$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa File: bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa (raw, json) Hash identifier: p1qsXSMNrRNBy5ECHs/rUIKrmjWF7SIrwrCPOc/Rnhk= Subject key identifier: 73:AE:BE:CB:E1:F5:C0:D7:8D:F4:DF:B9:BD:04:E9:4A:3E:92:01:76 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49744864A0CDFE4A4FC7FB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8c:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:48:64:a0:cd:fe:4a:4f:c7:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f0294934-2c79-4bcd-82b1-41ff6046c6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:59:fe:74:15:ec:f4:58:6a:ce:fc:54:5b: 66:86:15:06:07:e6:90:4c:82:4a:c8:5f:eb:00:46: 9d:9b:05:e6:b2:ff:a4:9e:1e:b2:95:f4:8f:bb:00: bf:2c:5e:e1:e6:85:a6:fa:1d:0f:be:e8:4e:42:a8: 30:d8:94:79:0d:93:2d:8f:fd:15:49:8a:43:e1:65: cd:fc:54:18:e7:79:0d:83:ed:d1:de:46:fd:98:05: dc:3f:80:19:80:ef:25:8c:95:87:62:9c:67:bb:08: 8f:68:1f:80:07:80:87:09:37:70:bc:b6:1a:b9:cf: 45:a8:17:91:76:a3:01:a6:8b:1d:5c:b1:77:37:76: e1:42:5e:84:e2:e0:b8:8f:db:ab:d8:ba:e5:29:ba: 46:68:c8:ba:b3:29:0f:c3:52:39:f3:06:4d:4f:97: c6:bc:a1:97:4f:e1:2e:b2:80:b4:a8:06:31:52:8f: 82:35:4e:dd:e1:73:b8:53:fb:6b:09:dc:00:10:3d: 4a:fb:5a:78:e9:17:b7:eb:d2:d4:14:a4:49:72:38: f1:93:3b:f1:dc:19:72:7e:eb:77:83:43:a9:91:09: 8e:e2:07:8e:79:50:f3:ac:ca:70:5e:0c:77:fa:ee: dd:7d:6f:62:5f:d8:73:82:23:65:8c:f1:51:0a:24: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:BE:CB:E1:F5:C0:D7:8D:F4:DF:B9:BD:04:E9:4A:3E:92:01:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf1e5bdc-8cc4-327d-ba1f-133d427c05bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bb:c4:de:a5:fc:78:88:99:77:c7:06:73:5c:df:75:8e:39: b5:19:6c:05:53:9b:68:2e:40:56:a8:6a:1e:3b:90:87:06:44: 3a:75:fe:1b:a9:3b:61:de:09:14:fa:36:e4:88:7c:9a:21:85: 03:a8:33:5a:6c:fa:08:0b:2a:09:1c:9f:72:67:ea:9b:e6:cd: c4:12:7a:34:1d:9e:cc:51:7d:d8:78:3e:7b:be:16:62:8e:eb: ff:26:6f:04:bc:d4:71:50:6c:b1:4f:05:ac:51:b7:b5:55:a5: 34:12:f5:1f:46:09:00:6f:f4:52:6a:58:df:63:3e:a7:17:60: 9b:21:d8:8f:7b:ee:36:4e:1c:a6:ef:3c:69:44:0a:62:0c:79: a4:3f:14:a5:5e:d0:58:3f:56:02:b1:4b:95:68:24:dd:b5:68: 00:1e:e4:98:68:bb:3d:79:b6:4e:31:c4:fd:2a:2a:82:36:fc: d8:d5:a7:60:cd:99:ca:f6:83:37:86:03:35:28:50:cf:3c:fa: 26:ad:bd:4c:e0:e1:3c:75:10:db:7d:7e:86:ca:49:ca:68:b0: ea:80:08:2e:72:8c:c1:b7:e2:ac:ad:4f:cf:ea:0a:03:35:ae: fe:c9:7e:50:d1:87:fc:0f:b3:fb:4b:17:11:9c:b2:20:69:65: fb:6c:6b:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdEhkoM3+Sk/H+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjAyOTQ5MzQtMmM3OS00YmNkLTgyYjEtNDFmZjYwNDZjNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNJZ/nQV7PRYas78VFtmhhUGB+aQTIJKyF/r AEadmwXmsv+knh6ylfSPuwC/LF7h5oWm+h0PvuhOQqgw2JR5DZMtj/0VSYpD4WXN /FQY53kNg+3R3kb9mAXcP4AZgO8ljJWHYpxnuwiPaB+AB4CHCTdwvLYauc9FqBeR dqMBposdXLF3N3bhQl6E4uC4j9ur2LrlKbpGaMi6sykPw1I58wZNT5fGvKGXT+Eu soC0qAYxUo+CNU7d4XO4U/trCdwAED1K+1p46Re369LUFKRJcjjxkzvx3Blyfut3 g0OpkQmO4geOeVDzrMpwXgx3+u7dfW9iX9hzgiNljPFRCiQqjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHOuvsvh9cDXjfTfub0E6Uo+kgF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmYxZTViZGMtOGNjNC0z MjdkLWJhMWYtMTMzZDQyN2MwNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujHAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALLvE3qX8eIiZd8cGc1zfdY45tRlsBVObaC5AVqhqHjuQhwZEOnX+ G6k7Yd4JFPo25Ih8miGFA6gzWmz6CAsqCRyfcmfqm+bNxBJ6NB2ezFF92Hg+e74W Yo7r/yZvBLzUcVBssU8FrFG3tVWlNBL1H0YJAG/0UmpY32M+pxdgmyHYj3vuNk4c pu88aUQKYgx5pD8UpV7QWD9WArFLlWgk3bVoAB7kmGi7PXm2TjHE/Soqgjb82NWn YM2ZyvaDN4YDNShQzzz6Jq29TODhPHUQ231+hspJymiw6oAILnKMwbfirK1Pz+oK AzWu/sl+UNGH/A+z+0sXEZyyIGll+2xrOQ== -----END CERTIFICATE-----Generated at Sun Sep 27 04:42:45 2026 by rpki-client