$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa File: bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa (raw, json) Hash identifier: /fntqR+cl7Qx6Hlg8cRJAUKh1RU6fSbG9C94GYCyTak= Subject key identifier: 8C:84:65:02:79:BD:26:A8:4D:2D:20:47:D0:96:29:CE:40:6C:1A:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4973075E0D5D11863F35C464 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8d:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:07:5e:0d:5d:11:86:3f:35:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd1721dd-89f5-4734-bfe8-cae35477b854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:29:7f:44:c9:93:f6:55:27:fe:c9:13:a2: 1e:8a:31:d9:75:ab:86:9f:d2:7d:1c:44:f5:00:a8: 95:b4:cf:52:7c:43:5f:70:fd:02:9e:c0:3f:cf:27: f0:05:b9:0e:14:78:76:6a:c2:1c:8e:e5:1d:cc:30: b1:e1:69:fa:a7:1c:d7:34:a7:13:1e:21:4e:c1:76: 91:35:22:c8:5a:3f:02:6c:70:1d:be:f0:43:79:bb: 96:be:4a:b8:e8:c7:ea:20:d7:fc:e1:22:bb:db:2c: e0:e3:96:74:bc:ed:05:f3:ab:8c:99:33:fd:1b:2b: d1:ef:41:56:23:1f:71:c2:85:5f:04:8f:de:66:a9: ef:85:c9:74:4b:98:f9:6e:f8:65:3f:f6:bc:92:9c: aa:cd:c5:e1:35:ab:32:80:4b:90:79:e6:f0:72:f4: 8f:29:cc:77:27:7b:6e:4c:e3:50:48:bc:5a:65:a7: fd:83:fb:65:5a:2c:b2:a4:af:43:2b:ed:0a:43:c5: 2a:cb:22:21:3a:60:55:00:14:86:2b:35:06:30:d1: b7:07:e5:9f:2e:7d:34:c4:a4:95:0f:a4:db:ab:26: 48:0b:85:06:15:4d:9e:0b:49:0a:a2:ba:c8:90:89: 55:b4:ee:62:00:33:44:fe:17:f6:8a:a6:c7:ac:e1: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:65:02:79:BD:26:A8:4D:2D:20:47:D0:96:29:CE:40:6C:1A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bae1a46a-5dc8-3dc4-a0c2-e1042315f4ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:69:c9:87:1a:92:54:71:73:0b:7a:e7:58:66:32:3e:97:22: 13:e2:21:1e:06:f9:95:83:27:eb:77:ef:1e:51:4a:63:2b:56: ce:1c:26:2c:71:38:df:1d:99:e9:18:8d:92:ce:53:f2:b5:c1: dc:85:01:a6:4a:72:73:a2:af:39:6e:f0:82:f8:ed:8e:6f:27: 8b:4c:0f:2b:03:56:08:e3:bc:7f:e9:72:dc:78:33:03:a2:ac: 5f:30:12:99:42:36:7c:0e:e6:a9:22:08:22:de:2f:bb:ad:82: 9a:89:c8:c4:fa:3f:4c:47:04:a9:bc:23:75:3f:27:e4:54:6b: db:1d:44:6f:70:ae:54:da:fa:89:4a:ca:e6:77:a3:30:1b:72: e6:18:21:5e:ef:ae:1c:0d:e0:7e:23:e9:a4:fd:bf:ec:d5:7d: 38:83:fb:ba:17:f4:fa:06:a1:42:7c:35:62:d9:4e:e1:8e:c7: 95:8c:c7:cb:b8:88:fa:6e:f4:02:df:f9:ab:de:82:2a:19:a5: ce:b9:3d:27:e9:cf:ee:aa:2b:06:c5:3f:b2:c6:87:29:63:71: 62:57:18:f9:8b:99:ce:06:0e:74:05:06:a1:d8:07:cf:f2:fa: 70:d0:7e:12:53:55:33:96:c7:f7:40:d8:db:9c:68:66:0e:65: bd:1a:3d:d6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JcwdeDV0Rhj81xGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQxNzIxZGQtODlmNS00NzM0LWJmZTgtY2FlMzU0NzdiODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwpf0TJk/ZVJ/7JE6IeijHZdauGn9J9HET1 AKiVtM9SfENfcP0CnsA/zyfwBbkOFHh2asIcjuUdzDCx4Wn6pxzXNKcTHiFOwXaR NSLIWj8CbHAdvvBDebuWvkq46MfqINf84SK72yzg45Z0vO0F86uMmTP9GyvR70FW Ix9xwoVfBI/eZqnvhcl0S5j5bvhlP/a8kpyqzcXhNasygEuQeebwcvSPKcx3J3tu TONQSLxaZaf9g/tlWiyypK9DK+0KQ8UqyyIhOmBVABSGKzUGMNG3B+WfLn00xKSV D6TbqyZIC4UGFU2eC0kKorrIkIlVtO5iADNE/hf2iqbHrOEwAwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIyEZQJ5vSaoTS0gR9CWKc5AbBrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmFlMWE0NmEtNWRjOC0z ZGM0LWEwYzItZTEwNDIzMTVmNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkmnJhxqSVHFzC3rnWGYyPpciE+IhHgb5lYMn63fvHlFKYytWzhwm LHE43x2Z6RiNks5T8rXB3IUBpkpyc6KvOW7wgvjtjm8ni0wPKwNWCOO8f+ly3Hgz A6KsXzASmUI2fA7mqSIIIt4vu62CmonIxPo/TEcEqbwjdT8n5FRr2x1Eb3CuVNr6 iUrK5nejMBty5hghXu+uHA3gfiPppP2/7NV9OIP7uhf0+gahQnw1YtlO4Y7HlYzH y7iI+m70At/5q96CKhmlzrk9J+nP7qorBsU/ssaHKWNxYlcY+YuZzgYOdAUGodgH z/L6cNB+ElNVM5bH90DY25xoZg5lvRo91g== -----END CERTIFICATE-----Generated at Fri Sep 25 08:38:05 2026 by rpki-client