$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c0c6c2c-fb36-32bf-84ba-7ce8bfadd09f.roa File: 0c0c6c2c-fb36-32bf-84ba-7ce8bfadd09f.roa (raw, json) Hash identifier: ckL+I+6cI0tlpcHMdeY6KDoaGcAWTA6/idT0CKIpEGM= Subject key identifier: 14:2A:1A:2C:C2:EA:C0:F3:B8:C1:80:95:57:E7:14:CE:52:6B:A4:E6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F0D920734CDEA7FAEE205EA80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c0c6c2c-fb36-32bf-84ba-7ce8bfadd09f.roa Signing time: Thu 03 Sep 2026 14:15:11 +0000 ROA not before: Thu 03 Sep 2026 14:15:11 +0000 ROA not after: Wed 02 Dec 2026 15:15:11 +0000 asID: 30036 IP address blocks: 2604:2e89:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:92:07:34:cd:ea:7f:ae:e2:05:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 3 14:15:11 2026 GMT Not After : Dec 2 15:15:11 2026 GMT Subject: CN=a545f142-03a6-49ff-9d9e-141119f3a62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:ce:fb:5a:31:27:e2:e1:b8:5c:45:43:4d: c1:67:d9:a2:6a:aa:42:24:64:01:2f:9d:b5:70:cd: 83:d4:84:78:aa:ba:a3:63:af:42:cf:da:b7:a2:31: d1:58:0f:f6:ab:bf:e7:a3:51:f0:48:75:33:c7:3b: 76:74:f8:55:09:8b:9f:05:2a:76:24:28:e0:4e:ca: 44:92:45:82:0e:20:21:91:c4:45:6b:44:92:f1:e3: df:2b:8e:99:8e:07:3c:b8:51:60:b0:6d:f7:e8:ff: f0:80:85:45:bd:86:35:e3:c9:d9:84:49:6c:6b:8f: 07:b4:4f:a4:01:bf:d7:f7:cc:6a:63:7f:35:75:05: 3e:32:11:19:78:78:dc:d7:d0:2a:82:8b:12:63:19: 22:e8:7b:9b:2c:fd:21:73:9d:9b:41:8b:03:d7:79: 1f:36:c5:ff:ae:47:cc:4d:6c:29:04:ef:81:dc:55: f8:31:67:db:75:c9:d2:1a:83:f3:14:45:d1:05:48: db:8b:51:c3:14:40:8a:db:39:b6:a1:e7:ea:a4:4e: 5c:37:11:2a:3b:63:f0:69:10:31:df:1a:0b:0f:44: 65:e1:9b:0e:84:08:86:15:aa:b6:81:ff:7f:e3:bc: f5:24:c2:18:26:5a:63:39:00:e2:f3:b6:7d:b4:37: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:1A:2C:C2:EA:C0:F3:B8:C1:80:95:57:E7:14:CE:52:6B:A4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0c0c6c2c-fb36-32bf-84ba-7ce8bfadd09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b9:61:77:c6:af:07:f7:de:b9:e6:55:42:58:e9:12:c9:6c: 56:69:34:51:21:b4:54:ec:7a:43:19:7a:89:e1:ac:99:c7:c8: c2:84:96:26:72:4a:4d:93:c8:43:40:fd:81:f0:68:69:1c:fc: bb:c6:fa:9b:8b:ab:36:78:e0:0a:7a:4a:56:3a:28:62:15:6e: fe:fb:a5:a5:73:2d:d1:7a:f3:d8:71:df:56:ad:f5:a4:38:b8: a9:e4:34:d5:54:d9:3c:7d:d0:f4:82:2a:74:eb:8c:40:b8:d8: 63:73:e1:1e:e5:22:21:cb:a6:97:1d:bf:9b:4f:ee:42:2c:35: 12:92:86:8f:a6:d3:c1:19:0d:59:65:f1:40:d2:94:47:9f:b6: e7:72:81:c4:ae:8b:6e:c7:fa:d0:3d:fb:02:ce:e6:9c:c5:a8: 01:94:c6:c3:4c:8a:ed:bc:fb:f8:f1:c6:57:f4:0c:ef:48:49: 20:fc:44:c9:1b:12:96:9c:96:27:82:b6:c1:85:77:61:bd:32: 82:48:0a:7c:3c:2e:a9:92:fe:5e:15:a3:b8:e2:37:a0:04:10: 33:da:50:93:09:a2:e8:8e:81:55:6d:9f:bc:f6:91:e9:e9:a0: 15:da:c7:07:85:f0:82:a0:68:e0:c6:bf:51:a7:46:74:3e:c5: a3:f1:c0:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Nkgc0zep/ruIF6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwMzE0MTUxMVoXDTI2MTIwMjE1MTUxMVowLzEtMCsGA1UEAxMk YTU0NWYxNDItMDNhNi00OWZmLTlkOWUtMTQxMTE5ZjNhNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRrO+1oxJ+LhuFxFQ03BZ9miaqpCJGQBL521 cM2D1IR4qrqjY69Cz9q3ojHRWA/2q7/no1HwSHUzxzt2dPhVCYufBSp2JCjgTspE kkWCDiAhkcRFa0SS8ePfK46Zjgc8uFFgsG336P/wgIVFvYY148nZhElsa48HtE+k Ab/X98xqY381dQU+MhEZeHjc19AqgosSYxki6HubLP0hc52bQYsD13kfNsX/rkfM TWwpBO+B3FX4MWfbdcnSGoPzFEXRBUjbi1HDFECK2zm2oefqpE5cNxEqO2PwaRAx 3xoLD0Rl4ZsOhAiGFaq2gf9/47z1JMIYJlpjOQDi87Z9tDclUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBQqGizC6sDzuMGAlVfnFM5Sa6TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGMwYzZjMmMtZmIzNi0z MmJmLTg0YmEtN2NlOGJmYWRkMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcrlhd8avB/feueZVQljpEslsVmk0USG0VOx6Qxl6ieGsmcfIwoSW JnJKTZPIQ0D9gfBoaRz8u8b6m4urNnjgCnpKVjooYhVu/vulpXMt0Xrz2HHfVq31 pDi4qeQ01VTZPH3Q9IIqdOuMQLjYY3PhHuUiIcumlx2/m0/uQiw1EpKGj6bTwRkN WWXxQNKUR5+253KBxK6Lbsf60D37As7mnMWoAZTGw0yK7bz7+PHGV/QM70hJIPxE yRsSlpyWJ4K2wYV3Yb0ygkgKfDwuqZL+XhWjuOI3oAQQM9pQkwmi6I6BVW2fvPaR 6emgFdrHB4XwgqBo4Ma/UadGdD7Fo/HA8Q== -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:42 2026 by rpki-client