$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/412c0d90-0912-32d2-ae4e-124b30950c9f.roa File: 412c0d90-0912-32d2-ae4e-124b30950c9f.roa (raw, json) Hash identifier: MjCOyD4QzyjiQv5SqGN4pTCbYdSDeLIqUHm7oJ15vWE= Subject key identifier: 31:A1:DD:CA:44:73:FF:7D:8C:FC:22:EA:D8:62:C4:1F:91:94:56:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49737D7EA624033BE99F5C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/412c0d90-0912-32d2-ae4e-124b30950c9f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e89:3800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7d:7e:a6:24:03:3b:e9:9f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4299ccc-10b8-4962-8e0d-be2fd4a2ed4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fb:ff:4b:4b:50:06:7e:ea:ce:08:3e:79:d1: 64:56:75:93:81:57:15:97:c5:43:e7:7c:59:e0:67: e4:57:8d:f8:48:c7:2e:41:2a:7e:e4:5c:08:30:60: 6a:40:5b:d2:b9:fa:a0:57:10:c5:f9:18:9f:86:e0: be:87:cc:0b:af:c0:14:e2:30:9f:3c:e9:17:df:a2: a2:93:8a:7b:c0:7b:ff:ec:be:fe:16:75:48:e4:28: 67:54:99:63:62:8c:9e:b6:f7:b5:7e:37:4b:f0:65: df:b5:02:3c:54:99:2a:af:73:c5:fb:c2:09:f3:13: 41:7b:c2:90:c9:65:92:0f:c2:bc:28:ee:63:5b:7d: 1f:bf:1e:9f:01:b9:b8:07:94:a1:40:3f:94:45:1f: 42:cd:83:2a:18:33:ce:8d:3d:db:de:76:20:0e:e7: f6:98:13:15:c8:93:ae:e3:a1:6d:e7:ab:d0:7e:d2: 05:3a:f8:de:67:d2:31:ac:01:0c:e8:22:c5:10:ae: 27:72:29:3d:91:ab:ea:0e:eb:a3:ec:47:33:0c:07: 83:84:f7:3f:1f:5b:2a:0b:f1:cd:67:f4:4c:75:3f: 41:48:61:33:16:19:7d:1e:c1:17:49:6b:fa:a7:be: cb:ac:dc:04:c9:9c:ad:cb:71:a4:e1:97:e9:13:65: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A1:DD:CA:44:73:FF:7D:8C:FC:22:EA:D8:62:C4:1F:91:94:56:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/412c0d90-0912-32d2-ae4e-124b30950c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:14:41:6f:7f:3a:7c:8b:99:f1:20:09:c5:84:64:25:96:3d: b7:89:dc:6b:77:af:83:60:e5:5f:c2:fd:a1:25:a2:86:54:c3: ae:b5:2b:c2:dd:31:b8:2c:ff:8c:45:5b:5b:ee:90:e8:60:d3: b7:5e:c0:cc:28:29:60:d8:58:90:e6:15:8e:19:cc:bd:13:e5: 5f:86:c9:8d:91:a8:20:8e:5d:36:1a:9f:94:a6:b0:9f:50:5a: d3:67:ba:34:3f:2f:83:68:b9:98:08:5b:e9:f7:41:43:91:3c: e4:e4:14:71:40:f6:7c:5b:4a:77:d9:20:d8:0b:8e:97:44:02: d6:bf:4a:b8:f2:22:e7:32:2e:2b:1b:5a:25:ca:96:34:de:91: c7:01:69:16:a1:6f:96:42:f5:09:ad:95:66:e1:72:10:fb:70: c9:54:e9:05:4b:e3:8e:51:2e:35:dc:62:7a:3d:fd:42:7a:76: 69:d2:6f:bf:00:08:58:9d:cb:cd:79:53:a8:a3:84:bf:9e:cf: 40:ed:07:93:35:38:c1:14:49:51:10:66:ec:8c:43:29:af:27: aa:d6:d3:5c:6b:ba:99:1a:24:dc:cd:ce:ec:8c:09:8f:24:0b: 09:2f:2f:4b:50:ff:73:1f:b0:d5:e9:c2:09:64:e6:dc:a5:f7: 47:62:50:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc31+piQDO+mfXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjQyOTljY2MtMTBiOC00OTYyLThlMGQtYmUyZmQ0YTJlZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPv/S0tQBn7qzgg+edFkVnWTgVcVl8VD53xZ 4GfkV434SMcuQSp+5FwIMGBqQFvSufqgVxDF+RifhuC+h8wLr8AU4jCfPOkX36Ki k4p7wHv/7L7+FnVI5ChnVJljYoyetve1fjdL8GXftQI8VJkqr3PF+8IJ8xNBe8KQ yWWSD8K8KO5jW30fvx6fAbm4B5ShQD+URR9CzYMqGDPOjT3b3nYgDuf2mBMVyJOu 46Ft56vQftIFOvjeZ9IxrAEM6CLFEK4ncik9kavqDuuj7EczDAeDhPc/H1sqC/HN Z/RMdT9BSGEzFhl9HsEXSWv6p77LrNwEyZyty3Gk4ZfpE2XO9wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDGh3cpEc/99jPwi6thixB+RlFbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDEyYzBkOTAtMDkxMi0z MmQyLWFlNGUtMTI0YjMwOTUwYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANhRBb386fIuZ8SAJxYRkJZY9t4nca3evg2DlX8L9oSWihlTDrrUr wt0xuCz/jEVbW+6Q6GDTt17AzCgpYNhYkOYVjhnMvRPlX4bJjZGoII5dNhqflKaw n1Ba02e6ND8vg2i5mAhb6fdBQ5E85OQUcUD2fFtKd9kg2AuOl0QC1r9KuPIi5zIu KxtaJcqWNN6RxwFpFqFvlkL1Ca2VZuFyEPtwyVTpBUvjjlEuNdxiej39Qnp2adJv vwAIWJ3LzXlTqKOEv57PQO0HkzU4wRRJURBm7IxDKa8nqtbTXGu6mRok3M3O7IwJ jyQLCS8vS1D/cx+w1enCCWTm3KX3R2JQVg== -----END CERTIFICATE-----Generated at Tue Sep 29 03:02:08 2026 by rpki-client