$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa File: 1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa (raw, json) Hash identifier: A61ozxpOzZg4Vc6r8b2jrQf8RnBDkkac3jb5mX3mI88= Subject key identifier: 30:09:28:25:D3:77:33:A7:20:1B:FA:51:FB:12:22:FD:B1:8C:20:10 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EF44CCCB0389DA31C35EBEC20 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8f:8000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cc:b0:38:9d:a3:1c:35:eb:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=3306f666-ae52-492b-aa9c-9d938b66c3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:dd:1d:3a:13:56:2a:b8:d4:79:d1:5d:1a: 6c:6b:69:43:93:bc:a5:0d:e1:a2:57:95:1b:eb:2f: e4:9f:b7:f6:2d:63:d8:07:d9:b9:3e:3c:66:a5:fa: c4:46:53:06:b0:3a:93:87:75:d0:7a:64:b2:d5:b9: 03:2f:b0:b3:e4:eb:ef:10:90:8e:5f:95:9d:93:03: 25:40:81:12:74:1e:4a:43:9a:f4:7a:25:be:a9:76: 17:75:8d:5e:c1:16:f8:90:d7:ac:85:95:68:53:11: b3:f6:86:3e:13:c7:e9:cc:ab:09:77:26:84:80:cf: 8f:c2:e8:73:03:ef:6b:10:55:4e:2f:2d:5b:0c:25: 6a:c5:6f:c7:74:97:85:f8:fe:a3:10:d1:c6:5d:53: b1:0b:61:37:6e:aa:15:ff:7b:f5:f0:e8:dd:14:91: 34:94:a1:6f:5c:b3:ff:8f:ce:ea:6a:42:29:c4:a3: 22:c5:5c:5c:6a:c8:89:11:21:eb:0c:99:aa:41:aa: 15:d4:1f:dc:e4:e8:b5:31:33:31:02:0f:e8:7e:a0: fb:56:84:bb:a6:90:f2:a8:c3:9d:46:bb:ab:1a:82: f7:bb:18:bd:ea:61:72:40:05:a5:45:33:86:18:e6: 0f:f3:2c:62:07:5a:60:fc:85:1b:69:90:de:1a:f9: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:09:28:25:D3:77:33:A7:20:1B:FA:51:FB:12:22:FD:B1:8C:20:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:8000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:37:f2:22:76:e7:5c:3c:bc:7b:87:fb:20:18:0c:88:1a:bf: a1:c3:a2:0a:c0:49:95:07:01:7e:65:d1:f5:14:13:02:fd:cb: 92:32:71:93:c6:0d:8a:b6:d1:38:43:0c:ee:1d:76:25:e7:03: eb:78:c1:f4:00:f4:2c:18:d8:09:c5:36:06:a0:9b:8a:35:d7: 50:48:48:61:cf:78:0d:1c:01:d1:0d:25:b8:68:63:a2:78:df: 42:b5:ca:2d:8d:d0:0b:8e:6f:ca:44:6a:a1:b2:49:41:8c:33: 38:2c:f6:81:af:7f:46:0d:9e:bc:c7:6c:52:fb:20:4a:52:96: a4:a8:fa:0d:5f:28:46:69:b9:35:17:83:15:ae:03:90:53:bb: 16:d3:28:a4:e9:e5:a9:c7:4b:db:a6:16:da:9b:0e:e7:5b:4f: 74:6d:6a:e1:6a:0d:df:61:48:28:59:44:26:55:d6:03:08:38: 7c:bc:98:a3:b6:a3:ef:e6:2a:56:fc:5c:c7:9d:59:d5:dc:1f: c8:9f:7e:1d:bc:b9:79:32:56:dd:6e:de:4c:5e:63:c7:47:be: 1f:56:90:c1:7d:df:15:11:15:ae:9b:37:c2:7d:4c:97:1e:c0: 14:e2:68:30:31:92:b4:08:a4:5e:c1:14:6c:84:6a:3a:4b:e2: d8:a2:ef:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TMywOJ2jHDXr7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MzMwNmY2NjYtYWU1Mi00OTJiLWFhOWMtOWQ5MzhiNjZjM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XLdHToTViq41HnRXRpsa2lDk7ylDeGiV5Ub 6y/kn7f2LWPYB9m5PjxmpfrERlMGsDqTh3XQemSy1bkDL7Cz5OvvEJCOX5WdkwMl QIESdB5KQ5r0eiW+qXYXdY1ewRb4kNeshZVoUxGz9oY+E8fpzKsJdyaEgM+Pwuhz A+9rEFVOLy1bDCVqxW/HdJeF+P6jENHGXVOxC2E3bqoV/3v18OjdFJE0lKFvXLP/ j87qakIpxKMixVxcasiJESHrDJmqQaoV1B/c5Oi1MTMxAg/ofqD7VoS7ppDyqMOd RrurGoL3uxi96mFyQAWlRTOGGOYP8yxiB1pg/IUbaZDeGvm57QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAJKCXTdzOnIBv6UfsSIv2xjCAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWUwZTg1MmItZWM0YS0z YmMxLTk5OTQtYzczYmE2MDdhZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF038iJ251w8vHuH+yAYDIgav6HDogrASZUHAX5l0fUUEwL9y5Iy cZPGDYq20ThDDO4ddiXnA+t4wfQA9CwY2AnFNgagm4o111BISGHPeA0cAdENJbho Y6J430K1yi2N0AuOb8pEaqGySUGMMzgs9oGvf0YNnrzHbFL7IEpSlqSo+g1fKEZp uTUXgxWuA5BTuxbTKKTp5anHS9umFtqbDudbT3RtauFqDd9hSChZRCZV1gMIOHy8 mKO2o+/mKlb8XMedWdXcH8iffh28uXkyVt1u3kxeY8dHvh9WkMF93xURFa6bN8J9 TJcewBTiaDAxkrQIpF7BFGyEajpL4tii7+k= -----END CERTIFICATE-----Generated at Sun Sep 27 12:42:32 2026 by rpki-client