$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa File: 432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa (raw, json) Hash identifier: 05Rkgz7zGcxa64uYCqiWJESX7GhEdxUAy8xt2OVLq0s= Subject key identifier: B1:0E:E6:92:75:5F:F2:0C:EB:CC:E5:BC:1C:B0:DC:8D:FD:EF:22:69 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4987D0731BAC93203795D540 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e89:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d0:73:1b:ac:93:20:37:95:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d2b4c88e-e8cf-4dbd-9daa-da36810b50e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:bb:75:d5:3c:de:de:05:b1:29:17:da:22: 26:3a:44:73:c0:c2:c0:a2:6b:15:b8:38:b4:a3:f4: 97:69:b7:ce:6a:d4:75:46:6d:3f:1c:ec:6f:42:4b: 02:43:c2:75:2b:3d:80:25:84:37:98:88:06:54:c7: ae:a2:60:ac:cc:8e:27:7b:f6:0d:b4:bb:c2:ae:dc: 1c:33:f0:1b:2e:54:d9:34:d9:bb:3e:a1:41:af:f6: c3:c0:a0:78:24:03:61:91:17:39:7c:d3:f7:49:16: 66:1f:5b:a5:85:ca:19:d3:e0:1e:3c:e2:a3:11:16: 6e:5f:47:4a:ab:39:3e:71:f8:69:66:85:8c:24:08: e8:90:7f:d4:09:e6:b8:bc:f4:50:2d:3d:0d:96:18: bf:c2:39:f7:b4:4f:cb:ca:42:ef:00:a1:b3:67:18: 48:f9:d4:e7:40:94:cd:5f:90:75:18:73:6b:ef:2f: 97:79:a4:5d:5a:2d:e7:c7:b8:a2:b3:42:82:4f:f6: 20:56:d4:fd:a8:69:3a:10:e0:0d:e6:37:ed:d5:af: 89:e3:0c:94:5f:ce:fd:12:d6:15:6f:a5:b1:a7:a4: 24:44:a1:2c:e9:65:95:9f:4a:e3:44:1b:7f:24:07: 19:69:82:86:bf:e3:f6:cf:14:6a:00:cc:ee:c4:13: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0E:E6:92:75:5F:F2:0C:EB:CC:E5:BC:1C:B0:DC:8D:FD:EF:22:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/432f4ef6-7d4a-3b66-8fdf-271e527a884f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4c:f4:3e:5e:f2:0b:20:9c:5a:58:bc:99:65:4b:8c:d4:0c: 78:ec:21:c5:b6:a7:1e:4e:23:aa:f6:b0:e1:3d:84:27:2c:f2: 9a:00:f6:fe:be:59:a5:e6:de:cf:13:a1:29:be:c3:40:bb:b5: 39:7d:e2:6e:c5:a7:45:04:99:68:43:ed:13:e9:95:2d:81:0f: 8f:ba:4f:94:b2:6a:3d:04:0f:d1:87:68:50:dc:0c:8c:1a:2f: 3f:f7:60:e4:5b:cf:e5:42:af:c6:1a:30:5b:2e:37:c3:3c:82: 28:a4:18:da:08:f3:bf:7f:96:4d:12:91:34:59:76:17:de:d9: 93:8e:d4:18:db:32:e2:c9:b1:c8:f3:5e:a8:71:cb:3b:0d:79: 69:59:c1:56:ea:93:46:8b:76:50:89:0e:fd:2b:b5:3e:6f:7a: c6:16:ac:e0:92:c8:60:09:91:0a:e8:b5:57:14:cf:d6:b2:e2: d7:b8:90:7b:10:02:2a:a8:fb:04:de:0e:3a:24:de:96:8a:53: ff:4d:67:3e:92:88:4e:29:d4:3a:ac:e8:59:18:bc:b9:97:bc: 00:21:09:f9:04:f5:07:d6:ca:08:1d:60:e4:26:6d:f9:2d:0c: 7b:cd:4b:da:df:7f:a2:87:91:be:f3:ed:26:f7:be:c9:de:75: 75:7b:97:be -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh9BzG6yTIDeV1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDJiNGM4OGUtZThjZi00ZGJkLTlkYWEtZGEzNjgxMGI1MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro27ddU83t4FsSkX2iImOkRzwMLAomsVuDi0 o/SXabfOatR1Rm0/HOxvQksCQ8J1Kz2AJYQ3mIgGVMeuomCszI4ne/YNtLvCrtwc M/AbLlTZNNm7PqFBr/bDwKB4JANhkRc5fNP3SRZmH1ulhcoZ0+AePOKjERZuX0dK qzk+cfhpZoWMJAjokH/UCea4vPRQLT0Nlhi/wjn3tE/LykLvAKGzZxhI+dTnQJTN X5B1GHNr7y+XeaRdWi3nx7iis0KCT/YgVtT9qGk6EOAN5jft1a+J4wyUX879EtYV b6Wxp6QkRKEs6WWVn0rjRBt/JAcZaYKGv+P2zxRqAMzuxBMk3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLEO5pJ1X/IM68zlvByw3I397yJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDMyZjRlZjYtN2Q0YS0z YjY2LThmZGYtMjcxZTUyN2E4ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa0z0Pl7yCyCcWli8mWVLjNQMeOwhxbanHk4jqvaw4T2EJyzymgD2 /r5ZpebezxOhKb7DQLu1OX3ibsWnRQSZaEPtE+mVLYEPj7pPlLJqPQQP0YdoUNwM jBovP/dg5FvP5UKvxhowWy43wzyCKKQY2gjzv3+WTRKRNFl2F97Zk47UGNsy4smx yPNeqHHLOw15aVnBVuqTRot2UIkO/Su1Pm96xhas4JLIYAmRCui1VxTP1rLi17iQ exACKqj7BN4OOiTelopT/01nPpKITinUOqzoWRi8uZe8ACEJ+QT1B9bKCB1g5CZt +S0Me81L2t9/ooeRvvPtJve+yd51dXuXvg== -----END CERTIFICATE-----Generated at Mon Oct 5 22:38:16 2026 by rpki-client