$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa File: 20b3826e-59dd-3539-8074-35e75f0e0bf0.roa (raw, json) Hash identifier: trICSr88rLcmoOiL9cvB1kLaqS+L+sw8bUYan8N3wtA= Subject key identifier: 9D:C0:E3:3E:76:E2:D9:D4:FF:CB:43:FC:B2:54:FC:F0:54:B9:E5:15 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3D641CC14ED459CECD3880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e86:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:64:1c:c1:4e:d4:59:ce:cd:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=01640404-9532-4d1c-8029-04cddcf363c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:d8:b5:19:9c:e4:51:42:d2:2f:d4:b7:11: 85:ef:f8:0e:0c:ef:bf:e4:91:07:fd:d9:a6:ad:c1: 97:2d:68:87:21:13:dc:e3:fd:b9:94:3c:5d:eb:78: ac:7c:0d:cf:db:e0:20:31:2b:3f:9f:95:25:19:16: 74:54:03:f8:87:13:51:f7:22:d1:f7:94:29:b8:fe: ea:f6:e4:d0:12:f5:23:4d:36:52:3e:e7:46:0a:64: 36:da:47:42:2a:8c:2e:3e:52:0f:c1:64:3c:3b:3f: a5:88:e3:21:ad:24:83:95:c5:9d:49:04:11:6f:77: 11:f4:21:0f:83:25:bd:a5:72:27:a2:2a:4e:b0:83: 77:68:1a:14:bb:46:47:9e:f7:0f:d3:31:b3:b3:53: c3:e8:53:76:02:c3:78:c6:de:bf:39:4e:5f:3c:6f: 7f:11:97:0d:b6:2a:8d:ad:68:c6:0f:c0:ed:4c:63: ac:42:9b:86:7e:f0:9c:1f:d1:35:12:60:7d:43:86: c3:94:50:04:2d:c6:7d:bd:f8:a0:e3:a6:c9:5c:01: f6:8e:a5:e8:6d:4e:c8:bc:00:1a:dd:88:73:42:20: 7d:09:06:53:28:f6:ab:cb:8b:8d:31:0c:dc:54:9e: 80:df:63:74:86:4d:7a:32:49:98:0f:76:04:39:5a: e6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:E3:3E:76:E2:D9:D4:FF:CB:43:FC:B2:54:FC:F0:54:B9:E5:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/20b3826e-59dd-3539-8074-35e75f0e0bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e86:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8f:94:ce:ab:7e:c8:fd:e5:8e:93:25:b4:20:35:d6:c9:2b: bf:1e:55:25:f2:1a:7e:8e:17:0f:e0:f0:1a:61:d5:9d:f0:6a: 1b:53:2b:78:2c:20:43:19:df:b5:43:83:45:67:ea:f6:38:da: e3:92:7f:71:75:04:a8:b3:e6:74:e2:cb:77:56:8b:ad:dd:1d: 10:3b:52:39:0a:82:ee:60:b0:94:34:a3:64:4a:5e:a8:f1:16: bc:91:39:17:7b:c1:3e:3a:b5:44:13:8c:c6:28:71:48:73:6f: 11:0f:21:c6:89:86:0c:92:a6:ec:8b:01:b6:0b:bd:ed:e7:ca: 3f:b3:cc:b1:bb:ee:27:af:95:f3:95:c1:d3:22:03:c7:fa:9c: c0:e0:bb:e6:50:de:8e:8a:3b:49:59:5e:f5:54:89:8f:2e:2a: 36:48:9e:e3:13:c1:23:d9:8e:5e:ae:82:48:c9:21:01:6d:ca: 60:fa:04:bc:ba:ae:ce:89:7c:2a:63:46:e2:1c:91:79:5c:bf: a6:28:4e:86:fb:08:a5:e9:35:e1:dc:8b:c1:2e:8d:2e:d7:1b: 59:57:dd:86:29:8f:3d:29:a6:00:91:3f:7d:4f:04:12:9c:11: f8:e1:74:a6:cf:13:3d:a3:d1:94:42:ff:94:e8:ac:e0:ef:f9: b7:12:e9:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPWQcwU7UWc7NOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDE2NDA0MDQtOTUzMi00ZDFjLTgwMjktMDRjZGRjZjM2M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspvYtRmc5FFC0i/UtxGF7/gODO+/5JEH/dmm rcGXLWiHIRPc4/25lDxd63isfA3P2+AgMSs/n5UlGRZ0VAP4hxNR9yLR95QpuP7q 9uTQEvUjTTZSPudGCmQ22kdCKowuPlIPwWQ8Oz+liOMhrSSDlcWdSQQRb3cR9CEP gyW9pXInoipOsIN3aBoUu0ZHnvcP0zGzs1PD6FN2AsN4xt6/OU5fPG9/EZcNtiqN rWjGD8DtTGOsQpuGfvCcH9E1EmB9Q4bDlFAELcZ9vfig46bJXAH2jqXobU7IvAAa 3YhzQiB9CQZTKPary4uNMQzcVJ6A32N0hk16MkmYD3YEOVrm6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ3A4z524tnU/8tD/LJU/PBUueUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjBiMzgyNmUtNTlkZC0z NTM5LTgwNzQtMzVlNzVmMGUwYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhjww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbY+Uzqt+yP3ljpMltCA11skrvx5VJfIafo4XD+DwGmHVnfBqG1Mr eCwgQxnftUODRWfq9jja45J/cXUEqLPmdOLLd1aLrd0dEDtSOQqC7mCwlDSjZEpe qPEWvJE5F3vBPjq1RBOMxihxSHNvEQ8hxomGDJKm7IsBtgu97efKP7PMsbvuJ6+V 85XB0yIDx/qcwOC75lDejoo7SVle9VSJjy4qNkie4xPBI9mOXq6CSMkhAW3KYPoE vLquzol8KmNG4hyReVy/pihOhvsIpek14dyLwS6NLtcbWVfdhimPPSmmAJE/fU8E EpwR+OF0ps8TPaPRlEL/lOis4O/5txLptw== -----END CERTIFICATE-----Generated at Sat Sep 26 11:01:59 2026 by rpki-client