$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa File: 23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa (raw, json) Hash identifier: 1gUT3s+cRLM2HmrA0HPXXPkaU2MqsG2rIqaJ0LlxTh0= Subject key identifier: B5:A9:94:A6:6C:50:88:95:73:C6:00:0B:8F:FE:90:3D:AC:0D:8D:3E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EF87CC44D0800BED758265A30 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8d:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c4:4d:08:00:be:d7:58:26:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=1670da05-bf77-4114-9a8a-ad9ca3faf7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:bf:e7:9e:9e:d2:a8:fe:f1:1c:30:c3:9f: af:77:36:dc:0f:fc:2f:86:01:1d:78:f2:91:22:b9: 79:a4:ba:f5:b9:eb:c0:ad:e0:d6:f5:4f:53:09:48: a3:f8:39:eb:28:9f:41:c2:6d:0c:1e:d6:97:ee:79: 24:7f:ca:d7:c3:1d:3f:6c:44:e0:50:98:8a:d7:25: a4:96:14:ac:fe:88:69:83:df:25:e3:62:4d:0b:60: 9c:9a:46:6a:6e:c7:34:64:5b:5b:a4:2d:7a:6d:85: 30:46:f3:d7:45:97:2f:4f:9c:ac:fe:90:87:08:bc: fe:f4:55:ef:b1:2e:ec:b6:3f:3b:19:15:ca:93:ab: f9:eb:63:da:96:cc:e0:12:d1:27:ab:02:73:9e:00: a4:82:fe:cc:e2:10:31:77:a3:65:12:c3:06:16:84: fd:7c:af:82:a3:3d:8e:72:c6:30:75:1c:d7:8f:60: f6:0b:37:df:4a:07:8d:c1:04:af:57:02:48:77:6b: e0:8d:f6:76:b0:b9:36:d7:d3:4b:e5:67:53:de:01: c6:bf:ee:51:78:c0:ed:10:ac:27:bd:3e:e3:c9:3d: 3c:30:ca:45:94:83:8d:09:4e:06:1b:9b:55:6a:36: b2:8e:e5:1c:bc:33:97:a8:7f:8f:98:c9:ef:58:71: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A9:94:A6:6C:50:88:95:73:C6:00:0B:8F:FE:90:3D:AC:0D:8D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0f:06:8d:1a:5e:60:34:db:a3:98:aa:78:39:71:01:59:71: 89:17:2e:02:e9:9e:38:48:e7:0e:51:aa:8a:51:2d:cc:1e:ba: 49:27:28:4b:a3:9d:36:70:8a:b4:91:c8:24:c8:37:5c:10:7e: 0c:ae:0f:32:49:a9:59:d4:3a:ec:de:0e:39:24:a2:c5:d0:93: db:a8:09:6f:97:43:69:93:c0:3c:20:3a:f2:71:fb:36:98:a6: 36:61:aa:52:66:99:09:d6:7a:ee:bf:d2:2e:ef:3a:a1:87:08: c3:74:ca:0c:2a:ee:39:b5:76:16:b7:d7:20:f0:11:a8:34:ae: 3c:6b:78:53:ca:41:ce:47:9e:27:41:25:12:f5:da:c4:31:41: cb:f9:ff:75:90:42:6e:50:aa:aa:0d:e4:6c:58:cc:09:0b:77: be:d6:b6:72:0b:dd:4e:1e:3b:f4:ae:99:2c:2d:d7:5f:c5:ec: d6:14:ad:27:7d:48:63:70:0c:ec:c4:06:03:fc:3f:a4:8e:86: 42:16:f6:e3:d8:00:7a:b8:4a:fd:42:3c:c6:ef:88:e5:8e:5d: 3a:13:69:25:53:26:b2:dd:49:32:13:63:da:5c:6e:5b:1a:8f: 42:9b:f2:20:73:67:16:f3:38:d2:85:c3:c8:a9:f8:01:50:b3: 79:c7:83:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE74fMRNCAC+11gmWjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MTY3MGRhMDUtYmY3Ny00MTE0LTlhOGEtYWQ5Y2EzZmFmN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFu/556e0qj+8Rwww5+vdzbcD/wvhgEdePKR Irl5pLr1uevAreDW9U9TCUij+DnrKJ9Bwm0MHtaX7nkkf8rXwx0/bETgUJiK1yWk lhSs/ohpg98l42JNC2CcmkZqbsc0ZFtbpC16bYUwRvPXRZcvT5ys/pCHCLz+9FXv sS7stj87GRXKk6v562PalszgEtEnqwJzngCkgv7M4hAxd6NlEsMGFoT9fK+Coz2O csYwdRzXj2D2CzffSgeNwQSvVwJId2vgjfZ2sLk219NL5WdT3gHGv+5ReMDtEKwn vT7jyT08MMpFlIONCU4GG5tVajayjuUcvDOXqH+PmMnvWHH88wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLWplKZsUIiVc8YAC4/+kD2sDY0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNiOTFmNWYtZTlmNC0z OGQzLThlYWMtMDNmMmFiMjAyMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIQ8GjRpeYDTbo5iqeDlxAVlxiRcuAumeOEjnDlGqilEtzB66SSco S6OdNnCKtJHIJMg3XBB+DK4PMkmpWdQ67N4OOSSixdCT26gJb5dDaZPAPCA68nH7 NpimNmGqUmaZCdZ67r/SLu86oYcIw3TKDCruObV2FrfXIPARqDSuPGt4U8pBzkee J0ElEvXaxDFBy/n/dZBCblCqqg3kbFjMCQt3vta2cgvdTh479K6ZLC3XX8Xs1hSt J31IY3AM7MQGA/w/pI6GQhb249gAerhK/UI8xu+I5Y5dOhNpJVMmst1JMhNj2lxu WxqPQpvyIHNnFvM40oXDyKn4AVCzeceD4A== -----END CERTIFICATE-----Generated at Mon Sep 21 09:37:40 2026 by rpki-client