$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a539f1c3-7f27-35e4-85f3-5321c0dcb005.roa File: a539f1c3-7f27-35e4-85f3-5321c0dcb005.roa (raw, json) Hash identifier: hzYD5WbnIUESNkqyIZ0Cnex6HaD1RvQE1fSkM5IX2uk= Subject key identifier: A9:BE:1D:73:3C:9F:7C:30:42:70:D3:CB:42:76:16:13:48:1A:75:87 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA795BC914FF3FEF114BDC380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a539f1c3-7f27-35e4-85f3-5321c0dcb005.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8d:9800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:bc:91:4f:f3:fe:f1:14:bd:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2fc4aa6e-517b-4350-bfc4-d5247582e8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:ff:46:6e:90:0a:6f:95:f2:79:30:15:a0: 96:85:ed:fe:2c:3f:46:7f:4a:25:c9:53:66:10:56: 67:9f:37:b0:66:a4:9e:e2:32:23:ec:67:56:c1:74: f5:4b:ab:26:f3:5b:44:01:14:66:67:0b:01:d5:4c: 5e:b9:97:1f:cb:26:5a:28:1f:fc:69:7a:27:14:4d: c2:bd:da:f5:de:5c:84:bd:77:ae:dc:6b:1e:be:53: 29:81:3a:71:6a:b3:12:b1:ae:c9:3f:80:6a:a6:9b: 33:36:5b:3b:cb:f3:6b:14:f6:c5:bb:c0:67:db:9b: 83:6c:64:3f:ec:dc:2f:56:ca:07:3d:e8:5c:cb:2e: 60:2d:a0:1c:fc:3f:1c:55:27:66:e1:de:1e:1a:44: 52:f4:b3:55:e2:38:4e:8e:78:d2:91:07:e2:69:f6: 1d:47:f7:0a:6a:ea:69:d3:c3:1a:ce:95:25:18:b0: ef:32:bb:a3:f1:64:2e:7b:fa:db:ee:ec:ca:be:67: 51:9c:fc:f3:82:37:32:08:41:10:77:5e:c1:b3:84: 58:b1:6b:5d:2b:83:45:2e:6b:49:cf:56:87:75:b5: 5e:c9:42:47:ac:66:20:9e:08:6f:fc:99:50:7e:44: 05:d4:1b:fc:30:87:ef:df:83:26:5c:e2:e2:f8:f7: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BE:1D:73:3C:9F:7C:30:42:70:D3:CB:42:76:16:13:48:1A:75:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a539f1c3-7f27-35e4-85f3-5321c0dcb005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:9800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:92:08:95:c4:54:41:b1:80:cc:1c:10:85:1f:f3:3e:45:99: 62:6a:88:b5:3c:06:fb:e5:44:57:13:e2:40:32:77:79:13:a9: 52:d4:31:32:55:4a:b4:b9:46:54:77:7c:8b:89:33:32:22:29: b5:cc:92:af:f3:c1:60:d0:41:d4:dd:5a:61:c6:36:46:f1:f4: 98:36:76:07:32:bc:a7:df:9f:2b:bc:38:70:43:4e:13:0f:06: 69:e3:38:66:12:7b:6c:db:0c:d9:08:1c:7f:0b:f2:d7:22:04: 0d:21:0e:6b:1c:09:1d:ff:c7:15:66:84:6e:e7:42:35:79:00: d7:dd:bd:fe:36:93:42:17:7c:4b:67:2f:e4:0d:c5:27:89:c6: b6:c3:64:ca:56:d0:9c:07:01:50:b8:20:2c:b6:dd:b7:cc:4d: 8e:b6:3c:16:af:88:9c:b4:4c:21:fc:a9:e0:f1:21:ad:7e:5c: df:17:b1:17:0f:b0:7a:c3:f2:32:60:6b:d9:fa:e1:55:b7:ee: 51:5d:8c:f7:ff:df:ac:65:50:ba:93:ad:6b:d2:72:92:31:5d: db:49:e3:92:ed:9e:96:4c:d4:d6:0b:cd:32:a5:ed:0f:ce:ee: bf:c0:f4:c2:29:b3:af:50:56:1f:68:22:e2:1c:2a:84:64:0c: cd:2c:e7:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nlbyRT/P+8RS9w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmZjNGFhNmUtNTE3Yi00MzUwLWJmYzQtZDUyNDc1ODJlOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMr/Rm6QCm+V8nkwFaCWhe3+LD9Gf0olyVNm EFZnnzewZqSe4jIj7GdWwXT1S6sm81tEARRmZwsB1UxeuZcfyyZaKB/8aXonFE3C vdr13lyEvXeu3GsevlMpgTpxarMSsa7JP4BqppszNls7y/NrFPbFu8Bn25uDbGQ/ 7NwvVsoHPehcyy5gLaAc/D8cVSdm4d4eGkRS9LNV4jhOjnjSkQfiafYdR/cKaupp 08MazpUlGLDvMruj8WQue/rb7uzKvmdRnPzzgjcyCEEQd17Bs4RYsWtdK4NFLmtJ z1aHdbVeyUJHrGYgnghv/JlQfkQF1Bv8MIfv34MmXOLi+PeSiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKm+HXM8n3wwQnDTy0J2FhNIGnWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTUzOWYxYzMtN2YyNy0z NWU0LTg1ZjMtNTMyMWMwZGNiMDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbZIIlcRUQbGAzBwQhR/zPkWZYmqItTwG++VEVxPiQDJ3eROpUtQx MlVKtLlGVHd8i4kzMiIptcySr/PBYNBB1N1aYcY2RvH0mDZ2BzK8p9+fK7w4cENO Ew8GaeM4ZhJ7bNsM2Qgcfwvy1yIEDSEOaxwJHf/HFWaEbudCNXkA1929/jaTQhd8 S2cv5A3FJ4nGtsNkylbQnAcBULggLLbdt8xNjrY8Fq+InLRMIfyp4PEhrX5c3xex Fw+wesPyMmBr2frhVbfuUV2M9//frGVQupOta9JykjFd20njku2elkzU1gvNMqXt D87uv8D0wimzr1BWH2gi4hwqhGQMzSzn5A== -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:42 2026 by rpki-client