$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa File: bf00ff42-1d72-33fe-afc2-42837b116524.roa (raw, json) Hash identifier: zZARzsEj+oZGknk1IkBQk5CEdXz4H4z2E0lxApX8Z2c= Subject key identifier: C4:2C:A3:E9:7E:99:EE:6F:16:EE:B4:82:2C:54:3C:7A:56:54:FE:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4974AA1E923841F05A5C8880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:9400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:aa:1e:92:38:41:f0:5a:5c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fea6c212-647c-45e7-88aa-70b9cabc6a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:23:b5:5a:7e:e4:f6:d8:8e:c9:4a:1a:bd: 47:f2:38:e9:fe:0f:53:79:02:3d:87:eb:82:a8:b0: be:0b:47:4a:c2:72:21:75:3a:b9:7a:1a:e6:b1:29: c9:58:c5:f8:ff:76:3c:21:f8:75:44:af:f7:74:ee: f5:65:cb:31:b0:b8:f8:90:3a:fb:8e:ac:35:68:84: d7:36:44:ce:89:16:6a:a2:5e:d3:37:f6:ed:66:ad: 23:22:29:6b:2f:e7:a4:42:8c:10:db:cd:0f:b8:cc: c1:94:8f:b5:5c:90:d9:a5:77:85:e1:5a:da:02:5b: 48:ca:2a:d7:6c:66:79:1e:80:09:65:cd:5f:0e:92: ac:23:9f:59:a6:f5:24:35:ed:0c:05:54:e1:fd:9d: 75:0c:77:43:61:91:90:f0:79:fa:bc:78:1c:5f:b6: 4e:dd:2a:d9:5a:93:04:d5:6d:30:8f:da:f0:4b:3b: 07:b1:90:15:34:c7:6e:80:bf:2b:76:c4:a8:9d:6f: 84:dc:2c:fe:24:c1:95:99:e8:d7:ce:bf:54:0c:2c: e0:e5:73:6b:5c:1e:c3:41:77:28:28:f2:80:0e:76: 69:c3:4b:0d:e7:aa:a0:ff:91:37:fe:79:15:a7:45: bb:dd:0f:a0:b1:3f:94:d3:b9:9c:73:ec:3d:00:1e: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:A3:E9:7E:99:EE:6F:16:EE:B4:82:2C:54:3C:7A:56:54:FE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf00ff42-1d72-33fe-afc2-42837b116524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:9400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9a:9b:b9:c6:25:c6:23:db:7e:f0:c5:dc:8e:a6:aa:db:33: 25:18:44:33:f9:4e:77:64:16:8f:37:73:7e:4a:68:be:9c:e3: b3:8a:3b:03:0d:63:cf:12:7d:a0:1b:c4:aa:f8:55:b6:75:97: 29:69:74:7f:89:dc:4b:37:86:e0:60:b1:e0:26:ad:07:56:23: 31:24:ae:9f:42:32:c8:02:26:e9:99:4d:8d:29:82:a1:7c:3f: 6d:08:7c:43:c2:b7:71:fb:e8:cc:5b:ef:46:7e:57:ff:e9:1c: a0:25:7f:b4:5f:7a:b1:7d:87:03:18:f7:fb:fa:3d:5a:6d:93: 47:8b:53:51:e9:d5:70:f9:b4:d7:a9:b4:bd:2f:fe:0a:b1:25: 8b:0b:e3:76:bf:ee:65:9f:3a:3a:8a:05:dd:b0:61:13:b3:3c: d6:00:61:b0:12:6f:3c:1f:f1:ab:8b:84:f1:e4:78:46:db:8d: 28:8e:ad:14:55:7b:2b:c3:21:06:28:40:1d:a8:c6:30:ec:35: df:aa:a2:24:41:cc:e2:a2:ba:7b:06:1f:33:fa:92:5d:c5:b9: 68:b8:10:17:b9:23:90:35:de:62:ce:d0:a3:53:5b:60:95:93: 74:f4:0a:d9:54:c4:0e:cf:75:02:25:dd:1e:87:5a:b1:16:f4: e4:04:04:e3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdKoekjhB8FpciIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmVhNmMyMTItNjQ3Yy00NWU3LTg4YWEtNzBiOWNhYmM2YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvwjtVp+5PbYjslKGr1H8jjp/g9TeQI9h+uC qLC+C0dKwnIhdTq5ehrmsSnJWMX4/3Y8Ifh1RK/3dO71ZcsxsLj4kDr7jqw1aITX NkTOiRZqol7TN/btZq0jIilrL+ekQowQ280PuMzBlI+1XJDZpXeF4VraAltIyirX bGZ5HoAJZc1fDpKsI59ZpvUkNe0MBVTh/Z11DHdDYZGQ8Hn6vHgcX7ZO3SrZWpME 1W0wj9rwSzsHsZAVNMdugL8rdsSonW+E3Cz+JMGVmejXzr9UDCzg5XNrXB7DQXco KPKADnZpw0sN56qg/5E3/nkVp0W73Q+gsT+U07mcc+w9AB60hQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMQso+l+me5vFu60gixUPHpWVP4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYwMGZmNDItMWQ3Mi0z M2ZlLWFmYzItNDI4MzdiMTE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujJQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAT5qbucYlxiPbfvDF3I6mqtszJRhEM/lOd2QWjzdzfkpovpzjs4o7 Aw1jzxJ9oBvEqvhVtnWXKWl0f4ncSzeG4GCx4CatB1YjMSSun0IyyAIm6ZlNjSmC oXw/bQh8Q8K3cfvozFvvRn5X/+kcoCV/tF96sX2HAxj3+/o9Wm2TR4tTUenVcPm0 16m0vS/+CrEliwvjdr/uZZ86OooF3bBhE7M81gBhsBJvPB/xq4uE8eR4RtuNKI6t FFV7K8MhBihAHajGMOw136qiJEHM4qK6ewYfM/qSXcW5aLgQF7kjkDXeYs7Qo1Nb YJWTdPQK2VTEDs91AiXdHodasRb05AQE4w== -----END CERTIFICATE-----Generated at Tue Oct 6 20:21:07 2026 by rpki-client