$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa File: 2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa (raw, json) Hash identifier: kUar/j9NoF5jzFygNuHKM7ndgSp8E0u/cgaNLeMS3cc= Subject key identifier: 3E:6C:ED:9B:8C:D4:A6:1B:13:A3:7D:FA:26:64:63:62:05:DC:C4:EF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F23C250438C62B9975C196900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:50:43:8c:62:b9:97:5c:19:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=22ec268c-c00e-44ca-b270-afec85f79c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:4e:86:32:61:56:2b:cb:2e:d6:92:82:66: d5:7c:ca:ab:52:f7:65:b3:dc:2a:2c:e9:51:56:14: b1:e6:12:93:7f:13:10:71:54:c0:2e:11:f5:80:47: 59:61:60:4c:e3:ea:81:9c:f6:89:6d:51:fd:23:67: d1:d3:b8:04:df:7d:86:6b:28:03:4c:af:79:15:a5: a1:57:f6:e8:82:63:bb:b6:cc:6e:67:9a:33:96:97: a5:bd:a8:ea:22:30:1e:a0:7a:22:ee:28:d0:54:e5: c2:c2:bc:19:43:30:76:17:9b:92:86:6f:7d:66:2d: 46:0a:7a:26:7c:54:9a:a8:8d:79:03:d4:c1:a6:53: 29:9f:6b:07:c5:85:6c:4a:f9:79:6f:bf:33:cc:2f: 9b:d1:7a:9a:31:ab:99:0c:c1:b2:38:40:4d:8b:8b: 32:c8:47:0c:83:e5:d4:c2:b2:66:82:34:22:be:df: 66:82:78:82:84:62:79:74:c9:85:74:f0:cb:35:ae: a2:e9:69:71:21:85:95:62:bc:55:0b:20:92:29:e2: ea:b2:1f:cb:b4:a9:1f:93:8a:ae:a5:e4:62:54:8f: ee:3b:f8:b6:03:af:93:1e:4e:12:4c:d8:7d:01:44: 75:12:8d:85:58:e7:3c:5f:e6:1a:58:0d:a6:fd:7f: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:ED:9B:8C:D4:A6:1B:13:A3:7D:FA:26:64:63:62:05:DC:C4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a4:e3:a2:c2:75:0d:55:41:bc:b5:40:c2:1d:e6:51:9d:4b: 72:f5:8a:02:d3:65:eb:2e:3a:17:ce:2a:b0:55:76:8d:5d:38: 4f:ab:16:00:6c:fb:56:f1:d0:08:c6:01:b8:74:c8:80:03:10: 9a:c1:62:79:3e:00:75:3f:dd:d7:c3:da:25:51:9c:d4:12:d6: f7:c7:4b:5e:be:a4:72:58:88:01:6a:1b:f3:0c:ee:3f:fe:5c: 7f:69:dd:c3:4e:a5:85:04:c6:cd:16:10:4a:e2:54:57:fd:4c: 00:d2:61:05:db:ae:f4:e4:87:e9:db:23:f7:1a:95:8b:39:1f: a1:9c:1b:2a:bb:9e:19:a5:68:e1:cb:37:89:33:51:18:c2:2f: 22:8c:8c:9d:85:d6:c1:f9:31:c3:0d:c6:a5:82:be:7c:eb:cc: 7d:e3:4a:5e:e7:24:ee:ec:9e:1b:60:ee:07:c4:99:c3:f2:a1: f9:4f:b5:a5:e1:fc:9d:3b:2c:23:34:15:7f:ce:a2:f6:9d:e1: e1:d1:29:40:60:56:49:44:45:ac:91:7d:9a:0f:2f:1d:31:76: 75:6d:8a:c5:8c:35:5d:f8:60:71:d1:79:be:39:06:3f:dd:4f: b4:f3:63:7e:d4:63:2f:7b:5e:56:93:2e:2e:fa:34:50:21:4d: ec:97:f7:c3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8jwlBDjGK5l1wZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MjJlYzI2OGMtYzAwZS00NGNhLWIyNzAtYWZlYzg1Zjc5YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqVOhjJhVivLLtaSgmbVfMqrUvdls9wqLOlR VhSx5hKTfxMQcVTALhH1gEdZYWBM4+qBnPaJbVH9I2fR07gE332GaygDTK95FaWh V/bogmO7tsxuZ5ozlpelvajqIjAeoHoi7ijQVOXCwrwZQzB2F5uShm99Zi1GCnom fFSaqI15A9TBplMpn2sHxYVsSvl5b78zzC+b0XqaMauZDMGyOEBNi4syyEcMg+XU wrJmgjQivt9mgniChGJ5dMmFdPDLNa6i6WlxIYWVYrxVCyCSKeLqsh/LtKkfk4qu peRiVI/uO/i2A6+THk4STNh9AUR1Eo2FWOc8X+YaWA2m/X+ZlQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD5s7ZuM1KYbE6N9+iZkY2IF3MTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZhYTJhMmMtYmMyNC0z OWU1LWExZGItNWQxMzdmZjAwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAn6TjosJ1DVVBvLVAwh3mUZ1LcvWKAtNl6y46F84qsFV2jV04T6sW AGz7VvHQCMYBuHTIgAMQmsFieT4AdT/d18PaJVGc1BLW98dLXr6kcliIAWob8wzu P/5cf2ndw06lhQTGzRYQSuJUV/1MANJhBduu9OSH6dsj9xqVizkfoZwbKrueGaVo 4cs3iTNRGMIvIoyMnYXWwfkxww3GpYK+fOvMfeNKXuck7uyeG2DuB8SZw/Kh+U+1 peH8nTssIzQVf86i9p3h4dEpQGBWSURFrJF9mg8vHTF2dW2KxYw1XfhgcdF5vjkG P91PtPNjftRjL3teVpMuLvo0UCFN7Jf3ww== -----END CERTIFICATE-----Generated at Tue Sep 22 17:24:58 2026 by rpki-client