$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa File: 80939abe-b918-3e98-bf49-7b9dc0e79a76.roa (raw, json) Hash identifier: B748RE+d408wdsmZ/k8xLNTcS/C/CiEEiVN2EtNywKA= Subject key identifier: D5:D7:2C:B7:56:25:2C:D4:03:0B:5C:25:8F:FE:FD:5A:D7:C0:C2:82 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3DE61DF80D1429EEFC7B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8d:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e6:1d:f8:0d:14:29:ee:fc:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cff76dc7-ef29-4c3d-823f-9a600931877c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:c0:2a:16:b5:34:28:8e:b4:61:84:5a:f1: 42:06:fd:a9:a1:6d:16:49:a3:2a:7e:9a:97:89:0d: 8f:7c:8f:74:7b:59:cc:6a:a5:0e:50:76:dc:5d:e0: d3:a0:a6:e0:f9:22:2b:a3:a4:fd:d5:27:e5:2f:f0: d3:73:16:24:8c:9f:28:00:53:64:a2:a8:cf:3f:4c: 1f:39:08:3e:bf:3a:bc:4b:fd:f3:cc:d3:7c:24:87: 53:af:64:7d:e0:c2:3b:7f:9e:63:5a:65:15:1f:55: c3:cd:32:f0:60:51:20:45:66:e4:7e:17:04:0a:30: a6:44:8b:8e:c4:ba:c8:b7:26:0e:fb:84:9c:98:db: 8b:88:fe:2a:c8:41:27:e9:00:ad:3e:ce:76:8e:96: ae:24:a8:40:62:04:62:65:e0:f3:e8:3e:64:db:2e: 21:98:04:69:58:1b:69:60:e5:7c:f5:82:28:7e:80: 63:10:0c:27:4a:d8:ac:d0:aa:4e:7a:81:0c:8c:27: e1:f0:a2:67:fb:38:a0:c2:b9:ec:13:a1:48:85:ae: 42:49:50:c8:d1:c3:51:f4:2b:db:e6:60:63:a6:4d: 80:28:20:ad:af:71:7e:23:1a:b0:dc:c3:d7:5d:cc: 89:36:34:f0:79:2a:2e:79:93:19:73:91:5e:69:1d: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:2C:B7:56:25:2C:D4:03:0B:5C:25:8F:FE:FD:5A:D7:C0:C2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/80939abe-b918-3e98-bf49-7b9dc0e79a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0e:3a:92:21:df:51:38:39:a6:9f:cc:0b:21:a3:af:42:c2: 0b:a4:fa:fe:96:82:01:57:d7:91:a7:5a:94:ba:8a:2f:11:3b: b7:c7:ce:af:31:a4:eb:08:c6:76:9f:5e:fa:f0:26:50:35:f9: b2:b0:3e:3c:72:14:38:84:1a:dc:a5:33:53:bf:46:b6:c0:50: 68:d8:26:77:89:39:a2:5c:ec:c5:38:53:8c:53:34:b4:81:45: f2:52:90:71:5d:81:93:86:19:35:55:de:c0:99:23:83:b2:cd: 58:64:66:dd:b0:14:84:72:a6:91:98:17:84:54:d6:d9:49:52: 31:9b:b8:1c:41:48:8e:09:cf:86:8a:0b:83:5d:b5:09:a7:e9: a7:95:59:fd:2f:63:84:53:13:84:a5:99:12:de:02:51:f9:a2: 41:0f:60:b9:6d:72:38:51:a9:59:ea:6a:1c:b4:96:d0:41:fb: 97:86:2c:b7:da:04:a1:fe:1d:90:04:1f:98:d5:ce:da:bb:92: 7e:e4:4f:56:14:bf:75:bd:66:a8:c0:35:44:4c:d3:fc:fb:95: ca:70:41:c3:74:9b:b2:c0:9b:e5:ed:4b:ca:c6:69:f4:f9:dc: d5:aa:68:68:6d:5e:13:b6:4b:1c:32:cc:12:fe:ca:67:a0:e7: e5:a3:8e:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPeYd+A0UKe78e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2ZmNzZkYzctZWYyOS00YzNkLTgyM2YtOWE2MDA5MzE4NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlLAKha1NCiOtGGEWvFCBv2poW0WSaMqfpqX iQ2PfI90e1nMaqUOUHbcXeDToKbg+SIro6T91SflL/DTcxYkjJ8oAFNkoqjPP0wf OQg+vzq8S/3zzNN8JIdTr2R94MI7f55jWmUVH1XDzTLwYFEgRWbkfhcECjCmRIuO xLrItyYO+4ScmNuLiP4qyEEn6QCtPs52jpauJKhAYgRiZeDz6D5k2y4hmARpWBtp YOV89YIofoBjEAwnStis0KpOeoEMjCfh8KJn+zigwrnsE6FIha5CSVDI0cNR9Cvb 5mBjpk2AKCCtr3F+Ixqw3MPXXcyJNjTweSoueZMZc5FeaR0gJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNXXLLdWJSzUAwtcJY/+/VrXwMKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODA5MzlhYmUtYjkxOC0z ZTk4LWJmNDktN2I5ZGMwZTc5YTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujTAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoA46kiHfUTg5pp/MCyGjr0LCC6T6/paCAVfXkadalLqKLxE7t8fO rzGk6wjGdp9e+vAmUDX5srA+PHIUOIQa3KUzU79GtsBQaNgmd4k5olzsxThTjFM0 tIFF8lKQcV2Bk4YZNVXewJkjg7LNWGRm3bAUhHKmkZgXhFTW2UlSMZu4HEFIjgnP hooLg121Cafpp5VZ/S9jhFMThKWZEt4CUfmiQQ9guW1yOFGpWepqHLSW0EH7l4Ys t9oEof4dkAQfmNXO2ruSfuRPVhS/db1mqMA1REzT/PuVynBBw3SbssCb5e1LysZp 9Pnc1apoaG1eE7ZLHDLMEv7KZ6Dn5aOOsQ== -----END CERTIFICATE-----Generated at Mon Sep 28 14:29:59 2026 by rpki-client