$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/866942ba-55ae-34a4-856e-dfa200eb8dc2.roa File: 866942ba-55ae-34a4-856e-dfa200eb8dc2.roa (raw, json) Hash identifier: dwHh7jzfPjG+UOoEYrCberKt/2n7lj3TUkLh4NT2jNQ= Subject key identifier: 1A:DB:B7:FC:83:8C:55:9D:99:6F:83:82:36:3D:FD:C4:E4:D1:82:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ED001C934800CDB04F4467580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/866942ba-55ae-34a4-856e-dfa200eb8dc2.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8f:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:c9:34:80:0c:db:04:f4:46:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=353ac4f5-9ca8-4755-ade1-f0ce6f31dd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:72:bf:fc:7d:56:44:22:5d:55:f0:9c:6d:ca: 48:b5:b6:71:51:3b:76:14:d6:82:90:d0:4b:fd:fc: 72:45:db:33:71:0f:05:09:c9:39:b7:46:c0:7a:b5: e6:69:20:68:eb:22:b7:7b:74:14:3c:c2:d3:e0:fb: 2f:6b:e6:07:55:3e:9a:48:16:18:32:a6:7d:b3:11: 63:cb:02:3f:0a:c4:4d:89:13:c4:52:a6:80:25:9d: a9:9e:aa:39:96:6a:91:0e:57:ab:ed:c8:01:82:7f: f7:84:67:5f:8d:88:a8:fb:68:9d:ab:2a:88:10:e9: 6f:9f:ba:8f:63:c3:c1:11:59:7f:0b:27:35:d5:86: 59:df:33:41:f1:65:6a:03:7e:22:fa:21:ab:71:2f: 45:55:ea:27:0d:c4:c5:4d:20:56:90:ea:d3:98:c9: 68:cd:e5:73:ba:59:3b:d5:46:00:47:f4:4b:11:e1: fb:3b:6d:71:17:07:a1:7c:00:5f:21:99:b6:9d:0b: 63:a2:5e:ba:49:b6:68:2c:c1:0d:ab:f3:4d:ca:71: 75:89:09:fa:37:5d:31:55:e3:58:a5:2b:04:c2:5a: 25:58:07:76:c6:15:c4:a5:19:fe:25:50:be:ea:2b: ad:d5:9a:d0:1f:13:9a:da:ab:6c:db:f2:a2:cc:8c: b6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:B7:FC:83:8C:55:9D:99:6F:83:82:36:3D:FD:C4:E4:D1:82:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/866942ba-55ae-34a4-856e-dfa200eb8dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0f:aa:5a:71:22:01:82:81:36:20:ef:82:bd:b4:0b:d6:78: fc:93:bc:68:d2:97:ce:68:8a:7e:60:ce:eb:29:92:67:73:b7: ac:3f:0f:55:63:c1:7b:9c:6c:90:f8:ba:34:21:81:6f:09:1d: 78:96:30:b6:f3:1c:e9:89:b2:b7:13:a0:4a:ea:64:b5:8d:95: 83:62:e2:87:10:56:2f:7d:32:93:76:7c:05:ee:a9:cd:56:61: a9:31:bc:78:35:c8:fa:4a:bd:c8:9e:48:7b:b5:a1:10:37:4c: 12:e7:84:19:ba:e4:c7:6d:f2:dc:91:fa:24:64:2d:6f:9e:2a: 15:b9:3d:5b:dd:35:c4:fe:e2:e6:f0:46:68:fe:6c:2e:49:22: 12:cb:27:3e:2d:fc:50:9f:a8:ae:3f:80:37:15:39:5a:d7:41: 58:25:ff:99:77:6b:d5:3c:6f:77:9d:c4:22:ef:80:e7:9c:79: 91:83:e9:0f:43:3d:c4:7e:9f:cc:98:e9:bd:a2:9b:f6:eb:58: 93:3b:90:fb:49:d6:a2:90:b0:04:76:05:f3:b7:e2:55:19:b7: 4e:00:75:86:05:b1:0d:db:d8:14:c6:8d:a0:2a:57:52:8d:40: 92:59:79:d6:56:f0:9e:e2:8c:94:db:3b:6a:bc:88:9b:d7:7a: d6:59:9b:21 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7QAck0gAzbBPRGdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MzUzYWM0ZjUtOWNhOC00NzU1LWFkZTEtZjBjZTZmMzFkZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnK//H1WRCJdVfCcbcpItbZxUTt2FNaCkNBL /fxyRdszcQ8FCck5t0bAerXmaSBo6yK3e3QUPMLT4Psva+YHVT6aSBYYMqZ9sxFj ywI/CsRNiRPEUqaAJZ2pnqo5lmqRDler7cgBgn/3hGdfjYio+2idqyqIEOlvn7qP Y8PBEVl/Cyc11YZZ3zNB8WVqA34i+iGrcS9FVeonDcTFTSBWkOrTmMlozeVzulk7 1UYAR/RLEeH7O21xFwehfABfIZm2nQtjol66SbZoLMENq/NNynF1iQn6N10xVeNY pSsEwlolWAd2xhXEpRn+JVC+6iut1ZrQHxOa2qts2/KizIy2jwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBrbt/yDjFWdmW+DgjY9/cTk0YLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODY2OTQyYmEtNTVhZS0z NGE0LTg1NmUtZGZhMjAwZWI4ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj1Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaQ+qWnEiAYKBNiDvgr20C9Z4/JO8aNKXzmiKfmDO6ymSZ3O3rD8P VWPBe5xskPi6NCGBbwkdeJYwtvMc6YmytxOgSupktY2Vg2LihxBWL30yk3Z8Be6p zVZhqTG8eDXI+kq9yJ5Ie7WhEDdMEueEGbrkx23y3JH6JGQtb54qFbk9W901xP7i 5vBGaP5sLkkiEssnPi38UJ+orj+ANxU5WtdBWCX/mXdr1Txvd53EIu+A55x5kYPp D0M9xH6fzJjpvaKb9utYkzuQ+0nWopCwBHYF87fiVRm3TgB1hgWxDdvYFMaNoCpX Uo1Akll51lbwnuKMlNs7aryIm9d61lmbIQ== -----END CERTIFICATE-----Generated at Tue Sep 22 14:51:00 2026 by rpki-client