$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa File: 21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa (raw, json) Hash identifier: ibEw2UIUEgO4a5OwxYm/Q0KeQswTiTcpYHVyT8TmTj0= Subject key identifier: F2:15:A5:0D:FF:82:D0:6E:CB:14:52:2A:A4:72:EA:A4:F7:EB:0F:97 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4972FBF28A14A23D4E388A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fb:f2:8a:14:a2:3d:4e:38:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a126c02f-2b6e-4c5a-9628-3310e0b72bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:47:2b:b2:35:87:6d:7e:4e:3e:75:af:ee: 81:1e:ee:de:09:29:f0:2c:ec:a7:a8:30:c3:42:5f: 5e:54:0e:ee:7b:79:48:f1:f2:58:85:f5:1b:dd:f1: 80:30:90:b3:65:07:90:f9:30:6d:3c:4f:15:c2:67: 9c:86:da:d9:c8:43:be:d5:f6:be:d3:dd:c5:95:ad: c5:83:26:90:e2:45:74:41:6a:96:62:48:6a:8d:55: ea:d8:6f:c8:85:c0:e1:80:a4:83:cc:52:6b:75:b1: 32:5c:05:59:4b:ae:18:c0:f3:d1:ec:56:aa:c3:f9: 90:7d:de:38:28:22:e7:fe:ae:29:cd:73:ef:11:e0: 03:b0:16:d9:a8:16:b2:2b:9d:08:d2:e1:fe:a7:c2: e6:40:42:b5:b8:8a:6c:91:6d:d8:79:0e:79:cb:72: dc:38:87:6c:4c:06:6f:a4:1a:74:d0:31:31:c0:e8: 4c:b7:2f:29:fa:c9:95:d0:18:27:99:08:77:81:a1: ad:34:40:56:dd:35:39:be:f4:64:61:a0:93:5c:df: d6:a8:ed:84:52:7b:14:b0:a3:3b:7b:0b:8d:a6:4d: 6d:8a:65:45:4a:2c:5d:86:9a:73:5e:26:83:06:e0: 38:2c:25:3d:24:e7:0c:e8:97:67:26:f6:22:c6:c5: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:A5:0D:FF:82:D0:6E:CB:14:52:2A:A4:72:EA:A4:F7:EB:0F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1a:ea:44:ce:20:92:7d:11:83:d8:65:f5:1e:e3:2a:5c:b1: e8:5e:99:fc:95:ce:59:ef:90:97:64:f3:77:70:da:dc:7e:8f: 1e:ca:63:49:06:26:33:38:0b:11:6b:c5:fe:11:8c:d8:65:b9: 02:7d:20:1c:b5:b3:b1:76:45:c9:25:d8:2f:ab:82:0a:4a:4c: f5:7b:88:86:1e:a8:06:a9:7d:45:9b:1f:01:b5:07:1f:34:cc: b0:80:70:f7:9a:48:38:3a:fa:1b:6c:70:1a:d1:55:80:0d:93: 05:73:af:aa:20:74:11:fa:84:60:fe:69:4f:2e:02:b8:22:71: ce:50:46:4d:c4:c0:a5:49:0a:b4:0a:b3:5e:63:78:aa:97:cc: 94:89:d2:6e:18:f7:78:53:61:95:c0:e4:af:e2:b4:73:d0:1e: e1:66:9b:42:b8:31:f4:a2:56:53:9d:e3:30:62:8e:e4:49:53: e1:b0:be:bc:32:13:16:cd:8d:b1:94:53:43:37:63:55:ae:1b: 62:7b:88:8b:63:f1:d1:3e:d6:95:cd:e2:13:27:83:c0:94:a9: 7c:bc:bc:48:3f:5c:3d:da:08:75:9c:63:93:4e:d2:21:8d:f9: 80:a4:e2:2c:4d:97:4b:d8:d0:15:6b:c7:3f:51:41:0b:a9:4e: b9:de:ff:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcvvyihSiPU44igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTEyNmMwMmYtMmI2ZS00YzVhLTk2MjgtMzMxMGUwYjcyYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwhHK7I1h21+Tj51r+6BHu7eCSnwLOynqDDD Ql9eVA7ue3lI8fJYhfUb3fGAMJCzZQeQ+TBtPE8VwmechtrZyEO+1fa+093Fla3F gyaQ4kV0QWqWYkhqjVXq2G/IhcDhgKSDzFJrdbEyXAVZS64YwPPR7Faqw/mQfd44 KCLn/q4pzXPvEeADsBbZqBayK50I0uH+p8LmQEK1uIpskW3YeQ55y3LcOIdsTAZv pBp00DExwOhMty8p+smV0BgnmQh3gaGtNEBW3TU5vvRkYaCTXN/WqO2EUnsUsKM7 ewuNpk1timVFSixdhppzXiaDBuA4LCU9JOcM6JdnJvYixsXJ3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPIVpQ3/gtBuyxRSKqRy6qT36w+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjFhNjUwYjYtMGYxMy0z YWNmLWI0Y2YtMTdlMmFjYzI1ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhxrqRM4gkn0Rg9hl9R7jKlyx6F6Z/JXOWe+Ql2Tzd3Da3H6PHspj SQYmMzgLEWvF/hGM2GW5An0gHLWzsXZFySXYL6uCCkpM9XuIhh6oBql9RZsfAbUH HzTMsIBw95pIODr6G2xwGtFVgA2TBXOvqiB0EfqEYP5pTy4CuCJxzlBGTcTApUkK tAqzXmN4qpfMlInSbhj3eFNhlcDkr+K0c9Ae4WabQrgx9KJWU53jMGKO5ElT4bC+ vDITFs2NsZRTQzdjVa4bYnuIi2Px0T7Wlc3iEyeDwJSpfLy8SD9cPdoIdZxjk07S IY35gKTiLE2XS9jQFWvHP1FBC6lOud7//w== -----END CERTIFICATE-----Generated at Sun Sep 27 06:27:06 2026 by rpki-client