$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa File: 8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa (raw, json) Hash identifier: 0mBia8P17UrcmX9f4/pG6C4wBZAL/UCMdfSlpyY9VAk= Subject key identifier: BA:A5:4A:6E:84:A5:86:BA:98:F5:C5:1A:91:EB:1E:F1:5E:B1:E4:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F10379B0B0D7C7F10C043D200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e87:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:9b:0b:0d:7c:7f:10:c0:43:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=8b05d8a1-7ec8-4cc1-9a62-ebdc405a63c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:46:b9:0f:43:6e:17:75:d5:01:cd:22:4a: 9d:21:54:c9:29:65:d7:70:0b:53:b1:ac:26:99:e3: 6d:41:f6:0f:8f:da:11:a9:94:0f:5c:38:60:2c:92: 4f:28:95:a6:25:0a:0e:80:39:e1:59:41:50:f5:64: a5:c2:c2:9c:83:44:a3:40:0a:3d:1a:d8:3a:a0:dc: 1d:a5:c9:06:43:f9:41:d7:e4:2d:e1:12:d4:6b:35: c9:53:9c:2c:c3:82:ba:31:dd:da:ce:45:96:ca:ec: 6c:1d:b2:d3:85:9a:eb:5d:07:f1:08:5b:a5:d3:86: e5:df:96:c3:92:0f:0c:e2:40:8a:aa:f3:59:0e:f1: 1f:33:1b:2c:6c:68:12:7f:34:a9:7a:97:1c:a8:0c: 8e:20:95:df:b0:14:dc:5a:9d:64:d2:27:26:7f:98: 13:25:b1:2d:83:37:6e:00:f5:e3:43:3c:2a:6f:5f: 13:0f:90:d5:cf:e3:25:9b:7b:4f:42:6a:0c:a5:f8: b1:d6:fc:23:a4:1b:21:1c:ad:9f:40:13:f3:96:73: 95:86:a1:65:9a:bc:ff:18:74:40:dc:08:5b:1d:4b: 3a:af:cd:96:14:ce:53:c8:4c:9d:da:fb:32:9f:77: 3b:22:6a:97:89:b4:6a:b8:08:e9:f2:bb:e8:8e:aa: 60:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:4A:6E:84:A5:86:BA:98:F5:C5:1A:91:EB:1E:F1:5E:B1:E4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:79:a3:92:d9:21:c4:30:6a:73:7c:62:c2:09:4e:b4:ab:53: d7:83:46:2c:82:b0:76:94:0c:4b:c1:70:65:17:5c:c8:55:62: 8c:25:7e:f3:99:4e:5c:83:34:ff:0a:72:71:09:83:95:c8:aa: 15:cd:e1:c5:60:f3:f6:40:f9:c8:7a:8c:b5:fc:92:25:b7:41: ed:a6:60:24:86:8a:2a:fb:9d:7a:68:38:2e:af:90:02:35:c0: 95:9f:a7:60:de:b3:a6:f2:ce:da:d9:0a:b5:79:a6:86:c7:e8: 0f:41:f7:00:1e:01:ac:fe:89:61:b2:1d:d3:2f:43:cc:4c:96: 28:6b:99:81:68:f6:ea:5f:b2:e2:1b:3f:e5:0f:d8:a4:8a:6f: b9:f3:db:b5:70:75:49:b3:23:13:31:5f:a2:4b:80:3a:28:05: e5:83:59:81:2b:fe:50:46:d0:d3:e4:e3:e2:23:d7:27:ab:e5: 37:c9:02:70:0c:ba:9d:b3:54:b2:04:dd:af:3e:ae:62:79:b0: c9:b1:f1:a2:ef:09:12:bc:57:e4:19:70:e8:e5:1c:18:8c:0d: 27:9a:27:cb:da:42:a0:c3:b7:1d:da:4d:d8:25:ba:7b:89:ed: a6:b2:91:e9:9e:a0:9e:58:e4:b4:e7:2c:8f:f9:7a:b0:17:b5: 11:44:23:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN5sLDXx/EMBD0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk OGIwNWQ4YTEtN2VjOC00Y2MxLTlhNjItZWJkYzQwNWE2M2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvJGuQ9Dbhd11QHNIkqdIVTJKWXXcAtTsawm meNtQfYPj9oRqZQPXDhgLJJPKJWmJQoOgDnhWUFQ9WSlwsKcg0SjQAo9Gtg6oNwd pckGQ/lB1+Qt4RLUazXJU5wsw4K6Md3azkWWyuxsHbLThZrrXQfxCFul04bl35bD kg8M4kCKqvNZDvEfMxssbGgSfzSpepccqAyOIJXfsBTcWp1k0icmf5gTJbEtgzdu APXjQzwqb18TD5DVz+Mlm3tPQmoMpfix1vwjpBshHK2fQBPzlnOVhqFlmrz/GHRA 3AhbHUs6r82WFM5TyEyd2vsyn3c7ImqXibRquAjp8rvojqpgHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLqlSm6EpYa6mPXFGpHrHvFeseT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODUyMGZjMTgtYWI5OC0z YjMyLWE3ZmQtYzRiYjVmZWRmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU3mjktkhxDBqc3xiwglOtKtT14NGLIKwdpQMS8FwZRdcyFVijCV+ 85lOXIM0/wpycQmDlciqFc3hxWDz9kD5yHqMtfySJbdB7aZgJIaKKvudemg4Lq+Q AjXAlZ+nYN6zpvLO2tkKtXmmhsfoD0H3AB4BrP6JYbId0y9DzEyWKGuZgWj26l+y 4hs/5Q/YpIpvufPbtXB1SbMjEzFfokuAOigF5YNZgSv+UEbQ0+Tj4iPXJ6vlN8kC cAy6nbNUsgTdrz6uYnmwybHxou8JErxX5Blw6OUcGIwNJ5ony9pCoMO3HdpN2CW6 e4ntprKR6Z6gnljktOcsj/l6sBe1EUQjLA== -----END CERTIFICATE-----Generated at Fri Sep 25 20:33:38 2026 by rpki-client