$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa File: 87ba9799-00ce-307b-99a3-aef0fd849c5c.roa (raw, json) Hash identifier: iOpD8vs6d7thCxrFzQvqU5Xd1cFTOkGYXcAqVRFf9o0= Subject key identifier: 86:16:F3:20:2D:32:7D:3E:C3:20:21:A5:9F:FA:0E:FE:7C:A8:43:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49873DF741050C11FFB497A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:6000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:3d:f7:41:05:0c:11:ff:b4:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a416d2e0-9e17-4a90-aba3-40b643faec29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:14:0a:29:81:ef:29:b1:f5:f0:fb:26:22:86: 44:f7:89:ca:12:c0:ae:c1:ac:d3:7e:fd:4a:e7:7a: 6d:17:3c:39:b7:84:98:7d:ff:1d:25:3f:a8:c5:73: 79:6d:5a:50:bc:a8:f5:46:80:31:80:75:e3:96:18: 36:93:e3:a2:09:61:c4:da:9b:4c:a4:14:fa:f5:53: 51:1c:09:66:33:cb:ba:52:f8:cd:c2:bb:27:b8:38: e9:1f:47:a7:de:53:cc:1b:1f:3c:5a:7b:65:8e:63: 71:05:db:73:3f:ff:9b:b0:3e:78:e1:32:32:c4:17: 38:4e:72:b7:e7:45:ba:0a:37:ae:c9:a1:85:54:41: 33:2b:44:bb:f0:5c:4f:4c:41:77:c5:ae:d3:f2:a3: 1c:1e:2d:8f:0b:99:f3:f6:86:aa:3b:0f:fb:11:6f: 32:11:57:21:20:6e:8b:3b:f7:09:f7:11:8a:1c:aa: 22:11:3c:c5:2a:d3:7f:3b:93:82:5a:e9:93:3e:c6: 27:da:bd:98:d0:1e:a1:e6:53:e1:d3:95:79:d7:c6: a0:33:65:bc:d6:48:b9:df:c7:c5:e8:41:44:64:03: 1b:15:5e:19:86:b2:0a:80:a5:ef:6f:28:4d:51:64: b5:e4:3a:e3:0e:41:fb:a4:1b:96:d6:10:15:bb:3c: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:16:F3:20:2D:32:7D:3E:C3:20:21:A5:9F:FA:0E:FE:7C:A8:43:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87ba9799-00ce-307b-99a3-aef0fd849c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:6000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7d:fa:56:ec:83:14:31:a3:15:18:05:d0:68:f1:a7:ea:7f: 7a:26:99:fe:4f:30:c4:64:f8:05:e5:21:44:47:a1:bd:2d:66: ed:80:95:ea:7a:60:65:fb:e0:84:b3:5d:c9:0b:64:b7:6d:60: 57:8b:4b:4e:08:cb:fc:b7:d6:3d:6c:80:15:a1:5b:67:1f:f0: c4:87:2b:7d:96:39:3f:37:4d:b2:64:46:3e:ac:ce:7d:a9:31: 36:d5:ee:cb:7e:ec:9f:f3:92:19:f5:54:1d:20:cb:14:25:fb: 8b:04:7d:9b:8d:be:1e:2b:42:c3:e6:7d:dc:23:00:92:59:c8: 9d:c0:08:a7:7d:11:0e:76:2e:de:a8:9e:61:71:ee:07:43:b3: 3e:d5:e0:38:a6:4d:c7:05:e7:29:3e:59:81:c2:34:18:23:ff: 6b:17:ce:64:7a:d7:e4:b8:f3:99:06:36:81:c1:28:28:a1:bd: 60:34:52:46:02:00:83:bd:51:ca:3e:25:12:19:77:80:f6:b8: 8d:eb:ef:7a:35:d7:d7:3e:15:15:13:2b:ac:0a:49:fc:92:6f: 8b:c8:15:2a:9d:5f:20:56:ea:21:6f:27:f7:93:0a:6b:6d:d7: bb:dd:4c:a9:1c:de:0b:78:d5:1b:95:9b:52:e6:25:97:9d:ba: ee:0d:5a:ae -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jhz33QQUMEf+0l6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQxNmQyZTAtOWUxNy00YTkwLWFiYTMtNDBiNjQzZmFlYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohQKKYHvKbH18PsmIoZE94nKEsCuwazTfv1K 53ptFzw5t4SYff8dJT+oxXN5bVpQvKj1RoAxgHXjlhg2k+OiCWHE2ptMpBT69VNR HAlmM8u6UvjNwrsnuDjpH0en3lPMGx88WntljmNxBdtzP/+bsD544TIyxBc4TnK3 50W6CjeuyaGFVEEzK0S78FxPTEF3xa7T8qMcHi2PC5nz9oaqOw/7EW8yEVchIG6L O/cJ9xGKHKoiETzFKtN/O5OCWumTPsYn2r2Y0B6h5lPh05V518agM2W81ki538fF 6EFEZAMbFV4ZhrIKgKXvbyhNUWS15DrjDkH7pBuW1hAVuzw8NwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIYW8yAtMn0+wyAhpZ/6Dv58qEOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODdiYTk3OTktMDBjZS0z MDdiLTk5YTMtYWVmMGZkODQ5YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaH36VuyDFDGjFRgF0Gjxp+p/eiaZ/k8wxGT4BeUhREehvS1m7YCV 6npgZfvghLNdyQtkt21gV4tLTgjL/LfWPWyAFaFbZx/wxIcrfZY5PzdNsmRGPqzO fakxNtXuy37sn/OSGfVUHSDLFCX7iwR9m42+HitCw+Z93CMAklnIncAIp30RDnYu 3qieYXHuB0OzPtXgOKZNxwXnKT5ZgcI0GCP/axfOZHrX5LjzmQY2gcEoKKG9YDRS RgIAg71Ryj4lEhl3gPa4jevvejXX1z4VFRMrrApJ/JJvi8gVKp1fIFbqIW8n95MK a23Xu91MqRzeC3jVG5WbUuYll5267g1arg== -----END CERTIFICATE-----Generated at Sun Sep 27 00:11:44 2026 by rpki-client