$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a853e90-3a29-37de-b44c-7f9252ad2a57.roa File: 8a853e90-3a29-37de-b44c-7f9252ad2a57.roa (raw, json) Hash identifier: ADHpAsedhqvGOg2sBCoKQhhCKeAFRwklMDFWPsfPSxY= Subject key identifier: A9:71:9B:60:27:69:CF:87:71:0B:65:22:D7:6B:24:A1:DC:1C:0F:3C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EF44CAFEF0B76CA22A31ADC40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a853e90-3a29-37de-b44c-7f9252ad2a57.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8f:6400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:af:ef:0b:76:ca:22:a3:1a:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=898ef935-5682-4ca6-b760-debf5b0fe3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:7c:a1:45:fb:bf:01:29:23:db:f1:7e:43: 29:10:b3:49:58:ad:d4:76:32:bc:6a:f2:d2:17:02: 7f:da:59:b7:db:90:60:dd:14:b9:6e:db:3e:a4:a2: c0:1b:0d:d1:f7:12:73:0d:5e:5d:66:13:57:6a:c5: f3:f0:9e:1d:cc:85:a4:80:42:93:b0:e1:b5:f8:69: 82:18:d4:30:2f:da:89:3e:40:47:92:46:27:39:89: 1f:55:8a:e3:bd:37:e0:2c:cb:8e:84:fd:a6:bc:0c: 28:a4:9a:25:f4:f2:57:80:24:d9:4f:02:24:2f:cf: af:5f:5c:8b:33:88:8e:8d:7e:a3:ad:cf:15:53:c9: 67:0b:78:23:95:b1:e2:dd:cb:26:f3:d0:46:93:a7: 5d:de:c7:d8:c7:0e:36:27:b9:ad:9b:5b:1b:fe:b1: 92:c2:99:bb:56:2f:93:91:ec:78:04:cd:16:c7:48: fe:69:24:23:0b:19:a2:12:e0:ca:8e:c2:d0:8c:61: ec:45:bd:7b:6d:cb:be:6e:47:26:4b:60:60:ff:18: 52:11:e5:52:c6:e8:15:a9:f9:ce:55:9b:f6:49:c5: 3d:fe:46:f7:28:69:f3:3b:0b:bc:69:cd:c8:fa:06: 6e:22:29:a3:2e:4f:95:d0:e0:03:fc:e7:5e:89:9a: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:9B:60:27:69:CF:87:71:0B:65:22:D7:6B:24:A1:DC:1C:0F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8a853e90-3a29-37de-b44c-7f9252ad2a57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:6400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:15:d3:ab:39:75:3f:93:7b:1d:14:f0:a5:71:84:90:7d:07: 65:ef:3c:da:5d:19:44:48:bc:9a:55:fe:7e:9d:2a:3f:a6:7d: 75:eb:fd:ae:64:c8:6f:ac:b3:a5:93:57:cf:30:75:8e:62:a3: ee:2b:b1:b7:85:ec:f4:4b:5d:c9:d3:d1:7f:11:50:f4:df:94: 26:28:d1:61:7f:11:f4:20:52:73:5a:02:29:97:0f:c5:cc:61: bf:ac:a5:12:35:2c:c2:6f:e3:fb:c1:7c:34:94:39:a8:2b:de: 95:13:30:72:ad:0a:fa:eb:d6:f1:01:3f:d1:73:64:ef:a4:1e: 42:08:60:4f:0c:5e:7c:d0:79:e2:a5:ce:6c:e6:2f:60:32:11: b9:59:8b:b4:fe:ca:53:6c:77:bd:1f:fb:c2:f5:77:e9:40:ba: 8c:fc:29:28:62:cc:14:3d:d9:e8:8f:0a:e3:41:2e:c2:f6:f9: eb:da:49:a2:75:24:02:1b:f0:41:5e:ac:3f:93:aa:1d:42:8e: 8b:c5:68:f8:f0:dd:89:ce:f8:61:15:80:ef:a3:2f:de:57:0c: 68:01:80:0a:16:ae:5b:11:52:51:ee:09:2d:b9:9f:93:9d:87: 4f:99:74:03:78:74:ca:27:14:eb:e1:19:95:9a:f9:24:a8:38: 45:5b:c4:5e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE70TK/vC3bKIqMa3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ODk4ZWY5MzUtNTY4Mi00Y2E2LWI3NjAtZGViZjViMGZlM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc58oUX7vwEpI9vxfkMpELNJWK3UdjK8avLS FwJ/2lm325Bg3RS5bts+pKLAGw3R9xJzDV5dZhNXasXz8J4dzIWkgEKTsOG1+GmC GNQwL9qJPkBHkkYnOYkfVYrjvTfgLMuOhP2mvAwopJol9PJXgCTZTwIkL8+vX1yL M4iOjX6jrc8VU8lnC3gjlbHi3csm89BGk6dd3sfYxw42J7mtm1sb/rGSwpm7Vi+T kex4BM0Wx0j+aSQjCxmiEuDKjsLQjGHsRb17bcu+bkcmS2Bg/xhSEeVSxugVqfnO VZv2ScU9/kb3KGnzOwu8ac3I+gZuIimjLk+V0OAD/OdeiZrC0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKlxm2Anac+HcQtlItdrJKHcHA88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGE4NTNlOTAtM2EyOS0z N2RlLWI0NGMtN2Y5MjUyYWQyYTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj2Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAhXTqzl1P5N7HRTwpXGEkH0HZe882l0ZREi8mlX+fp0qP6Z9dev9 rmTIb6yzpZNXzzB1jmKj7iuxt4Xs9EtdydPRfxFQ9N+UJijRYX8R9CBSc1oCKZcP xcxhv6ylEjUswm/j+8F8NJQ5qCvelRMwcq0K+uvW8QE/0XNk76QeQghgTwxefNB5 4qXObOYvYDIRuVmLtP7KU2x3vR/7wvV36UC6jPwpKGLMFD3Z6I8K40Euwvb569pJ onUkAhvwQV6sP5OqHUKOi8Vo+PDdic74YRWA76Mv3lcMaAGAChauWxFSUe4JLbmf k52HT5l0A3h0yicU6+EZlZr5JKg4RVvEXg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:20:12 2026 by rpki-client