$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa File: bf56dedf-58f6-3a50-a772-a07b6c69189c.roa (raw, json) Hash identifier: 5NKGR9ygdpHcYRWxCCF4OLGaCwENAN8XdFjUn8kanwM= Subject key identifier: 66:51:12:95:E4:F3:58:E5:A6:E6:E9:13:BC:A9:7C:B5:20:73:C8:2F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4974E2A70B1654789C34D940 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e89:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e2:a7:0b:16:54:78:9c:34:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e41a8cae-223f-443e-9e3b-9f0553e10802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:98:1f:6e:c3:74:1a:09:4c:4b:a0:5e:26: 2a:28:ec:d0:58:69:29:00:b2:52:e1:05:b2:02:74: 30:71:c0:c4:c6:90:73:6f:93:75:36:0a:7d:35:5e: b8:b2:da:40:a1:76:4f:a9:19:dc:52:65:94:27:15: d3:64:96:41:d8:5a:f2:d0:b2:8d:36:44:3a:62:46: 01:14:d2:23:77:c4:80:78:c0:c6:df:65:34:51:25: 41:d0:db:fa:92:0f:1f:9e:c1:96:a4:2d:e3:55:ae: b0:af:fa:54:ba:03:9f:ab:68:69:58:63:6e:6a:1e: 7e:25:e4:df:ec:31:da:f3:dc:2b:d3:ea:c9:c4:2c: 72:4f:4b:3d:5e:2b:41:f3:45:4d:0f:e9:f4:87:ce: 4d:e1:b7:ce:24:9c:f1:07:ea:b9:35:5e:37:34:02: 12:12:dd:f6:49:ff:bf:e7:ae:4c:6b:ed:cb:87:43: ca:d8:8b:f6:54:4b:04:3b:53:3e:a3:a7:c9:47:e9: d2:a9:ea:fe:9b:51:4b:d2:b5:5c:25:7f:d8:f2:c6: 40:89:bc:ce:46:e3:23:ff:f9:db:4c:d1:f0:91:d9: 25:a9:0e:50:41:5d:06:11:55:b5:d5:92:2f:c3:7c: 8b:b4:9d:ec:50:fb:b9:29:b2:d2:34:2f:c0:a6:e7: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:12:95:E4:F3:58:E5:A6:E6:E9:13:BC:A9:7C:B5:20:73:C8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:de:c9:59:d9:a3:f0:fc:ca:bf:76:e2:2f:36:c4:ec:ac:b1: 2b:7c:ae:6c:7a:00:05:30:eb:78:5b:bf:4b:7a:0a:93:ba:8d: 36:85:c9:1f:55:98:9f:3c:49:80:22:c0:cd:c2:dd:28:45:b0: e1:f9:d5:06:1b:2f:9c:11:51:94:72:07:08:6f:08:fc:d4:2d: 62:5e:42:71:ab:84:c3:c9:bf:a8:83:d0:6e:d8:66:8c:04:d2: 4d:78:d5:53:09:93:bf:16:c1:fb:0d:ba:9b:bd:a4:08:ee:e3: 81:8f:dd:b0:5f:4f:ff:27:2e:80:ef:ad:d1:1b:cc:58:14:41: d1:72:ea:68:93:96:13:61:0c:c0:34:20:8f:b5:8c:ab:fd:7e: 4e:0b:68:6d:4d:f8:78:ad:f4:c9:c2:3c:1a:13:a2:02:73:ba: f6:c5:87:3d:69:d6:cf:5d:71:55:93:d6:5a:9d:00:a4:39:6a: 59:c5:d7:29:1b:fb:c2:94:e2:6b:06:7e:80:ac:49:3f:e6:36: a7:38:8c:ea:27:7b:b9:f6:d4:bf:11:3c:7e:ac:4a:1d:c0:16: ff:e6:f6:6e:12:98:db:61:1f:93:94:e8:91:0a:66:83:e8:da: ec:2f:5e:8e:f5:cd:8f:09:3b:25:b2:c6:c3:ce:da:6a:d0:cf: 37:39:8e:86 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdOKnCxZUeJw02UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTQxYThjYWUtMjIzZi00NDNlLTllM2ItOWYwNTUzZTEwODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+YH27DdBoJTEugXiYqKOzQWGkpALJS4QWy AnQwccDExpBzb5N1Ngp9NV64stpAoXZPqRncUmWUJxXTZJZB2Fry0LKNNkQ6YkYB FNIjd8SAeMDG32U0USVB0Nv6kg8fnsGWpC3jVa6wr/pUugOfq2hpWGNuah5+JeTf 7DHa89wr0+rJxCxyT0s9XitB80VND+n0h85N4bfOJJzxB+q5NV43NAISEt32Sf+/ 565Ma+3Lh0PK2Iv2VEsEO1M+o6fJR+nSqer+m1FL0rVcJX/Y8sZAibzORuMj//nb TNHwkdklqQ5QQV0GEVW11ZIvw3yLtJ3sUPu5KbLSNC/ApufMvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGZREpXk81jlpubpE7ypfLUgc8gvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY1NmRlZGYtNThmNi0z YTUwLWE3NzItYTA3YjZjNjkxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVd7JWdmj8PzKv3biLzbE7KyxK3yubHoABTDreFu/S3oKk7qNNoXJ H1WYnzxJgCLAzcLdKEWw4fnVBhsvnBFRlHIHCG8I/NQtYl5CcauEw8m/qIPQbthm jATSTXjVUwmTvxbB+w26m72kCO7jgY/dsF9P/ycugO+t0RvMWBRB0XLqaJOWE2EM wDQgj7WMq/1+TgtobU34eK30ycI8GhOiAnO69sWHPWnWz11xVZPWWp0ApDlqWcXX KRv7wpTiawZ+gKxJP+Y2pziM6id7ufbUvxE8fqxKHcAW/+b2bhKY22Efk5TokQpm g+ja7C9ejvXNjwk7JbLGw87aatDPNzmOhg== -----END CERTIFICATE-----Generated at Wed Sep 30 15:07:13 2026 by rpki-client