$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa File: 38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa (raw, json) Hash identifier: Xb37b+NxDerE+Zgrbd9V9uQmc8Vnnt2SrI6foYD8ZDY= Subject key identifier: 9B:28:45:00:DF:E2:C6:8B:90:AC:AB:4D:83:E0:F9:16:49:F0:40:D0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498AAD9C92D7F880A1146290 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8e:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ad:9c:92:d7:f8:80:a1:14:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=255a977f-a41d-4932-a461-0825c1c786f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:b9:7d:fe:63:ae:dc:ba:93:4a:92:59:66: 5e:ae:ac:31:0c:79:0f:fa:28:8f:ae:9d:a6:53:0e: fe:92:01:6a:c9:6e:38:20:8b:d1:42:06:b2:64:bc: ef:88:5c:a7:99:5c:49:43:1a:66:ce:f7:f6:01:7c: 72:98:84:7e:81:33:c5:4c:4c:12:a9:f8:78:eb:b6: 8d:fb:d4:44:10:65:d4:a0:8e:2f:43:5b:bc:40:5b: 86:5d:cb:11:5d:35:b9:7a:a3:96:a9:6e:ab:07:f8: bd:bf:05:0a:6e:8b:b3:e2:d4:40:25:d3:73:a9:95: 36:53:4b:04:e9:39:af:04:52:7c:8d:e3:80:8d:12: 1c:e7:22:d1:89:d7:99:54:71:38:c4:51:89:dd:58: d2:ee:e8:fc:c2:08:c3:73:d1:e0:0f:60:53:b2:c4: 88:b1:af:40:4f:9c:0b:2e:44:e0:01:dc:0b:94:7d: 22:d4:d2:eb:c3:98:d6:ac:d2:35:14:4c:9e:33:d9: 59:c6:bd:7d:8c:54:1a:49:d6:94:b5:46:25:42:91: 07:f0:4c:57:92:3e:30:4e:fa:ae:4f:05:6e:fb:e5: 6c:c3:8b:db:13:23:78:49:b9:ac:6e:da:db:c8:d4: b1:b9:98:8a:21:3d:e1:ca:b6:a7:5b:0a:e0:76:1f: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:28:45:00:DF:E2:C6:8B:90:AC:AB:4D:83:E0:F9:16:49:F0:40:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f2:cc:4b:2c:45:36:f0:a7:af:6f:c4:a0:ec:c8:60:07:25: 2c:85:3d:01:c2:35:e5:bd:40:9a:36:36:52:c0:c0:68:75:80: dc:30:22:0a:80:ae:87:b9:94:6c:1c:a8:16:b2:5f:10:cf:51: 3b:39:74:42:14:33:b4:f5:84:06:68:63:92:a8:ec:d2:ac:49: f3:1f:4b:d8:75:3b:bf:37:56:1e:d0:bf:49:c1:da:4c:7d:7f: d0:36:51:0f:fc:3a:b2:ab:9f:58:74:70:ef:a5:fe:78:8d:77: f3:2c:53:52:28:9f:74:ab:99:17:ba:12:7d:a7:2b:81:b0:4e: bd:f8:5c:39:1e:62:dd:c1:4c:83:bd:01:c7:71:dd:0e:08:fa: 6f:54:25:51:41:8a:77:78:3d:d4:2a:8e:73:0e:42:c7:e9:54: f2:96:63:69:c0:d3:e4:f0:6b:d3:3e:59:02:e9:01:bd:7a:00: e6:07:7b:74:16:22:4a:1d:78:c1:10:f7:de:94:52:d2:de:9b: cf:85:ac:fa:4c:5e:81:22:4e:96:a9:1b:77:5a:ed:0c:97:94: cc:b2:f8:bf:0e:0d:54:9c:78:dd:a9:a2:6d:88:0d:ea:c6:90: 92:5c:54:58:aa:b4:2c:51:29:54:f0:f5:df:5c:f1:c9:fc:34: 3a:85:15:a2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jiq2cktf4gKEUYpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjU1YTk3N2YtYTQxZC00OTMyLWE0NjEtMDgyNWMxYzc4NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I65ff5jrty6k0qSWWZerqwxDHkP+iiPrp2m Uw7+kgFqyW44IIvRQgayZLzviFynmVxJQxpmzvf2AXxymIR+gTPFTEwSqfh467aN +9REEGXUoI4vQ1u8QFuGXcsRXTW5eqOWqW6rB/i9vwUKbouz4tRAJdNzqZU2U0sE 6TmvBFJ8jeOAjRIc5yLRideZVHE4xFGJ3VjS7uj8wgjDc9HgD2BTssSIsa9AT5wL LkTgAdwLlH0i1NLrw5jWrNI1FEyeM9lZxr19jFQaSdaUtUYlQpEH8ExXkj4wTvqu TwVu++Vsw4vbEyN4SbmsbtrbyNSxuZiKIT3hyranWwrgdh8JzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJsoRQDf4saLkKyrTYPg+RZJ8EDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzhmZGNhM2MtYjhlOS0z MDMxLTk3NTctMTU0YzJiN2Q3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujgQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmvLMSyxFNvCnr2/EoOzIYAclLIU9AcI15b1AmjY2UsDAaHWA3DAi CoCuh7mUbByoFrJfEM9ROzl0QhQztPWEBmhjkqjs0qxJ8x9L2HU7vzdWHtC/ScHa TH1/0DZRD/w6squfWHRw76X+eI138yxTUiifdKuZF7oSfacrgbBOvfhcOR5i3cFM g70Bx3HdDgj6b1QlUUGKd3g91CqOcw5Cx+lU8pZjacDT5PBr0z5ZAukBvXoA5gd7 dBYiSh14wRD33pRS0t6bz4Ws+kxegSJOlqkbd1rtDJeUzLL4vw4NVJx43amibYgN 6saQklxUWKq0LFEpVPD131zxyfw0OoUVog== -----END CERTIFICATE-----Generated at Fri Sep 25 15:39:10 2026 by rpki-client