$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa File: beb029dc-49c0-38e3-844b-30e0aee4f80b.roa (raw, json) Hash identifier: jUSLOweAUVrWIrjpapGUj/z18GCJMYZrFqNRc23VyPk= Subject key identifier: 33:14:F5:36:4A:B2:F1:A1:89:94:C0:0F:89:FD:FA:12:44:15:B5:63 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3D6CA8AAB97D3D32506800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6c:a8:aa:b9:7d:3d:32:50:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2ee7ca88-cdbb-49db-a104-3baabe1a6bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:6c:83:dc:52:14:50:2d:03:ba:a8:9e:bf: a4:a3:f2:c4:7f:39:1f:bc:f1:16:95:f3:b4:bc:3c: 0e:5b:0b:53:76:b0:63:ed:08:ea:74:d4:02:bd:fd: 0f:d3:22:8e:d8:cc:85:d8:0a:22:24:35:9c:98:bc: be:31:33:7b:0b:e6:6d:6f:f8:02:b9:5a:01:08:52: a3:30:fd:6d:0f:b2:73:7b:17:73:c3:ec:07:11:d7: 5d:8f:3e:4f:c4:b1:60:d0:b5:55:4e:09:94:ab:73: 5a:cd:4f:d5:7b:31:af:e2:bc:8f:5c:b3:21:7e:ec: 45:50:de:df:c1:e4:f0:8d:de:e8:2d:45:e2:2c:13: eb:ec:e3:4b:a4:a4:cb:e9:15:06:1a:47:0c:95:f3: b7:84:ca:4e:4d:86:34:85:25:06:62:c8:6a:bb:f1: 10:e1:ef:28:6b:1e:f3:44:f4:c7:c6:54:1a:ef:ff: 8f:ad:2a:ca:f5:71:71:53:c3:75:2a:56:40:cc:87: 5b:c4:cf:50:e9:a4:fd:25:ea:27:1f:e0:67:44:1d: 65:72:19:18:39:37:46:eb:18:f1:53:56:05:e1:81: 6a:9c:2f:35:b5:dd:d7:fa:0a:df:ab:5a:2f:ae:b9: d9:d8:b1:10:43:57:1e:e1:53:51:d8:3a:c1:41:5e: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:14:F5:36:4A:B2:F1:A1:89:94:C0:0F:89:FD:FA:12:44:15:B5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/beb029dc-49c0-38e3-844b-30e0aee4f80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9d:1e:47:b7:bd:fa:e7:f4:66:64:00:54:34:ec:0a:0c:4b: 94:f3:77:a9:5b:ce:56:42:38:d3:50:4f:95:c8:28:33:95:77: 36:78:76:fa:e6:f0:57:91:5d:45:ff:32:b2:cc:8a:b8:68:c5: 25:c3:8e:d8:66:7c:9d:a2:03:d9:e6:6c:7c:d7:14:dd:c9:0e: 09:54:e7:d4:cb:b2:01:84:56:a9:d2:d6:ab:93:6d:20:b5:8a: e5:3e:1f:6d:b5:f0:a1:92:0e:51:fa:b8:3d:f2:5b:d9:1f:74: 77:a8:91:57:58:80:07:62:7c:a7:01:4e:dd:8c:38:6a:fc:11: 3c:a3:a3:96:6f:1f:83:29:2e:8b:bb:ef:7d:5c:09:d0:bb:26: 78:e1:e2:db:74:96:4a:91:5f:3e:d1:b9:85:df:d2:0b:89:63: de:c2:c1:c7:b2:91:97:a3:4a:0f:ea:aa:46:b3:b3:dd:be:7a: d9:ba:6c:f1:4a:6c:4f:a1:09:75:41:80:83:95:4d:28:26:4d: 75:e2:88:cf:3b:b3:e2:e9:ab:12:8b:35:37:a7:d8:8e:ce:b5: f2:e9:ce:58:a5:fb:33:02:17:d5:d4:fd:7f:0c:99:84:6e:79: e1:5f:79:06:f1:a9:c6:d2:3b:19:34:55:11:c9:26:24:ae:ea: 95:1b:cf:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPWyoqrl9PTJQaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmVlN2NhODgtY2RiYi00OWRiLWExMDQtM2JhYWJlMWE2YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKBsg9xSFFAtA7qonr+ko/LEfzkfvPEWlfO0 vDwOWwtTdrBj7QjqdNQCvf0P0yKO2MyF2AoiJDWcmLy+MTN7C+Ztb/gCuVoBCFKj MP1tD7Jzexdzw+wHEdddjz5PxLFg0LVVTgmUq3NazU/VezGv4ryPXLMhfuxFUN7f weTwjd7oLUXiLBPr7ONLpKTL6RUGGkcMlfO3hMpOTYY0hSUGYshqu/EQ4e8oax7z RPTHxlQa7/+PrSrK9XFxU8N1KlZAzIdbxM9Q6aT9JeonH+BnRB1lchkYOTdG6xjx U1YF4YFqnC81td3X+grfq1ovrrnZ2LEQQ1ce4VNR2DrBQV7aDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDMU9TZKsvGhiZTAD4n9+hJEFbVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmViMDI5ZGMtNDljMC0z OGUzLTg0NGItMzBlMGFlZTRmODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK50eR7e9+uf0ZmQAVDTsCgxLlPN3qVvOVkI401BPlcgoM5V3Nnh2 +ubwV5FdRf8yssyKuGjFJcOO2GZ8naID2eZsfNcU3ckOCVTn1MuyAYRWqdLWq5Nt ILWK5T4fbbXwoZIOUfq4PfJb2R90d6iRV1iAB2J8pwFO3Yw4avwRPKOjlm8fgyku i7vvfVwJ0LsmeOHi23SWSpFfPtG5hd/SC4lj3sLBx7KRl6NKD+qqRrOz3b562bps 8UpsT6EJdUGAg5VNKCZNdeKIzzuz4umrEos1N6fYjs618unOWKX7MwIX1dT9fwyZ hG554V95BvGpxtI7GTRVEckmJK7qlRvP/w== -----END CERTIFICATE-----Generated at Sun Oct 11 21:05:43 2026 by rpki-client