$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa File: 9c00eec4-e9a9-38e0-a790-870bd90c4951.roa (raw, json) Hash identifier: s45x2wSTyFhgZc79x/9edmyTwMBHwZgHUS5uGbHWR3E= Subject key identifier: 5E:FB:91:9A:81:E6:64:3C:FC:7E:94:F7:BB:4D:93:D4:C4:8F:31:6C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4972CFD01550A99085D48280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:cf:d0:15:50:a9:90:85:d4:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bee387c-091c-4c20-9025-cfe200e4daaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:73:b1:eb:9d:80:bc:9b:e1:40:da:d4:b7: 8f:d2:db:ab:4a:78:f4:14:7e:46:05:f1:86:37:4f: 31:1b:d3:e3:0c:22:31:27:e9:84:36:9f:c4:1d:17: 15:24:56:33:b2:f5:59:f0:33:5a:69:8b:2b:92:82: c3:89:09:9a:70:d4:83:db:7f:b0:69:3b:f6:5c:f9: 6b:54:80:50:c9:51:5b:4c:17:3f:5c:b6:1b:89:3e: 7b:b1:79:61:4e:0b:68:75:26:5d:a9:50:28:16:a3: 31:59:28:9c:46:40:76:ae:93:09:09:5c:a9:da:bd: e2:fd:26:38:8f:f6:24:f2:3f:ef:ef:d0:45:42:df: 21:eb:07:52:f5:99:b7:23:42:c7:73:4a:89:da:6a: 99:b6:49:0b:6a:68:c9:ec:2f:60:5e:0b:4f:d3:10: f2:c7:d2:f7:9f:cb:ff:d3:69:af:f6:f2:03:55:8b: a5:67:79:24:19:3c:ae:13:28:bf:29:35:f3:55:69: b5:d7:b0:50:0f:46:b4:57:d7:4d:62:43:cb:4d:05: 9f:c0:ef:99:e3:1e:a1:40:07:9c:b2:40:55:cf:2b: 3c:d0:9e:e2:f6:e7:9e:f1:e2:71:52:65:d6:bf:24: 1b:9e:d6:ab:15:fe:a7:7e:98:b2:9e:e5:28:c2:76: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FB:91:9A:81:E6:64:3C:FC:7E:94:F7:BB:4D:93:D4:C4:8F:31:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9c00eec4-e9a9-38e0-a790-870bd90c4951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f9:98:3b:eb:68:e5:6e:1e:13:4b:cd:c4:56:2a:5b:bb:28: e8:8c:e5:a2:16:94:60:88:4b:5e:50:42:6c:bd:43:2d:56:1a: 7b:8b:50:47:ee:d0:77:09:c8:a8:b1:f1:b5:78:57:15:47:a8: cd:48:49:38:2c:8a:18:e5:e2:94:85:c9:60:7b:59:9b:f8:78: 47:4f:49:5e:9a:0f:d0:7b:20:6c:94:0e:92:d2:43:f5:74:27: 23:af:9b:eb:df:fb:b9:b5:17:c8:b1:90:00:52:4c:41:2e:a8: bc:8b:19:e9:df:15:26:db:81:b2:0e:2d:de:c4:7c:61:2a:d7: 8c:48:e4:7a:a1:84:af:d7:8c:09:d9:34:d8:09:e2:68:ff:68: 4f:ec:69:d9:d9:ad:21:87:26:af:5c:24:89:f3:11:e4:3b:6f: e4:0c:ee:42:0b:a5:11:dd:6b:11:05:a7:58:84:e7:18:cf:aa: 66:b0:0c:2d:00:4d:5c:5c:de:67:42:80:fd:d0:cc:1b:0c:bd: 2e:34:cd:a6:71:e5:aa:6a:37:a1:cc:a5:6b:ee:f8:8f:e4:13: 4f:37:6a:88:11:54:78:51:24:79:29:7e:f3:64:2c:36:e5:c1: 88:fa:07:30:a9:8a:1f:98:06:29:30:1d:4f:b9:0e:cc:93:76: e1:d9:84:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcs/QFVCpkIXUgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJlZTM4N2MtMDkxYy00YzIwLTkwMjUtY2ZlMjAwZTRkYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yxzseudgLyb4UDa1LeP0turSnj0FH5GBfGG N08xG9PjDCIxJ+mENp/EHRcVJFYzsvVZ8DNaaYsrkoLDiQmacNSD23+waTv2XPlr VIBQyVFbTBc/XLYbiT57sXlhTgtodSZdqVAoFqMxWSicRkB2rpMJCVyp2r3i/SY4 j/Yk8j/v79BFQt8h6wdS9Zm3I0LHc0qJ2mqZtkkLamjJ7C9gXgtP0xDyx9L3n8v/ 02mv9vIDVYulZ3kkGTyuEyi/KTXzVWm117BQD0a0V9dNYkPLTQWfwO+Z4x6hQAec skBVzys80J7i9uee8eJxUmXWvyQbntarFf6nfpiynuUownZjrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF77kZqB5mQ8/H6U97tNk9TEjzFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWMwMGVlYzQtZTlhOS0z OGUwLWE3OTAtODcwYmQ5MGM0OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPPmYO+to5W4eE0vNxFYqW7so6IzlohaUYIhLXlBCbL1DLVYae4tQ R+7QdwnIqLHxtXhXFUeozUhJOCyKGOXilIXJYHtZm/h4R09JXpoP0HsgbJQOktJD 9XQnI6+b69/7ubUXyLGQAFJMQS6ovIsZ6d8VJtuBsg4t3sR8YSrXjEjkeqGEr9eM Cdk02AniaP9oT+xp2dmtIYcmr1wkifMR5Dtv5AzuQgulEd1rEQWnWITnGM+qZrAM LQBNXFzeZ0KA/dDMGwy9LjTNpnHlqmo3ocyla+74j+QTTzdqiBFUeFEkeSl+82Qs NuXBiPoHMKmKH5gGKTAdT7kOzJN24dmETA== -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:47 2026 by rpki-client