:78:03:6c:df:56:ba:8b:86:0c:40: 4d:05:93:fc:2d:e7:f2:bb:45:ed:52:0a:b5:78:83:3c:fd:27: f7:ac:78:fa:82:d8:67:5c:87:a1:05:c7:b4:31:0d:0e:09:e1: 6f:c9:8b:7d:fa:ed:7f:5f:a4:97:db:5b:51:1c:a6:4d:7e:f9: 5f:8d:52:e8:22:24:2f:28:23:c9:d6:fd:48:83:df:40:e3:73: 05:aa:06:69:ba:15:c1:a2:f3:e4:0d:44:11:24:29:45:2c:9e: a3:9f:e7:f8:9f:32:38:d6:34:2a:a9:96:ca:51:fd:ef:21:11: 79:9f:18:21:74:c6:28:fc:2b:cd:14:86:eb:6a:29:d4:58:3c: 45:4b:37:3e:44:10:77:da:cb:1b:41:67:e9:b4:27:09:86:a1: c3:34:cc:20:8b:fe:40:23:5e:91:a8:f0:70:1d:cb:9d:75:95: fb:c1:a0:50:5c:16:28:50:90:f2:1b:09:fa:95:24:dd:e0:03: 87:d0:87:05:08:20:7d:d8:99:eb:ff:57:33:3b:05:3d:2b:63: d5:6f:31:e3:c2:97:55:f1:6f:d8:84:f5:74:7a:59:6a:88:c7: ca:74:37:1e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9ikxjnpCNjjJtWu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODViNGFhMTctZjIyNy00MjljLTlhZjMtZDk1MWYyNjA1ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV9E79zVuP3IPkbpLYBnRTHgO/ddcZRzgfdK 1Y6Yi1NyOjBaqWVHBQdhMgtq6JCme1Ofdrg/U6LrUwH/R7p+PB5u36BVKhpfzQLh vg1np0HGFu0zBiwx7VjaV+mMNQC6FoMPJGQXm75rNumtuL2oCWVPsxbTKTd9HLWx WMb2ISITnSi6WZIlvDoUVDIwtItSlbQ08P2j0oZrK3jPQZ3tfO1w5F5wBIXyKV3e yaWblmPB8zxrfHkTPQg5ABZZIjUf48l2mq0LD8Y5l4BIjDhrYY/cngIrM5LRabbH HqM/hspTGTEKN2Cs+Tc0gCCm0rmUOwHN32BCxR5JnJC5TeUBVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNqXybka+FtHqAE+tVG4Mj16YJwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDA5ZGU2ZTQtNzUwMi0z YzU5LWJiZjUtN2M2NDE3M2YyZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV1qLYSlEvx8mIqJPlhTBasthxN/1/zTcP1B4A2zfVrqLhgxATQWT /C3n8rtF7VIKtXiDPP0n96x4+oLYZ1yHoQXHtDENDgnhb8mLffrtf1+kl9tbURym TX75X41S6CIkLygjydb9SIPfQONzBaoGaboVwaLz5A1EESQpRSyeo5/n+J8yONY0 KqmWylH97yEReZ8YIXTGKPwrzRSG62op1Fg8RUs3PkQQd9rLG0Fn6bQnCYahwzTM IIv+QCNekajwcB3LnXWV+8GgUFwWKFCQ8hsJ+pUk3eADh9CHBQggfdiZ6/9XMzsF PStj1W8x48KXVfFv2IT1dHpZaojHynQ3Hg== -----END CERTIFICATE-----Generated at Sun Oct 11 17:15:54 2026 by rpki-client