$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3680a74d-e263-3fcf-839e-9f4078f85d87.roa File: 3680a74d-e263-3fcf-839e-9f4078f85d87.roa (raw, json) Hash identifier: vRNqPqotFFHUJDIYBYwIBN9M43FOcUDFdpcIYwtzwCg= Subject key identifier: BB:79:3C:77:22:CF:DE:B9:08:F7:B7:2B:D9:E0:C7:FE:89:12:B0:0C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F2CD50344461F854E224A3980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3680a74d-e263-3fcf-839e-9f4078f85d87.roa Signing time: Mon 14 Sep 2026 19:00:13 +0000 ROA not before: Mon 14 Sep 2026 19:00:13 +0000 ROA not after: Sun 13 Dec 2026 20:00:13 +0000 asID: 30036 IP address blocks: 2604:2e86:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:d5:03:44:46:1f:85:4e:22:4a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 14 19:00:13 2026 GMT Not After : Dec 13 20:00:13 2026 GMT Subject: CN=9a444172-74eb-4d1f-9544-5c6b66c4170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:aa:97:8e:94:7c:a1:a5:b9:0a:16:e4:76: 4c:c5:77:62:d2:0c:ec:d5:96:29:e5:b4:d0:54:9b: 0c:a2:1f:4c:0c:0c:63:7d:8b:3b:4e:d6:73:83:f3: 51:30:69:08:45:69:71:d7:b5:94:63:c4:d6:fc:53: 42:ed:14:9c:b8:71:41:e8:9e:57:38:9d:d1:b9:d7: 89:16:5f:e5:a6:cf:26:0b:b1:dc:7d:37:31:08:da: d8:53:95:62:86:93:dc:a8:bf:5e:3f:2e:52:7a:a2: 1c:c1:de:06:1b:0a:82:d8:3c:8e:fc:a0:3f:83:1f: 7f:07:f1:7c:2b:d4:a6:43:7f:36:19:19:9f:86:25: e5:8d:15:8c:81:cd:c2:2d:88:6b:b8:d0:29:a5:ab: f1:a9:b1:94:d6:fa:a5:aa:8e:a0:88:42:98:f1:c1: a8:d8:d9:fb:5a:b0:ca:2e:28:03:60:bf:13:5a:69: 40:2c:ff:d5:c7:3b:d0:2e:4c:14:36:b2:70:ff:66: 0d:92:39:69:8c:38:48:2b:a0:f3:4e:8f:a7:a5:10: f6:7a:b2:a4:18:83:a1:73:83:cb:3d:5f:5e:c9:98: 17:86:65:9f:7b:6d:44:04:db:d5:bb:99:5d:bb:2b: 66:15:71:07:1e:70:65:c6:45:e9:70:00:c4:02:51: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:3C:77:22:CF:DE:B9:08:F7:B7:2B:D9:E0:C7:FE:89:12:B0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3680a74d-e263-3fcf-839e-9f4078f85d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e86:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:19:3e:b2:3a:ea:8c:67:d8:e3:c0:d2:84:01:42:49:5b:69: e1:16:74:9f:a6:24:87:18:a4:39:1d:de:e0:b5:d1:fb:9e:a7: 50:6d:f6:78:43:1b:0d:9d:ad:7a:52:ba:b7:e0:fe:cd:73:94: 06:b6:f0:e8:c5:74:ca:3b:89:fc:5d:0f:cb:8f:0a:9b:96:24: 9c:67:38:2f:4b:0d:14:bf:d1:c6:37:ac:8f:a5:e7:9b:bf:99: d3:c9:f1:16:7c:3e:67:43:3c:db:e8:4f:cb:4d:c2:93:a9:70: bb:71:7c:d0:9c:f5:d5:3d:d9:17:d1:c0:68:2d:bc:70:b6:fc: 9f:7f:21:a9:ee:ea:43:79:f5:4b:7c:84:c1:ec:51:bb:12:0a: 60:c3:cf:59:d1:75:08:7d:a7:72:77:1d:4d:3e:8e:2b:66:79: 88:7a:f0:77:52:f7:6b:14:18:e5:82:c3:c2:1e:b1:04:b3:7f: db:01:cf:f9:48:1a:6d:6d:b9:84:10:e1:c2:11:70:65:a7:5c: 87:ff:68:54:fd:64:4a:4a:8b:bd:95:84:d1:48:ad:30:6b:54: fe:70:09:6a:a0:3b:c6:34:69:47:9e:39:9b:6f:11:e2:7c:b6: 95:31:41:58:6d:76:2a:8e:e3:3f:76:59:31:5e:a3:55:db:08: 2b:16:66:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8s1QNERh+FTiJKOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxNDE5MDAxM1oXDTI2MTIxMzIwMDAxM1owLzEtMCsGA1UEAxMk OWE0NDQxNzItNzRlYi00ZDFmLTk1NDQtNWM2YjY2YzQxNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbWql46UfKGluQoW5HZMxXdi0gzs1ZYp5bTQ VJsMoh9MDAxjfYs7TtZzg/NRMGkIRWlx17WUY8TW/FNC7RScuHFB6J5XOJ3RudeJ Fl/lps8mC7HcfTcxCNrYU5VihpPcqL9ePy5SeqIcwd4GGwqC2DyO/KA/gx9/B/F8 K9SmQ382GRmfhiXljRWMgc3CLYhruNAppavxqbGU1vqlqo6giEKY8cGo2Nn7WrDK LigDYL8TWmlALP/VxzvQLkwUNrJw/2YNkjlpjDhIK6DzTo+npRD2erKkGIOhc4PL PV9eyZgXhmWfe21EBNvVu5lduytmFXEHHnBlxkXpcADEAlGMPQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLt5PHciz965CPe3K9ngx/6JErAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzY4MGE3NGQtZTI2My0z ZmNmLTgzOWUtOWY0MDc4Zjg1ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhmAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdhk+sjrqjGfY48DShAFCSVtp4RZ0n6YkhxikOR3e4LXR+56nUG32 eEMbDZ2telK6t+D+zXOUBrbw6MV0yjuJ/F0Py48Km5YknGc4L0sNFL/Rxjesj6Xn m7+Z08nxFnw+Z0M82+hPy03Ck6lwu3F80Jz11T3ZF9HAaC28cLb8n38hqe7qQ3n1 S3yEwexRuxIKYMPPWdF1CH2ncncdTT6OK2Z5iHrwd1L3axQY5YLDwh6xBLN/2wHP +UgabW25hBDhwhFwZadch/9oVP1kSkqLvZWE0UitMGtU/nAJaqA7xjRpR545m28R 4ny2lTFBWG12Ko7jP3ZZMV6jVdsIKxZmzA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:53:57 2026 by rpki-client