$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa File: 2cd54324-0e90-31fe-bb64-4dae37572697.roa (raw, json) Hash identifier: sxdDMPvVHB5znuGfwZQUWZ47310YACC3D9ocd0Z21aI= Subject key identifier: 21:E9:47:6B:25:3C:FC:36:11:2D:17:22:29:C1:BF:04:E3:B1:45:2F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA79890B5FBDD7ED20C1F6E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8b:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:90:b5:fb:dd:7e:d2:0c:1f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=064b3420-83f0-40e2-8700-b48908d94384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:76:b7:39:96:ea:1e:14:7b:42:0f:da:86: 00:8a:34:a1:78:7b:fb:cc:3b:e3:40:bd:8b:ac:85: 2e:ac:a8:8a:0d:bd:52:32:ea:c6:62:4d:ad:db:02: 41:21:47:61:17:11:9c:fc:f3:d7:69:e3:d7:ac:40: 8f:e8:50:df:86:75:8a:c4:92:68:3c:3f:16:55:4b: b9:a6:67:bc:eb:af:e3:d5:9a:02:ba:31:8c:41:43: 42:f6:13:80:8e:73:6d:84:7e:6b:ac:69:ab:87:08: ba:50:a0:8e:ec:40:64:78:49:c8:2a:0e:ee:3f:bd: 76:91:db:48:e2:cb:98:51:c6:03:44:ca:73:ca:57: 00:3f:64:7e:27:0c:cb:b9:cb:35:52:e9:a7:33:e9: 8f:18:21:60:2f:aa:0a:0a:e4:1a:59:7e:83:f8:a9: c5:16:55:1a:bb:7e:61:09:77:b2:a5:b7:48:09:b0: f7:fb:f1:b0:24:ca:09:9c:d8:89:bf:16:c2:c9:76: ae:d3:c7:d1:3e:6c:ac:4c:b0:18:27:86:7f:7d:59: 74:2c:85:cd:2d:d8:ac:55:3d:77:84:17:a9:67:ea: 5e:13:d2:a6:35:40:48:a4:36:bd:82:66:51:c3:e9: d0:e2:30:fd:5e:44:50:7a:ee:12:64:21:81:88:f6: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E9:47:6B:25:3C:FC:36:11:2D:17:22:29:C1:BF:04:E3:B1:45:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4a:33:57:b1:8f:86:d7:e4:fe:d3:1c:94:d1:9e:e8:e5:23: a9:fe:0c:45:32:d8:d9:b6:81:dd:c3:d2:36:94:b2:06:36:73: b1:7a:66:13:db:f2:af:5d:03:ab:cf:a3:d2:44:47:2d:57:0b: 6c:a9:0a:03:b1:b2:f9:f9:f9:03:62:60:a2:65:db:cd:1e:31: a3:11:a3:c1:d7:bd:41:2c:b6:9a:04:c6:d1:4c:6a:a0:8e:2a: 6b:a6:12:37:e7:c4:29:aa:b6:48:8a:18:b2:2a:f7:25:df:78: f7:ce:bd:6c:b2:cd:cc:a5:66:f8:fb:dc:b7:a6:db:12:e4:fa: 7c:0d:ae:9b:8e:c4:06:33:b5:6e:6f:07:72:0c:87:e0:f0:a6: 3f:8e:b3:e5:59:42:57:44:50:fa:a4:59:cb:eb:c5:ca:d2:89: 94:4a:a9:86:46:4e:6f:46:d8:3e:72:d8:7f:27:a2:40:91:af: 70:87:86:54:d3:14:37:23:f2:83:c8:82:d9:9f:b8:e7:a3:3b: c2:f5:ce:4a:24:e5:8d:e2:c3:5a:6e:bd:10:52:40:85:c4:22: 2c:51:8e:fe:df:9c:cf:a4:30:48:79:39:83:08:35:2e:27:b0: 60:25:aa:1e:94:c4:56:aa:95:33:21:83:da:a2:ac:f7:06:e8: 3a:1f:c0:e9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nmJC1+91+0gwfboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDY0YjM0MjAtODNmMC00MGUyLTg3MDAtYjQ4OTA4ZDk0Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV92tzmW6h4Ue0IP2oYAijSheHv7zDvjQL2L rIUurKiKDb1SMurGYk2t2wJBIUdhFxGc/PPXaePXrECP6FDfhnWKxJJoPD8WVUu5 pme866/j1ZoCujGMQUNC9hOAjnNthH5rrGmrhwi6UKCO7EBkeEnIKg7uP712kdtI 4suYUcYDRMpzylcAP2R+JwzLucs1UumnM+mPGCFgL6oKCuQaWX6D+KnFFlUau35h CXeypbdICbD3+/GwJMoJnNiJvxbCyXau08fRPmysTLAYJ4Z/fVl0LIXNLdisVT13 hBepZ+peE9KmNUBIpDa9gmZRw+nQ4jD9XkRQeu4SZCGBiPaN/wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCHpR2slPPw2ES0XIinBvwTjsUUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmNkNTQzMjQtMGU5MC0z MWZlLWJiNjQtNGRhZTM3NTcyNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOkozV7GPhtfk/tMclNGe6OUjqf4MRTLY2baB3cPSNpSyBjZzsXpm E9vyr10Dq8+j0kRHLVcLbKkKA7Gy+fn5A2JgomXbzR4xoxGjwde9QSy2mgTG0Uxq oI4qa6YSN+fEKaq2SIoYsir3Jd949869bLLNzKVm+Pvct6bbEuT6fA2um47EBjO1 bm8HcgyH4PCmP46z5VlCV0RQ+qRZy+vFytKJlEqphkZOb0bYPnLYfyeiQJGvcIeG VNMUNyPyg8iC2Z+456M7wvXOSiTljeLDWm69EFJAhcQiLFGO/t+cz6QwSHk5gwg1 LiewYCWqHpTEVqqVMyGD2qKs9wboOh/A6Q== -----END CERTIFICATE-----Generated at Tue Sep 22 07:27:41 2026 by rpki-client