$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa File: 4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa (raw, json) Hash identifier: d6NyY+Sx/ElKfjQQ71f9GO3EyY5bWqyl0SNTsUwoFs8= Subject key identifier: D2:EC:F0:E7:09:BC:68:6A:52:DF:EE:62:B6:F7:1F:D1:DE:37:0C:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F15CCEDD4BC8DD186D7B36000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e87:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:ed:d4:bc:8d:d1:86:d7:b3:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=f56c72df-a2f9-4d74-8a81-9fbfb3a6bcd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:75:25:15:ce:43:ac:83:58:b3:1d:16:a8: b3:b1:c7:da:08:31:7f:6f:62:2f:73:07:09:b9:c7: 89:95:89:3c:63:e8:73:4f:14:79:b4:82:d9:c0:01: 43:ab:f8:b1:22:4f:f4:10:d0:74:b3:71:ad:a1:ad: 31:57:41:d9:2a:74:43:61:ec:29:28:e4:91:c4:1d: 9b:e8:e4:67:b1:b3:03:5d:ca:a5:cd:c6:44:ed:c1: cc:94:0c:69:10:09:e2:23:6c:31:eb:37:55:97:38: 6b:da:61:d1:32:90:5f:e8:f6:a5:0e:11:9d:5b:b6: 34:9d:d8:eb:24:ac:2b:72:04:83:03:f4:9f:42:75: fa:da:6d:65:44:bf:32:b4:88:64:b3:a6:f9:69:00: 08:c7:92:22:2c:f6:c3:d8:20:4e:e8:66:96:09:6c: 0b:7d:7b:8f:d3:50:9e:d5:b3:11:74:de:8a:5c:90: 7c:b2:13:9d:b0:4e:a3:0b:1e:5e:dc:01:65:ef:b6: 0d:45:e6:08:94:d0:6b:3f:29:fd:9f:09:29:3d:7e: bf:06:23:49:bd:94:a8:d8:f3:4b:77:9e:b0:14:8c: 74:c4:d7:e5:98:af:ab:77:75:72:ab:89:5f:bf:2e: 93:8e:c9:75:3d:14:38:59:62:3c:76:b0:87:3b:c6: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:F0:E7:09:BC:68:6A:52:DF:EE:62:B6:F7:1F:D1:DE:37:0C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5e:e7:d8:11:f7:e5:74:bb:89:4e:17:64:d0:6a:af:57:45: 0d:ff:d5:e1:58:02:63:9d:ab:84:c7:29:ae:15:1c:01:23:b6: 06:57:e8:8c:23:44:e8:59:9d:bd:16:f0:c9:11:98:f1:22:c3: ce:71:04:11:e1:7e:47:21:b4:60:44:65:bc:cb:53:e2:82:4c: 30:d8:eb:4c:e9:ee:f2:5e:26:da:8a:c4:81:06:9e:e3:cf:de: 47:22:0c:4f:5e:ea:2b:3b:35:a8:85:28:5a:71:cb:f6:3e:6f: e6:70:c9:82:e7:eb:15:33:9d:72:b6:66:31:53:b4:3a:ef:30: 5f:c9:b6:e7:63:c6:8c:e9:bf:38:b6:f9:1d:d8:84:8c:2f:d2: c3:4a:cb:74:61:58:29:42:bf:65:c3:71:f9:b4:f8:af:eb:d6: 4d:7b:d4:9a:50:be:b7:48:78:91:86:41:48:8f:96:57:23:b9: 23:df:88:65:c2:cf:5c:85:a3:ad:23:d0:af:c5:fd:5d:3d:10: fa:46:ef:d4:e0:ac:ed:b3:f5:6d:a7:7e:5b:d2:84:79:5c:fd: fd:e8:04:8e:82:18:58:66:ff:89:08:41:0d:fd:67:35:2b:a4: 25:cd:2d:21:f5:4b:07:60:2b:38:fd:c8:25:fe:31:7c:89:f7: 92:67:6a:f2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8VzO3UvI3RhtezYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjU2YzcyZGYtYTJmOS00ZDc0LThhODEtOWZiZmIzYTZiY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXl1JRXOQ6yDWLMdFqizscfaCDF/b2IvcwcJ uceJlYk8Y+hzTxR5tILZwAFDq/ixIk/0ENB0s3Gtoa0xV0HZKnRDYewpKOSRxB2b 6ORnsbMDXcqlzcZE7cHMlAxpEAniI2wx6zdVlzhr2mHRMpBf6PalDhGdW7Y0ndjr JKwrcgSDA/SfQnX62m1lRL8ytIhks6b5aQAIx5IiLPbD2CBO6GaWCWwLfXuP01Ce 1bMRdN6KXJB8shOdsE6jCx5e3AFl77YNReYIlNBrPyn9nwkpPX6/BiNJvZSo2PNL d56wFIx0xNflmK+rd3Vyq4lfvy6Tjsl1PRQ4WWI8drCHO8a2EwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNLs8OcJvGhqUt/uYrb3H9HeNwzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQzZDgwMWItMDU0Ny0z OGUwLWI3ZWItNWM5YTAxNzQwYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB17n2BH35XS7iU4XZNBqr1dFDf/V4VgCY52rhMcprhUcASO2Blfo jCNE6FmdvRbwyRGY8SLDznEEEeF+RyG0YERlvMtT4oJMMNjrTOnu8l4m2orEgQae 48/eRyIMT17qKzs1qIUoWnHL9j5v5nDJgufrFTOdcrZmMVO0Ou8wX8m252PGjOm/ OLb5HdiEjC/Sw0rLdGFYKUK/ZcNx+bT4r+vWTXvUmlC+t0h4kYZBSI+WVyO5I9+I ZcLPXIWjrSPQr8X9XT0Q+kbv1OCs7bP1bad+W9KEeVz9/egEjoIYWGb/iQhBDf1n NSukJc0tIfVLB2ArOP3IJf4xfIn3kmdq8g== -----END CERTIFICATE-----Generated at Mon Sep 28 12:17:16 2026 by rpki-client