$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be34eda3-e0cc-3e82-a577-e45c92ab1d3d.roa File: be34eda3-e0cc-3e82-a577-e45c92ab1d3d.roa (raw, json) Hash identifier: PCzxmDD+iZZhOtOUlPrM90PkIVno3FJQXYE6kBJnE0I= Subject key identifier: 76:EE:07:CD:9B:98:0D:ED:A4:CD:9B:9A:72:A1:D0:3C:FF:B0:66:EB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F2957A9E42AB47F7857D70890 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be34eda3-e0cc-3e82-a577-e45c92ab1d3d.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 30036 IP address blocks: 2604:2e8f:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:a9:e4:2a:b4:7f:78:57:d7:08:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e331a399-c496-4077-b388-a2821e6aaa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:99:c1:5e:7f:0e:f9:3a:af:73:56:3d:53: fa:69:84:ec:26:f0:48:5e:35:d5:d3:9e:c2:a6:3d: 94:00:04:20:63:60:3e:e3:da:d1:ea:0f:19:ab:3a: b5:26:89:13:4e:33:39:7c:79:ee:bb:51:a8:54:16: 46:94:6e:8f:ac:0d:b0:dd:54:8a:4a:5d:ce:8f:31: a0:a4:65:fb:b6:af:ad:c0:49:85:36:26:46:f5:ff: 51:7f:8a:36:33:13:9b:59:71:48:bb:ac:17:2c:1d: f8:cd:ab:c5:63:3e:53:ec:21:15:8f:94:6e:58:58: 5f:c2:ee:f7:bc:b3:a6:07:a8:c2:13:5a:48:ae:92: f5:3c:e7:74:d5:45:7b:1f:da:8e:6f:a0:65:d8:c3: 80:e2:ea:3c:0c:11:4f:b9:f5:be:8f:3d:ba:70:ad: 19:9d:ce:9e:d7:a1:80:f6:d4:d7:55:42:c8:c3:b1: 6d:05:20:e2:1e:97:0e:c9:4a:4b:3a:79:25:f4:6b: e7:77:14:b3:51:2f:53:ed:5f:24:da:88:b7:ac:c3: 49:da:39:02:8b:34:57:e4:c9:f9:13:fd:ad:5d:27: cf:1d:4f:1d:eb:cb:3a:39:57:a4:5b:98:b4:75:b9: 9d:e5:ce:30:38:8f:e0:56:79:24:a1:f3:22:af:8d: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EE:07:CD:9B:98:0D:ED:A4:CD:9B:9A:72:A1:D0:3C:FF:B0:66:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be34eda3-e0cc-3e82-a577-e45c92ab1d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:08:c8:10:31:6c:f0:fb:d4:13:51:e7:8c:b1:55:5c:ca:bf: f7:de:d0:bd:af:54:96:cd:40:d9:5e:eb:30:87:4a:c9:25:5d: 6f:a2:e6:fa:fa:39:b2:b9:c2:14:04:80:ab:2f:1e:c8:ed:a0: a1:d6:e6:b6:c5:3f:6b:a3:37:57:c0:21:35:a1:63:70:fe:1c: 29:dd:a5:db:79:0b:4a:76:bc:d6:36:b9:bd:96:82:3d:08:31: 15:0a:ef:85:64:a4:a2:46:c8:1c:f3:0b:d2:ba:a8:72:98:93: 2e:ce:3e:ca:cc:11:14:5d:9a:a0:c2:c0:ab:47:9c:27:11:e6: be:0f:6f:05:14:fc:d6:cf:9f:4f:75:87:47:fa:ed:e5:f1:af: 3c:a1:01:a4:c0:3d:b8:d4:a2:64:0c:28:f6:dc:c1:4e:f2:ff: de:68:c9:f0:be:1e:c3:d3:da:3a:c7:f5:b7:f7:3d:94:4c:71: 2b:0c:75:30:79:35:7c:d1:d5:76:bb:e2:39:64:77:a5:47:03: e6:5e:d7:8e:94:cb:1b:80:5e:5c:c5:d4:fd:c7:9a:c4:09:be: 30:ff:a5:10:71:a8:4c:31:f6:6e:05:ee:d0:91:aa:67:92:46: 70:22:d1:fd:90:05:d0:ae:94:d3:1d:c9:82:ff:e9:46:b4:42: 2c:2d:6e:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8pV6nkKrR/eFfXCJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTMzMWEzOTktYzQ5Ni00MDc3LWIzODgtYTI4MjFlNmFhYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuluZwV5/Dvk6r3NWPVP6aYTsJvBIXjXV057C pj2UAAQgY2A+49rR6g8Zqzq1JokTTjM5fHnuu1GoVBZGlG6PrA2w3VSKSl3OjzGg pGX7tq+twEmFNiZG9f9Rf4o2MxObWXFIu6wXLB34zavFYz5T7CEVj5RuWFhfwu73 vLOmB6jCE1pIrpL1POd01UV7H9qOb6Bl2MOA4uo8DBFPufW+jz26cK0Znc6e16GA 9tTXVULIw7FtBSDiHpcOyUpLOnkl9GvndxSzUS9T7V8k2oi3rMNJ2jkCizRX5Mn5 E/2tXSfPHU8d68s6OVekW5i0dbmd5c4wOI/gVnkkofMir40vaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHbuB82bmA3tpM2bmnKh0Dz/sGbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmUzNGVkYTMtZTBjYy0z ZTgyLWE1NzctZTQ1YzkyYWIxZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZQjIEDFs8PvUE1HnjLFVXMq/997Qva9Uls1A2V7rMIdKySVdb6Lm +vo5srnCFASAqy8eyO2godbmtsU/a6M3V8AhNaFjcP4cKd2l23kLSna81ja5vZaC PQgxFQrvhWSkokbIHPML0rqocpiTLs4+yswRFF2aoMLAq0ecJxHmvg9vBRT81s+f T3WHR/rt5fGvPKEBpMA9uNSiZAwo9tzBTvL/3mjJ8L4ew9PaOsf1t/c9lExxKwx1 MHk1fNHVdrviOWR3pUcD5l7XjpTLG4BeXMXU/ceaxAm+MP+lEHGoTDH2bgXu0JGq Z5JGcCLR/ZAF0K6U0x3Jgv/pRrRCLC1usg== -----END CERTIFICATE-----Generated at Mon Sep 21 16:06:55 2026 by rpki-client