$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa File: 6d25562a-8b81-3647-90cd-106d48d370e2.roa (raw, json) Hash identifier: VtKm5OKRrW7W+RS1cfgFZwpUAk3SjsIMHbtGZwZRjE4= Subject key identifier: 2F:03:A5:E9:7F:41:A0:55:B5:D8:A2:C4:49:33:61:6F:11:53:87:5A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F480D32453F61ABFCFFE92B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:32:45:3f:61:ab:fc:ff:e9:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=0bddcea3-ea27-4b9a-9c2e-e5c957a1af2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:bd:77:71:d0:1e:f1:43:73:86:9c:8d:7d: 79:ca:69:e9:72:2b:6f:34:3a:28:7b:30:19:5e:ce: 03:97:4e:3e:9e:6b:7f:99:74:b3:dc:e6:dc:31:ff: e1:dc:ba:50:47:a0:a5:7e:da:d0:92:55:8d:3a:cf: a4:8d:5f:af:c8:10:73:e1:d4:70:ef:f1:e5:3b:33: 0a:93:e0:a0:47:77:49:30:0d:b8:0a:0c:17:dd:0c: 94:44:94:92:c5:89:24:18:17:d5:8d:58:9b:45:85: 1b:e1:1a:b1:f2:14:10:46:af:f1:54:ba:2d:de:4a: 18:4d:d5:aa:be:32:3d:e8:5d:26:43:30:0a:2e:f2: 8e:b9:87:dd:12:d0:61:f0:f5:ab:f8:25:6e:1a:48: fe:8b:d9:c8:6c:8b:a8:4d:f6:b5:12:b3:02:8e:63: bc:14:49:7a:b0:fe:66:4c:a9:3b:a7:fa:54:75:3c: b4:e9:74:c2:de:b7:98:8e:cc:bb:04:ac:1a:96:ca: 2d:65:75:3d:b8:95:52:dd:11:df:c8:3f:11:f2:e2: 19:a7:c1:c9:94:38:ac:42:7d:95:3c:3b:ce:e3:8d: a4:a7:16:00:d7:07:a8:26:81:1b:3b:c1:be:96:9c: 69:40:96:ac:e6:c3:40:f7:0d:61:b5:10:2f:bc:b5: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:03:A5:E9:7F:41:A0:55:B5:D8:A2:C4:49:33:61:6F:11:53:87:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6d25562a-8b81-3647-90cd-106d48d370e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d9:55:20:8c:9a:15:0e:3a:95:08:97:4a:e6:2b:ac:dd:b0: 7d:ab:6d:c1:fa:05:3c:bc:fe:e3:24:05:f2:de:c7:0e:51:5e: 44:6f:97:03:8f:1e:e3:96:0d:08:88:5c:81:97:d0:15:ea:bf: d1:a5:be:23:a1:d1:cf:7e:ac:72:77:3b:34:f0:0a:b7:c2:f0: e2:a5:65:22:81:77:26:39:f2:c8:9d:a8:a0:1c:df:23:de:25: 01:11:13:30:ce:58:9b:fa:e6:46:10:c0:13:bc:44:1b:e8:ca: 08:c0:1e:10:05:24:32:2a:8e:e4:b1:16:ad:24:bb:53:2d:9a: b2:aa:42:fa:98:e2:31:17:f4:01:18:3c:da:d9:70:8b:9e:40: 03:93:ef:a8:4b:41:4f:d1:c7:c3:be:53:17:a0:b0:c8:4d:24: 97:71:8a:07:17:77:a6:5a:32:e3:2c:f5:bb:a1:07:cf:f0:81: a8:64:ae:6b:e1:9a:60:67:4c:c3:79:f9:5f:8c:01:55:62:56: 26:b5:7f:19:78:8c:43:32:3b:20:5a:b9:84:37:db:84:7c:d3: 50:ac:d5:09:0a:dc:ca:7f:89:99:6c:58:4a:ab:0e:ae:72:4a: 1a:f8:c1:01:22:bd:74:c1:08:92:4b:b9:7c:be:8b:e1:e9:2b: 62:b6:c6:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9IDTJFP2Gr/P/pK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MGJkZGNlYTMtZWEyNy00YjlhLTljMmUtZTVjOTU3YTFhZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriq9d3HQHvFDc4acjX15ymnpcitvNDooezAZ Xs4Dl04+nmt/mXSz3ObcMf/h3LpQR6ClftrQklWNOs+kjV+vyBBz4dRw7/HlOzMK k+CgR3dJMA24CgwX3QyURJSSxYkkGBfVjVibRYUb4Rqx8hQQRq/xVLot3koYTdWq vjI96F0mQzAKLvKOuYfdEtBh8PWr+CVuGkj+i9nIbIuoTfa1ErMCjmO8FEl6sP5m TKk7p/pUdTy06XTC3reYjsy7BKwalsotZXU9uJVS3RHfyD8R8uIZp8HJlDisQn2V PDvO442kpxYA1weoJoEbO8G+lpxpQJas5sNA9w1htRAvvLVDvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC8Dpel/QaBVtdiixEkzYW8RU4daMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmQyNTU2MmEtOGI4MS0z NjQ3LTkwY2QtMTA2ZDQ4ZDM3MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAM9lVIIyaFQ46lQiXSuYrrN2wfattwfoFPLz+4yQF8t7HDlFeRG+X A48e45YNCIhcgZfQFeq/0aW+I6HRz36scnc7NPAKt8Lw4qVlIoF3JjnyyJ2ooBzf I94lARETMM5Ym/rmRhDAE7xEG+jKCMAeEAUkMiqO5LEWrSS7Uy2asqpC+pjiMRf0 ARg82tlwi55AA5PvqEtBT9HHw75TF6CwyE0kl3GKBxd3ploy4yz1u6EHz/CBqGSu a+GaYGdMw3n5X4wBVWJWJrV/GXiMQzI7IFq5hDfbhHzTUKzVCQrcyn+JmWxYSqsO rnJKGvjBASK9dMEIkku5fL6L4ekrYrbGlw== -----END CERTIFICATE-----Generated at Sat Sep 26 18:58:01 2026 by rpki-client