$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa File: bf84129d-5373-3325-85f9-58b86b087904.roa (raw, json) Hash identifier: 6ieJcnLL7acM6bZIG4b4miMOYsr1kiU02SgpxG3wL7g= Subject key identifier: FB:8F:4D:A4:74:DE:06:3A:4F:C0:7A:27:0A:A1:B3:01:01:48:5E:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4987F2DA100A44DD90B63400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8d:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f2:da:10:0a:44:dd:90:b6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e63a682-3205-4219-af23-6cd50dba9aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:db:1a:0c:fc:0d:19:30:f3:76:e3:3e:13: b7:98:6e:77:6a:f1:58:08:69:0c:bc:07:ed:51:69: 05:a2:23:81:80:4a:cb:de:a1:14:26:ea:8b:48:7b: 2c:e0:89:52:07:66:2c:35:09:61:94:ac:be:eb:d5: 36:fb:c6:ed:00:c8:50:0a:67:4a:b8:71:c0:8a:8b: 9d:36:d0:e6:02:b5:9a:0d:56:07:7c:9d:d9:51:9b: d6:2a:bc:49:55:56:85:25:fd:ba:5b:71:c0:df:c8: 37:08:e0:fa:e4:56:c2:b8:51:60:71:c1:02:3b:7c: 54:67:03:09:6c:f2:83:f5:9f:f9:30:c5:cf:07:fb: 8f:29:9e:d3:14:00:4c:a8:dd:b6:a4:95:21:df:ca: 53:8e:2c:cb:2f:c9:0f:e1:02:34:6c:67:b4:a2:af: ab:d0:3e:fe:e9:fe:e0:72:82:0d:ea:3e:d3:2c:21: fb:2c:7c:2e:fa:2c:a8:47:73:80:df:1a:8d:0e:d9: ce:db:b0:a2:de:a6:86:76:ea:f9:7a:90:e3:d6:2e: aa:d8:62:b0:24:44:03:fe:b1:ea:49:17:28:08:e1: dc:5d:2f:b5:d1:e4:3d:75:81:a5:b1:da:d6:fa:fc: 8d:52:35:51:a5:42:b5:63:83:61:d3:eb:31:bd:10: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8F:4D:A4:74:DE:06:3A:4F:C0:7A:27:0A:A1:B3:01:01:48:5E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:4000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:74:45:ee:d5:b1:66:be:6d:bf:1f:36:f1:8e:85:8a:ac:1b: 7e:45:70:91:f7:0d:5b:db:3e:06:a0:90:b5:be:ae:2a:21:01: be:d4:86:f4:17:fa:2a:d1:6f:6a:f4:50:53:0b:b0:00:1b:5e: 94:7e:b5:aa:46:6e:e1:fc:50:3a:54:cd:25:38:d7:4f:33:c6: 1e:f9:5c:b5:d4:f1:de:c4:37:a5:c6:9f:8b:00:1b:f5:df:04: 75:81:0e:14:80:e7:eb:f1:8a:ac:b6:c6:8a:0b:15:71:2f:57: 59:27:11:e4:14:89:c8:22:35:20:57:91:5b:94:32:f9:8e:1d: b8:38:4b:16:bb:43:ac:a0:ba:6a:bf:09:63:91:91:23:47:62: b8:8d:b3:e0:13:52:8f:80:58:b0:f7:1e:81:b3:b2:66:2a:35: c7:d1:70:b0:c9:c1:e2:de:06:99:e7:d0:a4:ec:10:11:c1:52: 7b:21:1a:32:55:ff:5d:ed:60:a0:ac:af:9f:84:ce:d5:83:40: 7d:b5:2d:9c:e3:47:27:63:3b:c5:83:e4:ca:9f:66:0c:02:9c: 64:c4:9c:9f:b4:70:34:90:39:be:0b:eb:5e:45:55:11:68:49: f1:8c:74:0a:81:ea:38:72:e6:e8:a4:da:b2:0e:bc:4d:ed:12: a9:28:35:3e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh/LaEApE3ZC2NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU2M2E2ODItMzIwNS00MjE5LWFmMjMtNmNkNTBkYmE5YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqzbGgz8DRkw83bjPhO3mG53avFYCGkMvAft UWkFoiOBgErL3qEUJuqLSHss4IlSB2YsNQlhlKy+69U2+8btAMhQCmdKuHHAioud NtDmArWaDVYHfJ3ZUZvWKrxJVVaFJf26W3HA38g3COD65FbCuFFgccECO3xUZwMJ bPKD9Z/5MMXPB/uPKZ7TFABMqN22pJUh38pTjizLL8kP4QI0bGe0oq+r0D7+6f7g coIN6j7TLCH7LHwu+iyoR3OA3xqNDtnO27Ci3qaGdur5epDj1i6q2GKwJEQD/rHq SRcoCOHcXS+10eQ9dYGlsdrW+vyNUjVRpUK1Y4Nh0+sxvRAdKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPuPTaR03gY6T8B6JwqhswEBSF5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY4NDEyOWQtNTM3My0z MzI1LTg1ZjktNThiODZiMDg3OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFHRF7tWxZr5tvx828Y6FiqwbfkVwkfcNW9s+BqCQtb6uKiEBvtSG 9Bf6KtFvavRQUwuwABtelH61qkZu4fxQOlTNJTjXTzPGHvlctdTx3sQ3pcafiwAb 9d8EdYEOFIDn6/GKrLbGigsVcS9XWScR5BSJyCI1IFeRW5Qy+Y4duDhLFrtDrKC6 ar8JY5GRI0diuI2z4BNSj4BYsPcegbOyZio1x9FwsMnB4t4GmefQpOwQEcFSeyEa MlX/Xe1goKyvn4TO1YNAfbUtnONHJ2M7xYPkyp9mDAKcZMScn7RwNJA5vgvrXkVV EWhJ8Yx0CoHqOHLm6KTasg68Te0SqSg1Pg== -----END CERTIFICATE-----Generated at Sun Oct 4 21:16:04 2026 by rpki-client