$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa File: b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa (raw, json) Hash identifier: 6cdOCmWcVvb73+dIc/DLAY9rCM97Wbrml+KtB9zfpCM= Subject key identifier: 30:0F:29:00:DC:46:45:B5:F3:1A:25:06:C6:50:9F:79:97:33:95:93 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4972B1A5427152F6743490C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e87:5c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b1:a5:42:71:52:f6:74:34:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28509f72-6748-4d02-9a7a-6c141ecac895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:5f:d1:b3:f3:76:79:af:68:bb:50:48:1b: c2:71:e9:87:92:9a:72:2d:74:f2:2f:3d:b0:94:58: c2:0d:a4:f1:9e:29:df:a3:0b:0b:eb:05:c3:0b:31: 5a:4d:57:60:d6:3a:63:56:af:bb:91:6e:eb:b2:17: 51:a3:62:7c:a4:d3:a1:b7:e8:3c:e1:15:23:bd:1e: 1e:10:c3:2d:cc:e3:3d:3f:40:00:7e:7a:80:aa:b1: d1:23:b8:43:60:bf:18:c4:d6:c2:e6:90:65:b3:c3: 3f:9b:a1:f3:c7:1d:e9:8c:46:dd:83:43:d6:44:83: b9:e3:a0:0a:e7:f6:c3:0e:e2:44:ec:0d:06:da:fe: 90:39:24:20:2e:ea:b0:20:54:23:37:f9:e3:37:b5: 1d:96:11:38:fd:85:3c:d5:86:f0:d7:8b:ea:c9:2f: 43:7c:d8:5d:2e:d7:12:27:d0:31:fa:70:5e:59:73: bb:67:05:79:33:56:e5:7e:3e:83:54:04:8a:e2:2a: 54:51:13:68:f1:ce:9f:bd:80:c9:72:63:df:b3:52: d8:85:33:52:58:e2:58:ca:62:00:8d:1d:ab:16:54: b2:7e:18:31:b4:4d:db:1f:fa:30:39:dd:7a:94:7d: 3c:3e:62:48:76:68:73:d9:d1:86:57:0a:24:c1:90: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:29:00:DC:46:45:B5:F3:1A:25:06:C6:50:9F:79:97:33:95:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8bb2c50-df52-3e31-9c9e-a84b635551b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:5c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ce:42:4c:09:b5:0d:1e:5a:ed:6a:5a:c9:9f:00:d3:aa:8b: 6e:a8:c9:93:d2:5c:37:d5:a3:4e:73:1a:8a:08:d2:1c:2d:69: ce:84:11:3d:89:c9:6e:a5:97:b3:d4:0e:cf:36:99:53:77:30: 49:2f:1e:73:b9:9b:2d:bd:8a:b2:5d:7a:a8:3b:d5:e9:6c:11: d9:91:d5:10:e3:6c:5b:76:ff:6d:40:76:dd:ff:a4:7e:2a:c3: e0:f2:16:a9:ee:09:4d:79:7d:c9:f7:73:55:60:22:b1:45:88: f5:1c:ce:fb:52:10:47:6a:10:83:82:ad:38:66:9b:0e:9c:77: 49:b5:b7:4d:64:92:56:f2:e7:19:cf:b2:ac:e5:f3:98:7f:e0: 8c:2e:92:d3:71:d9:1f:58:c4:bf:69:38:d6:87:7a:2f:b9:ca: 3e:de:94:2c:50:47:4b:73:42:04:ea:46:d8:b7:00:32:eb:4d: 29:4b:77:47:a3:92:53:8c:58:2f:e2:da:35:01:22:92:f1:27: 04:07:67:e2:31:c1:fb:e9:39:9c:85:93:95:4f:a9:cf:96:57: 95:34:4f:05:0d:b5:6a:ba:49:3e:69:cc:37:32:bb:72:07:40: c7:f0:72:38:ac:d1:55:0c:f9:ff:77:73:7f:2c:57:58:be:a4: ff:36:9a:24 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcrGlQnFS9nQ0kMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg1MDlmNzItNjc0OC00ZDAyLTlhN2EtNmMxNDFlY2FjODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQZf0bPzdnmvaLtQSBvCcemHkppyLXTyLz2w lFjCDaTxninfowsL6wXDCzFaTVdg1jpjVq+7kW7rshdRo2J8pNOht+g84RUjvR4e EMMtzOM9P0AAfnqAqrHRI7hDYL8YxNbC5pBls8M/m6Hzxx3pjEbdg0PWRIO546AK 5/bDDuJE7A0G2v6QOSQgLuqwIFQjN/njN7UdlhE4/YU81Ybw14vqyS9DfNhdLtcS J9Ax+nBeWXO7ZwV5M1blfj6DVASK4ipUURNo8c6fvYDJcmPfs1LYhTNSWOJYymIA jR2rFlSyfhgxtE3bH/owOd16lH08PmJIdmhz2dGGVwokwZCA4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDAPKQDcRkW18xolBsZQn3mXM5WTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjhiYjJjNTAtZGY1Mi0z ZTMxLTljOWUtYTg0YjYzNTU1MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh1ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGc5CTAm1DR5a7WpayZ8A06qLbqjJk9JcN9WjTnMaigjSHC1pzoQR PYnJbqWXs9QOzzaZU3cwSS8ec7mbLb2Ksl16qDvV6WwR2ZHVEONsW3b/bUB23f+k firD4PIWqe4JTXl9yfdzVWAisUWI9RzO+1IQR2oQg4KtOGabDpx3SbW3TWSSVvLn Gc+yrOXzmH/gjC6S03HZH1jEv2k41od6L7nKPt6ULFBHS3NCBOpG2LcAMutNKUt3 R6OSU4xYL+LaNQEikvEnBAdn4jHB++k5nIWTlU+pz5ZXlTRPBQ21arpJPmnMNzK7 cgdAx/ByOKzRVQz5/3dzfyxXWL6k/zaaJA== -----END CERTIFICATE-----Generated at Sat Sep 26 11:04:21 2026 by rpki-client