$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa File: 68d99f85-b937-338f-9406-78fc948e527c.roa (raw, json) Hash identifier: q95Ut2pN1DPE5qbrrGhP3nesrBYGglYQRbWiG9QpIZU= Subject key identifier: F7:C6:74:24:E7:51:9A:2A:9E:FF:A6:A3:55:AB:23:7F:34:D3:0B:A0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F103798C92BB6F5C163A34560 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e87:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:98:c9:2b:b6:f5:c1:63:a3:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=e77c2dd9-e301-4c7a-b263-38272f45d5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:43:e2:a3:d7:4c:d5:bc:7a:ad:95:69:58: 88:e2:ed:36:52:7f:13:6f:8a:a8:54:41:ca:c2:a6: 75:0d:c4:68:14:4e:f1:a4:cf:8f:64:2a:d7:1b:6b: b7:1e:c5:6a:31:8c:31:46:a6:63:61:5f:61:12:d1: 00:cb:a5:28:66:fb:04:37:04:2e:46:bd:9e:1c:57: e8:f6:54:e3:73:7f:65:a9:7d:ac:47:b5:7e:90:eb: a9:10:63:99:8b:f4:42:ae:9f:49:2b:bd:44:c2:82: 54:25:61:89:65:c4:d2:de:f7:67:ce:be:c9:ca:6b: 81:ac:75:2f:1a:00:dd:a4:e4:4b:ce:2d:69:84:03: 61:8c:d2:e8:89:4a:4e:1f:6e:32:d2:fe:d9:0a:e8: 5f:b0:61:28:7e:ac:03:1b:e3:e9:c7:78:1c:56:62: c6:4d:42:c2:e8:44:c5:94:41:0c:d8:72:ba:53:7a: 2d:70:f8:64:0b:9e:2d:02:27:56:f5:0b:21:27:c5: 45:50:f3:fa:a4:77:19:09:04:e9:2c:e0:af:fe:58: fe:2e:86:1a:5e:44:e8:fa:e7:89:40:35:ff:06:d5: cd:f3:ad:d0:18:8f:4c:02:e6:62:c0:20:16:b1:c7: f0:36:8b:6e:2e:7f:03:45:3b:45:86:e8:0f:64:32: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:74:24:E7:51:9A:2A:9E:FF:A6:A3:55:AB:23:7F:34:D3:0B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:cd:19:aa:a7:f5:5a:01:03:4b:94:7a:02:9d:81:e9:93:99: 82:bd:2f:b2:52:54:bd:7a:01:fb:54:4a:01:bc:6e:e5:ca:a8: f7:b9:9f:f4:bf:9d:4f:69:4c:cb:05:18:bc:e8:80:bc:6c:79: 3b:4f:8f:1f:5a:9a:05:3d:19:8d:44:71:2d:56:c7:c5:dc:29: 36:a1:34:a3:c5:10:98:6a:9f:8b:e4:ee:c9:bf:e5:21:b8:30: 0f:f5:ee:22:ff:46:88:d3:6f:9e:7e:15:bb:07:c1:2f:68:ab: 88:65:49:bf:56:25:73:30:ed:65:53:84:bb:81:86:1c:f9:0a: 19:8a:ae:55:40:92:98:e6:a2:a3:33:eb:3e:58:79:3d:3e:85: 54:f0:0a:c6:39:35:72:59:14:41:a0:a7:a5:f3:e5:e3:0d:6e: ff:b1:93:4d:92:54:bb:4a:eb:78:bb:8b:62:61:a7:bc:b3:9c: 22:d1:f7:48:c3:22:7b:19:cd:7f:4f:bf:48:cb:67:85:6b:6c: 8c:3b:58:aa:cc:b6:c4:86:0c:75:bb:28:d1:ba:d7:1f:69:a4: 1a:3d:da:e1:8d:e1:bd:b4:75:50:8d:44:83:c3:4b:04:51:ab: 1f:bf:26:a6:9a:3b:f4:44:1a:ca:4f:76:3b:53:ba:2f:2c:dd: a1:32:b1:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN5jJK7b1wWOjRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTc3YzJkZDktZTMwMS00YzdhLWIyNjMtMzgyNzJmNDVkNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBND4qPXTNW8eq2VaViI4u02Un8Tb4qoVEHK wqZ1DcRoFE7xpM+PZCrXG2u3HsVqMYwxRqZjYV9hEtEAy6UoZvsENwQuRr2eHFfo 9lTjc39lqX2sR7V+kOupEGOZi/RCrp9JK71EwoJUJWGJZcTS3vdnzr7JymuBrHUv GgDdpORLzi1phANhjNLoiUpOH24y0v7ZCuhfsGEofqwDG+Ppx3gcVmLGTULC6ETF lEEM2HK6U3otcPhkC54tAidW9QshJ8VFUPP6pHcZCQTpLOCv/lj+LoYaXkTo+ueJ QDX/BtXN863QGI9MAuZiwCAWscfwNotuLn8DRTtFhugPZDImxQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPfGdCTnUZoqnv+mo1WrI3800wugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhkOTlmODUtYjkzNy0z MzhmLTk0MDYtNzhmYzk0OGU1MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnc0Zqqf1WgEDS5R6Ap2B6ZOZgr0vslJUvXoB+1RKAbxu5cqo97mf 9L+dT2lMywUYvOiAvGx5O0+PH1qaBT0ZjURxLVbHxdwpNqE0o8UQmGqfi+Tuyb/l IbgwD/XuIv9GiNNvnn4VuwfBL2iriGVJv1YlczDtZVOEu4GGHPkKGYquVUCSmOai ozPrPlh5PT6FVPAKxjk1clkUQaCnpfPl4w1u/7GTTZJUu0rreLuLYmGnvLOcItH3 SMMiexnNf0+/SMtnhWtsjDtYqsy2xIYMdbso0brXH2mkGj3a4Y3hvbR1UI1Eg8NL BFGrH78mppo79EQayk92O1O6LyzdoTKxSQ== -----END CERTIFICATE-----Generated at Sun Oct 4 07:10:23 2026 by rpki-client