$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa File: fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa (raw, json) Hash identifier: srJr5JzfcI8qR7DWb2tS9+bALItBvAP2NT2/Pg4vkSM= Subject key identifier: 6A:BA:B7:66:C0:AA:23:AA:C2:3F:0F:39:27:45:4D:C8:96:06:41:9D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EF87CB7FD4B96E360AF71E400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8d:5c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b7:fd:4b:96:e3:60:af:71:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=f9737dc2-5976-4241-830c-3f352fa7ab24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:88:e6:51:0d:cf:0f:65:5e:34:dc:47:c5: 05:57:08:5f:f5:61:72:d5:58:a0:64:85:eb:e2:50: ef:da:7d:aa:7f:64:8f:62:2e:37:10:46:b7:e0:04: e5:65:ea:aa:67:a7:80:96:8a:23:42:43:fd:c5:07: d7:72:dd:5c:61:b1:bd:64:29:85:f8:e1:96:07:64: 24:fe:30:f4:aa:c3:0c:aa:99:eb:e4:b6:02:ee:d8: 28:dd:ac:7b:fe:79:a9:33:cb:dc:60:1e:19:d2:9c: e6:fb:53:09:96:1f:e4:14:4c:b5:30:43:8c:9c:c2: 03:bf:f1:40:a6:32:bd:85:19:45:e4:f3:3d:f5:73: b6:af:6e:cd:12:73:f7:72:f2:31:ee:26:d7:45:77: 01:fb:8d:f8:2e:fc:ad:4b:2b:87:f2:e9:e6:7d:df: 61:b8:7c:9e:5f:ab:e0:60:92:33:c9:ff:19:2e:26: 8a:4c:60:31:7b:11:e5:c5:47:c1:71:99:a0:ce:67: 5b:24:77:d8:6b:95:ad:79:5d:e9:3e:60:0f:b2:88: c2:8d:b4:7c:c8:db:5b:1b:2e:74:ce:5f:cb:2a:ea: df:10:7a:18:73:ef:90:42:0f:78:8b:1d:87:75:31: 6f:85:f7:a8:3c:04:aa:80:b3:4f:96:65:87:43:68: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BA:B7:66:C0:AA:23:AA:C2:3F:0F:39:27:45:4D:C8:96:06:41:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:42:72:bf:f9:de:f3:ff:47:a8:c9:49:78:89:07:c7:4b:03: 7e:bf:f7:f5:35:3e:91:f4:08:67:d1:a8:e8:bd:19:8b:8c:ce: 6c:6d:41:3b:6d:1b:1f:e3:c9:77:f6:96:bb:e1:d2:3e:54:4c: 58:f3:b8:04:fd:1c:eb:d6:5a:93:2e:cb:42:6b:ed:c3:f7:4d: 9f:8f:7d:6f:b1:c6:94:ad:e8:19:36:94:34:44:b9:bd:2b:be: 36:81:3d:03:94:8d:28:2c:fc:62:93:39:47:9d:50:7e:82:a4: a1:f4:bc:ab:02:e0:a3:a0:db:4d:aa:90:08:04:c7:8e:2f:83: 6a:c2:bb:bc:77:5b:44:60:6e:d8:1a:2c:f8:80:63:1e:1e:9d: e8:48:2a:2f:95:e8:1a:2d:0f:9b:77:07:28:b0:73:fa:1a:6a: 4c:8a:c7:5d:05:5e:9c:02:d1:16:d7:28:47:73:c1:03:e5:31: 7a:c5:83:44:24:7d:55:f6:85:20:60:e5:47:8f:93:34:8b:6d: e5:fd:f2:09:e8:b1:2e:6d:be:0d:c8:8f:cd:23:4f:c4:d9:d2: 1d:d1:45:fb:22:67:1c:a7:55:e4:d0:f3:80:be:62:3e:8d:0a: 84:89:7a:22:39:9e:52:63:8b:08:aa:ef:46:69:a0:7b:58:f8: 57:7a:c9:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE74fLf9S5bjYK9x5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk Zjk3MzdkYzItNTk3Ni00MjQxLTgzMGMtM2YzNTJmYTdhYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisqI5lENzw9lXjTcR8UFVwhf9WFy1VigZIXr 4lDv2n2qf2SPYi43EEa34ATlZeqqZ6eAloojQkP9xQfXct1cYbG9ZCmF+OGWB2Qk /jD0qsMMqpnr5LYC7tgo3ax7/nmpM8vcYB4Z0pzm+1MJlh/kFEy1MEOMnMIDv/FA pjK9hRlF5PM99XO2r27NEnP3cvIx7ibXRXcB+434LvytSyuH8unmfd9huHyeX6vg YJIzyf8ZLiaKTGAxexHlxUfBcZmgzmdbJHfYa5WteV3pPmAPsojCjbR8yNtbGy50 zl/LKurfEHoYc++QQg94ix2HdTFvhfeoPASqgLNPlmWHQ2jZFwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGq6t2bAqiOqwj8POSdFTciWBkGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmMzNTA1YzAtYzBkZS0z OTg2LWJjZjktMGM3MDQyZDVhZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANkJyv/ne8/9HqMlJeIkHx0sDfr/39TU+kfQIZ9Go6L0Zi4zObG1B O20bH+PJd/aWu+HSPlRMWPO4BP0c69Zaky7LQmvtw/dNn499b7HGlK3oGTaUNES5 vSu+NoE9A5SNKCz8YpM5R51QfoKkofS8qwLgo6DbTaqQCATHji+DasK7vHdbRGBu 2Bos+IBjHh6d6EgqL5XoGi0Pm3cHKLBz+hpqTIrHXQVenALRFtcoR3PBA+UxesWD RCR9VfaFIGDlR4+TNItt5f3yCeixLm2+DciPzSNPxNnSHdFF+yJnHKdV5NDzgL5i Po0KhIl6IjmeUmOLCKrvRmmge1j4V3rJOA== -----END CERTIFICATE-----Generated at Sat Oct 3 14:21:25 2026 by rpki-client