$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78825a4d-7a9a-376d-9dd8-a4469df315b5.roa File: 78825a4d-7a9a-376d-9dd8-a4469df315b5.roa (raw, json) Hash identifier: E7HIfr3Sd85q2eVbNlwsSVQJ6v+nDwRtMwBIRiQ2W90= Subject key identifier: C3:24:6E:B3:C6:20:63:17:08:F9:1B:A8:E4:D8:98:5B:59:09:60:B4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7352E2CDD058BCADBAA5FB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78825a4d-7a9a-376d-9dd8-a4469df315b5.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 19905 IP address blocks: 2604:2e86::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e2:cd:d0:58:bc:ad:ba:a5:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=e0f110f0-13b4-4193-afd3-c0a99d897f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:bb:d8:f6:cc:a2:bd:e0:6c:3d:c6:60:98: 12:13:5f:79:4d:5e:3d:72:54:ad:fe:95:14:f6:37: 56:35:8f:41:87:40:4e:82:0e:c9:16:fc:39:2b:ff: 3f:be:28:03:e0:5a:48:47:10:d4:44:27:78:82:3d: a2:b0:4d:1b:99:44:46:6d:1f:09:ff:56:2b:c3:9f: 45:cd:7d:ab:db:3e:e0:a2:c7:84:09:32:51:1d:df: b5:41:7d:c6:95:7d:4d:08:2f:ca:ee:d0:ed:42:31: 6f:ce:a2:56:4e:73:82:28:79:0e:49:11:f4:d3:0f: 41:50:a4:a9:f4:a3:5f:0d:c8:dc:6a:51:8d:12:86: 7d:29:9b:0e:9c:04:dc:0e:ef:fc:1b:7b:2b:1d:f9: 3e:d8:d4:ad:80:76:bc:14:ec:f3:15:cd:31:a0:ed: 6a:4c:28:de:81:9f:b6:a7:81:b4:d1:c7:b8:b6:86: fc:af:9f:7a:2e:37:f0:64:56:9b:8b:a0:5e:39:d8: 06:64:af:57:83:26:26:ba:61:21:80:6c:e3:96:e1: 7f:f1:b7:07:aa:c2:f7:7b:6c:ad:80:3c:18:df:66: 48:40:97:a2:f3:8f:af:bd:40:43:1c:af:90:42:ae: 8c:2d:e9:3f:9f:1f:10:9a:c4:96:aa:12:dc:fd:5b: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:24:6E:B3:C6:20:63:17:08:F9:1B:A8:E4:D8:98:5B:59:09:60:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/78825a4d-7a9a-376d-9dd8-a4469df315b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e86::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dd:d7:46:a4:fb:4d:a2:db:3c:c9:f2:31:73:1c:50:e5:6f: 0c:7c:56:9e:7d:bd:b5:1d:6b:87:44:5f:dc:dc:10:74:41:43: e4:9d:4c:94:07:4a:fb:9d:b3:fb:85:4e:ca:c4:09:3e:dd:d6: 9d:6a:2a:01:04:18:c9:b8:6c:06:11:5e:de:ba:c3:13:2b:3a: 35:c6:86:4d:9d:df:d9:3b:1c:6a:82:f0:10:98:b5:3c:da:1a: 72:46:87:aa:6b:8f:6c:b1:76:46:56:1d:d7:19:5c:92:0a:23: 45:7a:43:ca:d4:0d:c8:6b:0c:46:dc:ff:d4:bc:39:c6:d4:ee: 5f:7e:86:05:81:bc:02:46:6e:1a:a3:41:ac:bc:b6:35:f3:53: 88:8a:af:d7:ff:aa:dc:3b:1a:71:1f:29:25:6b:26:40:e6:bd: 48:28:6e:aa:a0:4b:9e:23:c9:5c:1b:24:55:d4:06:48:f6:fb: 18:2b:f6:4b:72:22:8d:b8:ae:31:ee:f3:19:c7:fc:32:10:aa: 37:30:63:1e:79:78:fc:de:34:4f:19:d0:71:65:bb:6f:13:17: f3:83:c9:60:a1:68:24:c6:98:e7:c6:94:2b:82:3d:e5:bd:4d: 46:21:85:11:2f:4e:35:a9:39:9d:18:87:20:6a:ec:5c:45:02: 75:54:d2:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9zUuLN0Fi8rbql+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ZTBmMTEwZjAtMTNiNC00MTkzLWFmZDMtYzBhOTlkODk3Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmS72PbMor3gbD3GYJgSE195TV49clSt/pUU 9jdWNY9Bh0BOgg7JFvw5K/8/vigD4FpIRxDURCd4gj2isE0bmURGbR8J/1Yrw59F zX2r2z7goseECTJRHd+1QX3GlX1NCC/K7tDtQjFvzqJWTnOCKHkOSRH00w9BUKSp 9KNfDcjcalGNEoZ9KZsOnATcDu/8G3srHfk+2NStgHa8FOzzFc0xoO1qTCjegZ+2 p4G00ce4tob8r596LjfwZFabi6BeOdgGZK9XgyYmumEhgGzjluF/8bcHqsL3e2yt gDwY32ZIQJei84+vvUBDHK+QQq6MLek/nx8QmsSWqhLc/Vu0DQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMMkbrPGIGMXCPkbqOTYmFtZCWC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzg4MjVhNGQtN2E5YS0z NzZkLTlkZDgtYTQ0NjlkZjMxNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHN3XRqT7TaLbPMnyMXMcUOVvDHxWnn29tR1rh0Rf3NwQdEFD5J1M lAdK+52z+4VOysQJPt3WnWoqAQQYybhsBhFe3rrDEys6NcaGTZ3f2TscaoLwEJi1 PNoackaHqmuPbLF2RlYd1xlckgojRXpDytQNyGsMRtz/1Lw5xtTuX36GBYG8AkZu GqNBrLy2NfNTiIqv1/+q3DsacR8pJWsmQOa9SChuqqBLniPJXBskVdQGSPb7GCv2 S3IijbiuMe7zGcf8MhCqNzBjHnl4/N40TxnQcWW7bxMX84PJYKFoJMaY58aUK4I9 5b1NRiGFES9ONak5nRiHIGrsXEUCdVTSGA== -----END CERTIFICATE-----Generated at Sun Oct 11 15:19:26 2026 by rpki-client