$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa File: c35e098e-b550-340e-8fcb-693dcd6370c6.roa (raw, json) Hash identifier: xn+hAU9U0LGPfxS0BQykHa16Wy6RH4Vt9bXEZZChy0g= Subject key identifier: AE:C2:67:46:03:5B:DE:E4:B7:53:F7:9C:CC:3E:A6:F4:EB:A5:E2:45 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F612D6B89BDF3AABBB65C5080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8d:c400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6b:89:bd:f3:aa:bb:b6:5c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=e943fb5e-79dd-41c0-845f-95c49f28c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:46:b2:fc:7c:63:b4:be:88:f6:5f:a4:b6: 53:3a:1f:e9:92:16:81:bd:fe:17:37:5b:b0:2a:0b: 8c:7b:2a:9a:ea:dc:7a:44:9c:42:cd:3d:7e:50:58: 3a:e2:90:7c:99:ca:c6:0a:5f:27:cf:e8:4e:e5:29: d6:af:15:9f:cb:4e:bf:98:80:62:1d:2b:50:8e:3d: 6b:f4:da:d9:7f:59:3f:e8:94:57:e0:af:8e:54:3d: 89:85:18:e2:7e:69:50:84:5b:f1:b5:b4:50:27:54: 16:71:30:41:3d:dc:98:b3:f9:85:31:0e:d5:55:81: d6:b5:3c:05:a4:61:aa:75:52:3d:06:1f:56:3f:9e: 3e:17:94:3b:ba:2d:8b:96:41:e4:4c:2d:d5:3c:89: 3d:7d:c5:3b:4a:24:2c:79:37:24:12:60:70:4d:fc: bf:8b:27:c5:c8:06:37:3c:9c:d0:1c:1d:57:4d:59: c6:7d:a4:1f:5c:7e:02:02:8f:22:dd:39:fd:56:6d: 05:80:18:2b:64:d8:0f:f2:f0:73:c5:5b:32:fa:cd: 29:3c:05:00:5b:12:b1:02:3d:71:ed:4f:b2:01:ba: dd:52:2c:dd:a7:df:81:f3:1f:4b:c6:9d:35:1a:ee: ac:80:fc:b8:54:64:5f:75:5b:30:f5:2e:28:f5:92: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C2:67:46:03:5B:DE:E4:B7:53:F7:9C:CC:3E:A6:F4:EB:A5:E2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:c400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fe:6e:4f:b1:65:a1:e6:f6:6c:12:de:8c:f9:27:6c:76:fb: e8:f9:74:8f:a8:b2:6b:c2:1d:44:40:74:1b:a8:e4:d1:58:e5: 1c:57:d8:b7:96:85:98:be:ee:64:cd:15:1c:ff:d6:2d:78:ad: 67:b8:0a:12:ae:92:9b:df:49:1f:d5:20:61:84:90:b2:87:ed: 39:ac:c5:58:0c:79:e1:8e:2c:99:fc:7d:45:5f:89:2d:3f:36: cf:31:17:89:3c:1d:4a:35:2c:2c:26:27:a3:dd:09:ec:7b:24: 81:bd:6d:73:02:f7:db:39:54:1d:76:b6:f1:44:07:ef:ea:ce: bf:9a:15:df:03:29:4f:9b:40:97:7b:51:a6:7c:88:f1:07:f1: 8a:8c:65:05:41:06:d3:63:97:63:9e:05:17:24:d6:0f:8d:57: 7b:b8:2e:41:ae:31:05:37:17:66:69:e4:5e:f2:6e:83:14:fa: 55:5d:21:84:84:49:ac:ea:61:73:04:62:32:88:5d:10:aa:c8: 72:d7:e5:83:0e:cd:36:44:53:9b:5a:09:dd:4c:f0:e3:a7:89: 40:b2:7b:8f:b6:f5:05:56:10:7c:ef:6b:4f:ed:5b:45:7e:76: f6:2d:ce:9f:1f:64:a7:3b:8f:45:c0:fe:28:8c:35:51:04:c7: f4:09:61:bf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9hLWuJvfOqu7ZcUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZTk0M2ZiNWUtNzlkZC00MWMwLTg0NWYtOTVjNDlmMjhjMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqNGsvx8Y7S+iPZfpLZTOh/pkhaBvf4XN1uw KguMeyqa6tx6RJxCzT1+UFg64pB8mcrGCl8nz+hO5SnWrxWfy06/mIBiHStQjj1r 9NrZf1k/6JRX4K+OVD2JhRjifmlQhFvxtbRQJ1QWcTBBPdyYs/mFMQ7VVYHWtTwF pGGqdVI9Bh9WP54+F5Q7ui2LlkHkTC3VPIk9fcU7SiQseTckEmBwTfy/iyfFyAY3 PJzQHB1XTVnGfaQfXH4CAo8i3Tn9Vm0FgBgrZNgP8vBzxVsy+s0pPAUAWxKxAj1x 7U+yAbrdUizdp9+B8x9Lxp01Gu6sgPy4VGRfdVsw9S4o9ZIMOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK7CZ0YDW97kt1P3nMw+pvTrpeJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzM1ZTA5OGUtYjU1MC0z NDBlLThmY2ItNjkzZGNkNjM3MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujcQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASf5uT7Floeb2bBLejPknbHb76Pl0j6iya8IdREB0G6jk0VjlHFfY t5aFmL7uZM0VHP/WLXitZ7gKEq6Sm99JH9UgYYSQsoftOazFWAx54Y4smfx9RV+J LT82zzEXiTwdSjUsLCYno90J7Hskgb1tcwL32zlUHXa28UQH7+rOv5oV3wMpT5tA l3tRpnyI8QfxioxlBUEG02OXY54FFyTWD41Xe7guQa4xBTcXZmnkXvJugxT6VV0h hIRJrOphcwRiMohdEKrIctflgw7NNkRTm1oJ3Uzw46eJQLJ7j7b1BVYQfO9rT+1b RX529i3Onx9kpzuPRcD+KIw1UQTH9Alhvw== -----END CERTIFICATE-----Generated at Sun Oct 11 17:20:25 2026 by rpki-client