$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa File: b20c5d87-769b-3e5b-a67d-99594d32fb16.roa (raw, json) Hash identifier: 8ICMkVGGhH/lcMVxiwpYHKz5d7BmLT9b7XYtwGNY9CM= Subject key identifier: 76:CD:69:D8:F4:D4:52:23:0C:76:4C:4C:94:37:56:F0:D5:7E:C1:76 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4987FEFF0A22827171D90380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:fe:ff:0a:22:82:71:71:d9:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=743f8ba2-fb63-4b36-8a87-11f10d2457f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:2d:5f:4e:44:24:16:f0:06:ee:2b:89:63: b3:0a:34:4f:38:3b:b9:f5:18:9b:c8:0e:f4:21:b9: 7e:f5:18:20:ad:dd:07:37:0e:15:e1:7b:01:19:83: 49:f2:8c:ce:e4:f4:6b:0f:d7:f4:d3:b3:20:06:d1: f3:e2:67:92:72:3c:13:27:bb:4c:d5:13:48:29:51: 34:34:2d:f5:e3:71:b2:1b:ab:8e:10:78:f7:42:3e: b1:f0:51:8c:55:2f:2a:5e:be:1a:a9:2d:04:c0:1b: 26:ca:9a:33:da:1c:ff:eb:d8:a3:49:23:9e:11:cc: df:7d:fc:16:ad:8b:b0:d9:be:81:f4:cd:f1:79:ca: 3f:61:dc:79:d2:90:8f:85:a9:f6:27:7c:1d:13:ba: 85:b7:88:2f:c0:28:13:8b:f6:7e:a8:31:1a:fd:6c: fb:96:02:a4:d9:2c:18:e0:a2:47:25:ce:b7:12:7a: cb:91:7c:95:93:ca:2e:3b:27:97:04:a6:a2:72:43: 70:82:fe:8e:ff:d3:80:3f:2f:28:ab:63:73:69:3d: ab:ab:5c:39:3b:03:c0:6f:d1:88:a0:ff:d0:c8:e8: 4a:55:a3:f5:72:a0:ca:e3:66:72:ff:bd:2d:be:dd: b8:4b:55:bf:09:e8:93:75:f3:05:ca:e3:f5:4c:95: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:69:D8:F4:D4:52:23:0C:76:4C:4C:94:37:56:F0:D5:7E:C1:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:41:b2:23:20:52:01:7a:7c:cd:42:8b:f3:d4:22:0d:f3:1b: 58:eb:01:c0:84:9f:d0:65:6f:42:6f:b5:8b:58:9f:4d:dc:dc: 69:07:79:c7:ba:94:0f:4b:4d:48:2c:83:7e:61:ee:0c:67:a9: 58:bd:61:74:47:b8:d9:f7:16:17:ab:e8:84:f8:d9:6d:4e:42: 6e:95:d4:71:d9:f5:8a:d4:3a:fc:b9:eb:99:88:73:63:6e:aa: ff:a6:c5:a9:89:e3:48:a4:16:02:5a:31:15:35:fc:6b:dc:1a: ad:e4:c7:01:01:46:84:01:95:45:d1:b4:19:65:08:61:10:78: d6:51:b2:2e:c7:f5:af:28:3f:fa:86:39:c7:4c:1d:3c:fb:d6: b7:9f:b8:14:2d:de:89:a4:d3:5a:19:9f:ef:7b:2a:d1:65:ef: 54:d8:4a:a5:51:0f:a4:2e:d3:ca:ed:90:4b:85:a9:27:20:e6: f8:02:67:02:6d:67:1f:53:72:31:bc:68:1e:75:db:d9:5e:82: 11:31:7e:93:0b:fc:d9:bd:da:d5:1c:b9:b0:0b:e7:fb:1f:44: 4c:8f:05:49:6b:ee:a6:2a:74:80:02:b0:25:be:84:f8:ad:e9: ba:9d:1b:ce:8f:b8:89:8b:4e:54:0e:f0:32:9d:34:10:b7:6b: 27:49:48:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh/7/CiKCcXHZA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQzZjhiYTItZmI2My00YjM2LThhODctMTFmMTBkMjQ1N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKktX05EJBbwBu4riWOzCjRPODu59RibyA70 Ibl+9Rggrd0HNw4V4XsBGYNJ8ozO5PRrD9f007MgBtHz4meScjwTJ7tM1RNIKVE0 NC3143GyG6uOEHj3Qj6x8FGMVS8qXr4aqS0EwBsmypoz2hz/69ijSSOeEczfffwW rYuw2b6B9M3xeco/Ydx50pCPhan2J3wdE7qFt4gvwCgTi/Z+qDEa/Wz7lgKk2SwY 4KJHJc63EnrLkXyVk8ouOyeXBKaickNwgv6O/9OAPy8oq2NzaT2rq1w5OwPAb9GI oP/QyOhKVaP1cqDK42Zy/70tvt24S1W/CeiTdfMFyuP1TJX27QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHbNadj01FIjDHZMTJQ3VvDVfsF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjIwYzVkODctNzY5Yi0z ZTViLWE2N2QtOTk1OTRkMzJmYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIkGyIyBSAXp8zUKL89QiDfMbWOsBwISf0GVvQm+1i1ifTdzcaQd5 x7qUD0tNSCyDfmHuDGepWL1hdEe42fcWF6vohPjZbU5CbpXUcdn1itQ6/LnrmYhz Y26q/6bFqYnjSKQWAloxFTX8a9wareTHAQFGhAGVRdG0GWUIYRB41lGyLsf1ryg/ +oY5x0wdPPvWt5+4FC3eiaTTWhmf73sq0WXvVNhKpVEPpC7Tyu2QS4WpJyDm+AJn Am1nH1NyMbxoHnXb2V6CETF+kwv82b3a1Ry5sAvn+x9ETI8FSWvupip0gAKwJb6E +K3pup0bzo+4iYtOVA7wMp00ELdrJ0lI5A== -----END CERTIFICATE-----Generated at Sat Sep 26 15:40:24 2026 by rpki-client