$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/250a37c7-d863-3753-bd22-77ab317e16ed.roa File: 250a37c7-d863-3753-bd22-77ab317e16ed.roa (raw, json) Hash identifier: LW+dw5/s0iW51LaThG+w4i2qxqCCr0mVLBK5s+0LVNg= Subject key identifier: D9:A1:96:D0:57:FE:7C:18:E5:BA:41:13:EC:42:04:0B:89:DE:D5:1D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4973179D9B288235FFB98500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/250a37c7-d863-3753-bd22-77ab317e16ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e89:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:17:9d:9b:28:82:35:ff:b9:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=428c22a2-27ff-4d24-854e-42cbe9d59415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:f4:ef:4f:3f:3e:60:d9:9a:45:68:a3:16: 1f:82:98:92:d0:0a:39:cf:2e:88:b3:c1:b6:37:36: 53:3f:20:f9:87:aa:3b:ec:70:90:1a:53:b0:b7:df: 43:d3:00:dd:a8:ef:e0:ab:6f:fd:05:e5:94:e5:21: 11:3b:9a:59:69:e2:db:4e:46:6a:ff:a6:fa:7d:91: 0b:c8:3c:ae:1e:37:7a:31:35:32:4d:37:40:fa:a4: 31:ef:f0:77:21:24:ee:3a:9c:26:ea:36:34:47:95: c1:67:c8:52:96:6a:ef:3a:30:1b:4e:d1:0b:92:c2: 40:d0:da:cc:8e:9f:84:79:7d:23:5d:16:40:61:02: 0b:7b:21:98:ab:54:1f:f7:e6:8b:64:e3:5a:4a:95: 5d:14:24:ef:6a:fb:98:7f:26:17:d4:46:64:b6:e2: 87:69:52:b1:f0:7f:0a:9e:0a:0b:c3:a8:c4:89:7e: fb:1a:2e:09:d5:40:75:66:77:be:51:b9:46:a0:9c: ce:bc:e5:80:ad:54:ee:a4:22:54:3f:1e:71:a4:35: 22:98:48:9f:c3:ec:1f:ce:87:2c:a5:2b:35:91:3f: 99:22:95:5f:3c:e9:73:13:54:67:f7:07:4a:d8:49: 8f:a8:b9:89:77:51:49:cb:f7:e2:8e:b9:ec:e8:6b: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:96:D0:57:FE:7C:18:E5:BA:41:13:EC:42:04:0B:89:DE:D5:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/250a37c7-d863-3753-bd22-77ab317e16ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d4:c0:21:9b:96:22:70:7f:5a:45:66:09:7a:b5:c9:17:31: fd:b9:00:17:72:1a:60:fb:43:58:78:2b:a7:50:f7:6a:2b:c7: 0b:d3:06:f9:e2:65:e1:80:14:b9:76:96:fb:24:29:94:1d:e1: 50:e6:d2:ae:32:a8:39:6d:e0:f7:93:34:df:ee:38:30:ec:b1: 36:f4:f6:6c:6b:3f:51:0f:23:6e:29:ee:43:57:0f:85:f9:df: a3:27:b9:9b:d5:30:66:84:2a:2b:c0:e1:62:ec:e3:72:56:50: d6:85:d1:c9:43:09:dc:4b:ff:7e:a9:56:0f:27:2e:3a:e0:79: 56:81:77:08:3d:ef:1f:9b:95:15:a0:78:3d:c2:b4:cb:9e:10: a2:96:f7:24:4c:ee:58:11:62:81:15:af:a3:a4:f4:ce:5a:59: df:61:02:6f:86:8e:c7:6a:da:e3:2a:79:db:df:f2:d2:b7:0c: 9e:00:eb:31:a3:9f:b2:f1:64:08:72:1d:6e:e8:26:65:25:99: e1:25:bd:9c:e2:18:19:2a:13:b2:31:c3:ef:8a:34:8f:cb:23: 8d:38:51:28:6f:a4:ea:91:73:d8:95:a2:40:e2:31:b6:32:ac: de:60:7e:f0:2b:37:35:f6:19:8d:e6:1e:2c:80:38:8c:48:ac: 16:42:4a:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcxedmyiCNf+5hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDI4YzIyYTItMjdmZi00ZDI0LTg1NGUtNDJjYmU5ZDU5NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz230708/PmDZmkVooxYfgpiS0Ao5zy6Is8G2 NzZTPyD5h6o77HCQGlOwt99D0wDdqO/gq2/9BeWU5SERO5pZaeLbTkZq/6b6fZEL yDyuHjd6MTUyTTdA+qQx7/B3ISTuOpwm6jY0R5XBZ8hSlmrvOjAbTtELksJA0NrM jp+EeX0jXRZAYQILeyGYq1Qf9+aLZONaSpVdFCTvavuYfyYX1EZktuKHaVKx8H8K ngoLw6jEiX77Gi4J1UB1Zne+UblGoJzOvOWArVTupCJUPx5xpDUimEifw+wfzocs pSs1kT+ZIpVfPOlzE1Rn9wdK2EmPqLmJd1FJy/fijrns6GvbHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNmhltBX/nwY5bpBE+xCBAuJ3tUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjUwYTM3YzctZDg2My0z NzUzLWJkMjItNzdhYjMxN2UxNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiTww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG9TAIZuWInB/WkVmCXq1yRcx/bkAF3IaYPtDWHgrp1D3aivHC9MG +eJl4YAUuXaW+yQplB3hUObSrjKoOW3g95M03+44MOyxNvT2bGs/UQ8jbinuQ1cP hfnfoye5m9UwZoQqK8DhYuzjclZQ1oXRyUMJ3Ev/fqlWDycuOuB5VoF3CD3vH5uV FaB4PcK0y54Qopb3JEzuWBFigRWvo6T0zlpZ32ECb4aOx2ra4yp529/y0rcMngDr MaOfsvFkCHIdbugmZSWZ4SW9nOIYGSoTsjHD74o0j8sjjThRKG+k6pFz2JWiQOIx tjKs3mB+8Cs3NfYZjeYeLIA4jEisFkJKFg== -----END CERTIFICATE-----Generated at Sun Oct 4 09:19:48 2026 by rpki-client