$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/956f3e54-7df0-3e6e-aac2-170b315993e3.roa File: 956f3e54-7df0-3e6e-aac2-170b315993e3.roa (raw, json) Hash identifier: 96PAQq5dwALbvkzT0nj8TUDF1vePBt0HRhYMRUaTezU= Subject key identifier: D1:AB:76:97:DD:47:6E:E7:F7:4C:93:0A:CD:11:7F:78:82:16:43:93 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7FD609B663F484E65480CF80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/956f3e54-7df0-3e6e-aac2-170b315993e3.roa Signing time: Wed 14 Oct 2026 12:34:22 +0000 ROA not before: Wed 14 Oct 2026 12:34:22 +0000 ROA not after: Tue 12 Jan 2027 13:34:22 +0000 asID: 19905 IP address blocks: 2604:2e89:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d6:09:b6:63:f4:84:e6:54:80:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 14 12:34:22 2026 GMT Not After : Jan 12 13:34:22 2027 GMT Subject: CN=7a89d7a8-6b28-4ab8-a76b-1fec84722c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:a1:a5:9a:08:22:1a:63:6b:4c:70:87:4e: 9b:a9:ae:7d:7c:64:ee:3e:37:cf:8d:24:04:88:b4: 26:de:64:89:45:ff:9f:7c:de:21:9e:93:78:03:b4: ca:a0:48:65:d8:a2:d0:12:6d:e5:74:31:96:2d:b7: d0:de:8b:ae:9d:3c:73:a7:8f:ed:6c:02:25:ac:69: ec:c0:b2:87:45:f4:57:43:70:8e:02:a9:37:17:8d: bd:c8:5c:f3:f1:57:64:23:b5:06:6f:49:28:85:c5: e5:6a:7e:9a:0e:e7:8c:5e:17:82:2f:f1:b5:2a:58: 7a:e6:8d:e9:cc:2e:89:d2:b5:39:82:3a:33:61:69: 34:e7:12:6d:2e:19:82:96:23:62:92:d4:5f:ba:ea: 8d:6e:1c:d6:91:c8:1a:b7:4e:64:5f:32:98:c2:90: 40:ba:e9:cc:0c:c3:90:25:06:f3:7f:94:3e:60:a2: ba:3b:cc:cd:db:cd:c7:51:d0:17:14:04:5c:2c:20: e7:6b:df:da:d8:a6:d5:74:b2:f6:68:76:f8:a0:10: c5:43:7c:2c:33:9f:a6:ba:45:c3:f2:fa:80:7d:06: 68:d5:02:1b:ca:e1:2d:ea:4a:da:bb:1a:e4:1b:7b: 5d:da:b6:80:db:86:7d:83:32:5f:cf:5b:97:43:62: cc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AB:76:97:DD:47:6E:E7:F7:4C:93:0A:CD:11:7F:78:82:16:43:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/956f3e54-7df0-3e6e-aac2-170b315993e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e0:db:78:78:78:d6:be:8a:f7:df:a6:4c:f8:71:ce:26:36: d7:4d:11:ea:24:74:55:98:58:fc:e2:0f:26:01:65:40:c7:ff: 9c:3d:07:99:e0:bb:8f:59:e1:ef:8e:9b:bd:da:0a:6f:b6:d7: 24:22:3f:74:57:d5:00:33:09:51:13:c4:56:44:7b:1f:35:0d: fc:f8:58:e0:3c:4f:5f:9f:17:2f:f1:69:9c:5b:8c:00:92:36: e2:04:00:ab:8d:fa:97:c4:80:22:9b:4e:c2:2c:16:b2:af:14: 04:10:6e:86:74:76:d2:9a:7a:61:9a:85:11:df:47:d8:e2:e1: 36:f9:19:c0:44:f3:67:86:fb:1c:82:de:e1:0e:b6:26:6b:90: f4:8e:3f:9a:55:56:35:1d:cd:3c:c2:8e:c2:4f:d2:0b:3a:1c: db:07:11:9a:34:a0:bf:19:f0:40:a7:2e:03:4a:4a:6a:32:2b: 1c:63:03:95:ce:a9:eb:cc:f4:ea:af:4d:b2:69:ce:0b:98:fe: ee:f2:d8:8d:4e:41:1f:99:fb:c4:9a:5f:c0:64:4e:31:93:07: dc:ca:84:7a:0c:b3:9f:77:c8:64:57:4b:04:2c:40:b4:d6:3c: 07:ca:1f:4c:3b:4b:03:e3:c5:ec:fe:34:6c:c2:1c:ea:61:b0: 87:62:3c:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9/1gm2Y/SE5lSAz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxNDEyMzQyMloXDTI3MDExMjEzMzQyMlowLzEtMCsGA1UEAxMk N2E4OWQ3YTgtNmIyOC00YWI4LWE3NmItMWZlYzg0NzIyYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXahpZoIIhpja0xwh06bqa59fGTuPjfPjSQE iLQm3mSJRf+ffN4hnpN4A7TKoEhl2KLQEm3ldDGWLbfQ3ouunTxzp4/tbAIlrGns wLKHRfRXQ3COAqk3F429yFzz8VdkI7UGb0kohcXlan6aDueMXheCL/G1Klh65o3p zC6J0rU5gjozYWk05xJtLhmCliNiktRfuuqNbhzWkcgat05kXzKYwpBAuunMDMOQ JQbzf5Q+YKK6O8zN283HUdAXFARcLCDna9/a2KbVdLL2aHb4oBDFQ3wsM5+mukXD 8vqAfQZo1QIbyuEt6krauxrkG3td2raA24Z9gzJfz1uXQ2LMCwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNGrdpfdR27n90yTCs0Rf3iCFkOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTU2ZjNlNTQtN2RmMC0z ZTZlLWFhYzItMTcwYjMxNTk5M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWeDbeHh41r6K99+mTPhxziY2100R6iR0VZhY/OIPJgFlQMf/nD0H meC7j1nh746bvdoKb7bXJCI/dFfVADMJURPEVkR7HzUN/PhY4DxPX58XL/FpnFuM AJI24gQAq436l8SAIptOwiwWsq8UBBBuhnR20pp6YZqFEd9H2OLhNvkZwETzZ4b7 HILe4Q62JmuQ9I4/mlVWNR3NPMKOwk/SCzoc2wcRmjSgvxnwQKcuA0pKajIrHGMD lc6p68z06q9NsmnOC5j+7vLYjU5BH5n7xJpfwGROMZMH3MqEegyzn3fIZFdLBCxA tNY8B8ofTDtLA+PF7P40bMIc6mGwh2I8fQ== -----END CERTIFICATE-----Generated at Sun Oct 25 01:29:51 2026 by rpki-client