$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa File: 2cd54324-0e90-31fe-bb64-4dae37572697.roa (raw, json) Hash identifier: 8h9M2pj+q/QPW3b9koGHaXxReGpPkZUCK8Ks0+ogRCs= Subject key identifier: 63:4A:43:06:CA:CE:35:49:FA:41:76:03:3A:C5:D2:1C:85:60:2F:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4974668259CC3746FF298DA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8b:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:66:82:59:cc:37:46:ff:29:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0dade04a-8d1b-411c-bbe7-dade4e4fe7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:20:70:e5:35:6e:de:21:e8:ae:9b:13:ce: 29:ff:ab:8a:34:8e:0c:4d:8d:db:74:c1:a4:2a:c5: 2f:2f:6b:ef:0a:0a:14:67:fa:85:77:b9:8b:13:3c: e0:71:bd:c1:b5:2f:a8:d1:28:07:fb:60:66:ac:7b: db:74:60:1d:6b:78:06:50:d2:ab:0b:c4:2b:a8:58: 16:0b:3d:5e:d9:8e:c2:ed:8b:68:e0:c0:40:38:60: 30:c2:e6:0b:91:2d:dc:b5:66:4f:54:3a:a2:75:ec: a3:44:73:d5:bb:d1:c9:56:48:36:34:92:f2:03:4f: 1a:b2:69:06:d1:3c:13:f3:7c:d4:39:54:9c:dc:18: 51:35:24:6c:c7:b9:3a:fa:e1:29:73:7d:0c:05:0a: 02:b3:bb:ee:bf:33:94:25:4d:cf:12:a9:a0:f9:43: 45:4f:f2:26:ef:5a:ad:c7:9f:12:fb:02:ea:c0:35: 0f:2e:65:3f:ea:8a:b2:03:02:e5:0a:70:2e:76:82: 4f:21:a6:49:18:f7:d0:82:66:6a:cf:fc:2a:24:7a: cb:42:c7:56:df:82:a0:25:ac:fe:1b:b8:f0:59:a2: 0b:f7:43:8b:98:ff:9b:c4:84:15:8d:20:d7:e8:68: 98:20:c9:e2:b6:9c:a5:0d:89:4f:41:1f:dd:3d:5e: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:43:06:CA:CE:35:49:FA:41:76:03:3A:C5:D2:1C:85:60:2F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2cd54324-0e90-31fe-bb64-4dae37572697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:51:3b:eb:9f:03:e9:e6:43:a3:d6:1d:33:42:34:0f:0d:dd: 16:26:3f:5b:8f:44:98:05:8b:7e:f8:d6:8f:bd:b3:8d:13:8c: 08:f5:26:ce:0c:2c:62:17:1f:bb:ff:d6:b5:0e:f7:31:d6:ab: 0f:0d:09:46:56:ed:da:e1:15:6d:ab:4e:36:f7:04:ef:b5:5d: 20:8a:81:37:15:6c:bc:26:c1:8f:cd:ef:b1:36:01:fc:35:e6: 29:65:9e:29:c5:65:2a:cc:b0:66:2e:e2:c8:f2:ad:6b:ae:6d: 7a:e7:cc:45:3a:22:14:42:34:8c:38:61:d0:ea:cd:bd:36:b3: 52:a2:20:17:12:6b:9a:27:b1:f9:0b:22:41:51:46:d3:1b:55: a1:47:b9:fc:29:7d:ea:5d:bd:cf:de:21:33:70:80:99:8c:ef: 67:40:b3:7c:f3:e4:a1:1a:1b:8e:09:6e:6a:ef:d1:60:f8:39: 5f:ac:88:f7:15:de:41:dd:3b:ba:15:13:31:d9:e5:e5:cd:d3: 33:f4:ee:b9:08:c8:46:98:f3:4a:86:d8:db:fe:df:ec:08:6f: 9d:56:21:f5:89:2d:be:37:8f:16:30:01:49:d0:cb:af:7a:ac: eb:12:44:d4:30:92:78:69:75:9a:15:c7:f6:bb:01:2e:71:7c: 2b:c7:78:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdGaCWcw3Rv8pjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGRhZGUwNGEtOGQxYi00MTFjLWJiZTctZGFkZTRlNGZlN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUUgcOU1bt4h6K6bE84p/6uKNI4MTY3bdMGk KsUvL2vvCgoUZ/qFd7mLEzzgcb3BtS+o0SgH+2BmrHvbdGAda3gGUNKrC8QrqFgW Cz1e2Y7C7Yto4MBAOGAwwuYLkS3ctWZPVDqideyjRHPVu9HJVkg2NJLyA08asmkG 0TwT83zUOVSc3BhRNSRsx7k6+uEpc30MBQoCs7vuvzOUJU3PEqmg+UNFT/Im71qt x58S+wLqwDUPLmU/6oqyAwLlCnAudoJPIaZJGPfQgmZqz/wqJHrLQsdW34KgJaz+ G7jwWaIL90OLmP+bxIQVjSDX6GiYIMnitpylDYlPQR/dPV5KIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGNKQwbKzjVJ+kF2AzrF0hyFYC8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmNkNTQzMjQtMGU5MC0z MWZlLWJiNjQtNGRhZTM3NTcyNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiyAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMlE7658D6eZDo9YdM0I0Dw3dFiY/W49EmAWLfvjWj72zjROMCPUm zgwsYhcfu//WtQ73MdarDw0JRlbt2uEVbatONvcE77VdIIqBNxVsvCbBj83vsTYB /DXmKWWeKcVlKsywZi7iyPKta65teufMRToiFEI0jDhh0OrNvTazUqIgFxJrmiex +QsiQVFG0xtVoUe5/Cl96l29z94hM3CAmYzvZ0CzfPPkoRobjgluau/RYPg5X6yI 9xXeQd07uhUTMdnl5c3TM/TuuQjIRpjzSobY2/7f7AhvnVYh9YktvjePFjABSdDL r3qs6xJE1DCSeGl1mhXH9rsBLnF8K8d4Vw== -----END CERTIFICATE-----Generated at Wed Sep 30 19:56:54 2026 by rpki-client