$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa File: 254c0fb0-008a-383a-bd3e-c9159a8f6059.roa (raw, json) Hash identifier: Dw/Amntt+ZO+iynjhhgqsYcTERXKwRYDO5zLCuiw7bE= Subject key identifier: CB:8F:68:A5:C3:8A:23:65:3B:3D:E1:DC:10:81:C2:16:21:5F:C6:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497415782DF838E9C0B53000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:cc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:15:78:2d:f8:38:e9:c0:b5:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b64a88ab-c2f7-4399-a800-70adb841590a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f1:99:ec:39:9a:be:b4:02:32:08:5d:ac:53: a1:47:9d:2a:38:97:39:52:0c:70:0e:b7:98:1e:31: 89:36:a4:82:57:90:06:20:af:4c:9b:15:f7:5e:04: 79:31:50:55:e6:b4:ac:0f:bd:17:78:93:77:01:a8: ee:01:ef:44:3b:9b:6b:98:8a:96:f9:d2:88:85:7f: 9a:92:6a:98:fe:c3:72:1b:65:4b:1b:6b:33:4b:d9: f4:02:c3:cf:97:a6:2a:fe:eb:43:b2:89:e7:7e:1c: 22:46:6a:ef:38:aa:9b:c2:b1:e7:5e:2e:30:b0:3a: 46:69:ec:52:5e:b8:26:12:c5:89:8f:d8:d0:eb:52: f0:f4:1b:71:4b:3d:bd:c4:86:a1:65:bf:ad:3a:75: a4:23:df:6b:4b:45:4a:5f:99:bf:ba:f9:b5:00:55: 7a:11:88:d8:b0:1a:8a:cf:16:b1:59:12:93:28:a8: cf:85:9f:e8:6c:eb:de:cb:0f:6e:4a:6d:40:ba:54: f7:31:fa:ae:9e:c8:fd:d8:d5:be:f3:c6:83:35:f7: 64:e9:83:da:cc:62:ab:09:c9:07:b0:6c:44:9b:78: 79:94:b5:c8:bb:3d:82:b4:fc:8d:a3:51:16:e5:86: a8:a0:ac:96:c2:7b:b6:32:37:d6:91:ef:7e:85:fb: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:68:A5:C3:8A:23:65:3B:3D:E1:DC:10:81:C2:16:21:5F:C6:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/254c0fb0-008a-383a-bd3e-c9159a8f6059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:cc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:40:1e:74:29:ff:58:1f:5e:96:f3:db:b3:13:c8:f8:cf:b9: 4c:29:71:09:2f:43:6c:bf:a8:d9:0f:72:97:8b:ae:d1:f7:d7: 2f:4f:2f:f1:93:ba:01:11:af:9b:80:d4:45:5b:09:36:d4:cd: db:f5:11:0e:d5:de:04:ec:23:c5:d6:f8:33:f7:7b:5d:42:32: 9c:da:75:a4:1f:15:35:51:55:50:65:dc:10:3a:76:0f:3f:a8: 64:25:58:56:e4:cc:dc:a2:49:8f:54:dc:47:bb:3f:a9:44:b9: a2:0b:fe:8b:67:7d:72:bc:fa:06:18:c0:81:7c:ab:81:50:37: a5:13:b9:15:55:28:0a:a7:9b:96:42:1d:75:d3:0f:12:c4:7b: 5b:65:cc:50:25:35:2e:ac:87:a1:11:cf:16:04:4c:39:2d:45: d1:5a:0b:91:93:2a:f3:38:57:73:68:df:cd:15:5e:6f:45:b6: d3:fb:1b:aa:d2:ea:5e:98:39:9c:c4:40:5e:7c:d2:24:21:cd: d9:4e:48:48:fb:05:3f:87:66:52:d6:00:e5:1b:d9:c0:02:e5: f8:fe:57:36:33:1a:90:ce:4c:25:20:5f:78:b8:21:b9:8f:ef: 34:43:e2:8e:d0:17:af:85:99:4a:b0:15:0b:35:a4:1f:a5:93: e9:5b:c3:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdBV4Lfg46cC1MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjY0YTg4YWItYzJmNy00Mzk5LWE4MDAtNzBhZGI4NDE1OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PGZ7DmavrQCMghdrFOhR50qOJc5UgxwDreY HjGJNqSCV5AGIK9MmxX3XgR5MVBV5rSsD70XeJN3AajuAe9EO5trmIqW+dKIhX+a kmqY/sNyG2VLG2szS9n0AsPPl6Yq/utDsonnfhwiRmrvOKqbwrHnXi4wsDpGaexS XrgmEsWJj9jQ61Lw9BtxSz29xIahZb+tOnWkI99rS0VKX5m/uvm1AFV6EYjYsBqK zxaxWRKTKKjPhZ/obOveyw9uSm1AulT3Mfqunsj92NW+88aDNfdk6YPazGKrCckH sGxEm3h5lLXIuz2CtPyNo1EW5YaooKyWwnu2MjfWke9+hfu9mQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMuPaKXDiiNlOz3h3BCBwhYhX8aeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjU0YzBmYjAtMDA4YS0z ODNhLWJkM2UtYzkxNTlhOGY2MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui8ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAP0AedCn/WB9elvPbsxPI+M+5TClxCS9DbL+o2Q9yl4uu0ffXL08v 8ZO6ARGvm4DURVsJNtTN2/URDtXeBOwjxdb4M/d7XUIynNp1pB8VNVFVUGXcEDp2 Dz+oZCVYVuTM3KJJj1TcR7s/qUS5ogv+i2d9crz6BhjAgXyrgVA3pRO5FVUoCqeb lkIdddMPEsR7W2XMUCU1LqyHoRHPFgRMOS1F0VoLkZMq8zhXc2jfzRVeb0W20/sb qtLqXpg5nMRAXnzSJCHN2U5ISPsFP4dmUtYA5RvZwALl+P5XNjMakM5MJSBfeLgh uY/vNEPijtAXr4WZSrAVCzWkH6WT6VvDxQ== -----END CERTIFICATE-----Generated at Sat Sep 26 04:58:50 2026 by rpki-client