$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa File: a3fceaef-605b-38cd-8395-f045db18defc.roa (raw, json) Hash identifier: TVIUkm7M/i+1ByqeS7WbcR0rRMgxOAnKS21/JE6QMts= Subject key identifier: 1E:D9:50:AC:0F:75:64:88:59:73:ED:D4:16:CC:C0:58:F9:93:7D:C2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F15CD0370D92E83CEF5E88940 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8f:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:03:70:d9:2e:83:ce:f5:e8:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=c4fe8241-8218-463b-8b95-8d96a0684d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f8:41:d7:d1:50:28:81:df:ef:80:52:84:24: ba:db:2e:ca:0e:a6:b0:3a:00:f4:09:19:15:b6:5e: 05:aa:16:f6:7e:3e:44:48:b0:9b:21:1b:a6:bd:b6: a7:0d:3c:4f:12:54:49:2e:b0:ae:18:b1:17:2e:3d: df:2f:fb:16:0d:29:ff:9e:a3:94:71:a0:1d:18:0d: 96:4a:15:22:07:85:49:4f:62:72:29:bd:59:9b:2c: de:6f:af:33:5e:90:1f:e0:91:17:a7:01:ef:a9:2f: 8b:9d:0d:f9:25:04:6b:39:5b:7d:5e:b7:09:44:fa: b9:32:3d:17:78:b8:bd:24:ef:7e:dd:f5:24:a5:ec: b5:3c:fe:39:9f:41:43:4a:5a:1e:24:67:e1:b0:53: 5c:41:b0:72:e2:ac:c8:61:51:77:89:84:57:67:ec: a7:11:38:fb:aa:2d:39:a6:02:46:ac:c5:be:2f:0d: f5:c9:00:09:d0:bf:ee:74:23:22:3a:3e:de:bd:8c: df:b8:82:5f:64:4b:84:84:b3:61:91:b9:eb:f7:f4: 84:8d:2b:3d:b1:56:ac:20:a7:40:5c:54:6c:c3:24: 84:fe:a8:12:31:9b:f1:fb:cd:31:04:63:0e:eb:0c: 98:10:15:36:bf:06:cd:64:a0:64:d2:ab:81:65:3f: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D9:50:AC:0F:75:64:88:59:73:ED:D4:16:CC:C0:58:F9:93:7D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fceaef-605b-38cd-8395-f045db18defc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:da:22:89:2f:f7:1e:b8:88:3a:36:bd:57:e5:67:95:1f:16: f0:06:37:ec:94:3b:be:80:e8:79:d7:07:04:92:4d:4e:0b:59: eb:53:6f:69:3a:40:58:62:19:d3:91:e2:ad:eb:d0:47:d3:fb: 6a:14:7c:a5:29:0d:94:13:13:34:76:e5:28:7f:4f:7a:58:af: 91:87:e5:1e:62:ba:f4:f6:f8:03:e8:99:1c:60:ed:93:41:75: e1:66:75:a3:eb:87:4a:30:c2:84:38:a9:9f:29:c4:76:e8:9a: 51:e7:e2:3b:03:be:37:d4:11:a3:0a:e3:04:24:e7:9f:94:45: 51:2d:0a:ae:a6:d9:55:a3:73:69:79:d4:54:9f:85:ba:e9:92: 3d:e2:1d:72:38:f5:52:3d:72:c2:97:38:e5:c7:29:77:52:be: bd:36:99:ca:b2:81:a2:7f:3f:d7:86:56:cd:d3:22:46:c5:fc: 0d:8d:9d:15:c7:a9:91:7d:d0:84:a6:94:09:b7:a6:70:7c:3a: 6b:3f:41:e9:f6:93:3a:9a:d5:62:86:38:8d:06:9c:81:76:50: 63:ae:80:40:83:16:bd:fe:07:0c:e3:3d:f1:7a:b3:d7:bb:11: 02:66:6f:5f:71:38:3d:9f:8c:50:e2:a4:3d:9a:38:b0:b6:0d: 2b:f0:e5:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8VzQNw2S6DzvXoiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzRmZTgyNDEtODIxOC00NjNiLThiOTUtOGQ5NmEwNjg0ZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fhB19FQKIHf74BShCS62y7KDqawOgD0CRkV tl4Fqhb2fj5ESLCbIRumvbanDTxPElRJLrCuGLEXLj3fL/sWDSn/nqOUcaAdGA2W ShUiB4VJT2JyKb1Zmyzeb68zXpAf4JEXpwHvqS+LnQ35JQRrOVt9XrcJRPq5Mj0X eLi9JO9+3fUkpey1PP45n0FDSloeJGfhsFNcQbBy4qzIYVF3iYRXZ+ynETj7qi05 pgJGrMW+Lw31yQAJ0L/udCMiOj7evYzfuIJfZEuEhLNhkbnr9/SEjSs9sVasIKdA XFRswySE/qgSMZvx+80xBGMO6wyYEBU2vwbNZKBk0quBZT/ZYwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB7ZUKwPdWSIWXPt1BbMwFj5k33CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNmY2VhZWYtNjA1Yi0z OGNkLTgzOTUtZjA0NWRiMThkZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujxQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjNoiiS/3HriIOja9V+VnlR8W8AY37JQ7voDoedcHBJJNTgtZ61Nv aTpAWGIZ05HirevQR9P7ahR8pSkNlBMTNHblKH9PelivkYflHmK69Pb4A+iZHGDt k0F14WZ1o+uHSjDChDipnynEduiaUefiOwO+N9QRowrjBCTnn5RFUS0KrqbZVaNz aXnUVJ+FuumSPeIdcjj1Uj1ywpc45ccpd1K+vTaZyrKBon8/14ZWzdMiRsX8DY2d FcepkX3QhKaUCbemcHw6az9B6faTOprVYoY4jQacgXZQY66AQIMWvf4HDOM98Xqz 17sRAmZvX3E4PZ+MUOKkPZo4sLYNK/DlNg== -----END CERTIFICATE-----Generated at Tue Sep 29 13:31:58 2026 by rpki-client