$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c30008b3-ad96-3887-a462-313fb48de498.roa File: c30008b3-ad96-3887-a462-313fb48de498.roa (raw, json) Hash identifier: tcZAc8Pn1jxzIbFQWKSHLMY0rXs5PXcP8Ljff+WVMgI= Subject key identifier: C9:8A:23:67:43:C6:03:DC:2D:CA:8A:11:77:29:DE:34:28:43:A9:E9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F498BB092B0F4D68DB9CD2100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c30008b3-ad96-3887-a462-313fb48de498.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8a:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b0:92:b0:f4:d6:8d:b9:cd:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ef0f589-f33b-49db-b472-f5f5c52f05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:24:f4:24:07:04:01:96:56:b7:03:b7:33: e3:62:60:8f:3a:37:fd:43:e7:fe:43:2c:39:0f:46: dd:81:a1:d7:15:44:90:67:c4:db:6d:73:07:69:c1: aa:86:0e:fa:dd:82:f8:5c:55:15:05:57:1e:9f:66: ac:03:47:a4:c0:55:c7:c5:06:10:7c:87:2c:e3:f1: 48:9c:c3:8e:bf:89:8b:4d:1a:7d:6d:b6:f8:aa:2e: 8e:5b:0f:75:f5:be:58:13:18:3d:c8:21:d2:e6:63: c7:9e:b6:e7:88:ad:99:71:12:0c:ab:87:99:2c:f2: 5c:f6:f3:b8:47:4b:a7:52:1a:1a:1c:2e:8e:f2:49: 87:35:01:4f:c6:4e:dc:a6:0e:11:64:b5:2e:cb:28: 3c:ad:37:44:37:02:3b:3e:48:2d:66:fa:30:7e:0b: 5f:21:b8:99:43:6e:19:4a:2a:0e:e5:a4:e5:e9:92: 8e:d8:be:5c:5f:22:26:59:21:fb:15:e0:d8:75:f2: a8:3c:9d:88:76:16:fc:ed:d9:45:f9:fa:79:d6:35: 1c:15:af:6b:76:c2:d6:fd:71:23:73:6a:d9:76:9c: f3:73:5f:02:09:7a:86:1d:c4:9b:f7:1e:64:c0:22: bd:6a:74:f3:41:1d:21:8b:55:ab:f5:06:d3:8c:f6: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:23:67:43:C6:03:DC:2D:CA:8A:11:77:29:DE:34:28:43:A9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c30008b3-ad96-3887-a462-313fb48de498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f8:c2:c2:4f:0e:44:66:fd:5d:d0:13:04:ed:99:0f:da:6e: 39:52:2c:3b:ef:75:15:18:31:a6:fe:e9:37:4d:13:d8:12:67: 47:07:ae:c8:bc:64:07:a7:c8:76:8f:5d:74:23:b1:77:28:bd: fb:16:11:78:16:80:b6:19:c1:02:f4:ba:fe:67:cb:46:06:a1: 98:e2:1b:e9:b2:7d:d7:57:fd:99:b2:d1:19:63:e2:41:d9:41: 01:9c:a7:78:49:e1:9a:a6:c1:75:b9:e1:79:09:e2:2c:5d:72: 15:6e:90:59:b1:51:af:ae:fb:08:b4:70:ba:d1:89:24:22:0e: ec:49:85:72:86:4a:2d:24:1e:e2:d1:92:27:ca:fc:be:60:1a: 49:a8:71:e4:f9:b2:20:82:47:13:73:0d:33:89:b9:83:2e:9a: 4a:b0:2b:72:d7:04:af:79:68:58:c1:60:e4:c3:9a:e6:1d:05: 86:bf:d9:a5:e4:58:88:88:f3:90:ff:e2:5e:ed:f6:70:4e:14: a2:8e:7f:97:c2:29:f8:e6:70:74:c7:68:6b:96:6f:7c:e2:b5: b7:5d:89:db:ef:ba:76:e5:f3:41:8f:cb:1d:04:e3:6f:e9:e9: 4b:38:16:11:7c:31:fb:60:0e:6d:9f:14:ef:21:ed:85:1f:e2: aa:d2:3d:83 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Ji7CSsPTWjbnNIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVmMGY1ODktZjMzYi00OWRiLWI0NzItZjVmNWM1MmYwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ok9CQHBAGWVrcDtzPjYmCPOjf9Q+f+Qyw5 D0bdgaHXFUSQZ8TbbXMHacGqhg763YL4XFUVBVcen2asA0ekwFXHxQYQfIcs4/FI nMOOv4mLTRp9bbb4qi6OWw919b5YExg9yCHS5mPHnrbniK2ZcRIMq4eZLPJc9vO4 R0unUhoaHC6O8kmHNQFPxk7cpg4RZLUuyyg8rTdENwI7PkgtZvowfgtfIbiZQ24Z SioO5aTl6ZKO2L5cXyImWSH7FeDYdfKoPJ2Idhb87dlF+fp51jUcFa9rdsLW/XEj c2rZdpzzc18CCXqGHcSb9x5kwCK9anTzQR0hi1Wr9QbTjPbjJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMmKI2dDxgPcLcqKEXcp3jQoQ6npMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzMwMDA4YjMtYWQ5Ni0z ODg3LWE0NjItMzEzZmI0OGRlNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABfjCwk8ORGb9XdATBO2ZD9puOVIsO+91FRgxpv7pN00T2BJnRweu yLxkB6fIdo9ddCOxdyi9+xYReBaAthnBAvS6/mfLRgahmOIb6bJ911f9mbLRGWPi QdlBAZyneEnhmqbBdbnheQniLF1yFW6QWbFRr677CLRwutGJJCIO7EmFcoZKLSQe 4tGSJ8r8vmAaSahx5PmyIIJHE3MNM4m5gy6aSrArctcEr3loWMFg5MOa5h0Fhr/Z peRYiIjzkP/iXu32cE4Uoo5/l8Ip+OZwdMdoa5ZvfOK1t12J2++6duXzQY/LHQTj b+npSzgWEXwx+2AObZ8U7yHthR/iqtI9gw== -----END CERTIFICATE-----Generated at Mon Sep 28 00:58:01 2026 by rpki-client