$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc53b635-815b-30bf-a3ea-4d97b5a8a43f.roa File: cc53b635-815b-30bf-a3ea-4d97b5a8a43f.roa (raw, json) Hash identifier: GCIYZyWMpjJMUGrP0QlifTICkOLR7IUIb8gMWV6x7uw= Subject key identifier: B8:9E:04:5C:5F:49:58:F7:52:48:40:6E:65:DE:82:9C:26:F4:7E:51 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49875F8C7575761341306D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc53b635-815b-30bf-a3ea-4d97b5a8a43f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e88:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:5f:8c:75:75:76:13:41:30:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=29a4e13c-67d8-4e8d-9ec4-51c11308cf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:02:1d:14:ab:af:e4:ad:c0:ba:99:84:bf: 6c:af:c8:d0:19:47:5a:64:3c:1a:c1:3f:03:f0:2e: 9d:0c:91:f0:9a:de:c6:04:60:4a:46:e3:e3:39:9d: 0a:e6:1b:1d:d7:7c:c8:fa:d6:20:de:3f:42:f2:7b: 4f:07:74:5c:1c:db:53:80:f9:0a:1f:42:8a:07:c5: ed:04:11:4e:bb:13:ec:b8:6b:dd:84:f6:04:0e:c1: 29:0d:aa:f5:96:27:4e:8c:80:a8:c2:6c:4b:21:0a: 8e:de:14:13:fd:92:d7:e1:78:8d:5c:f7:f1:f1:f1: e9:5b:09:dc:cc:4d:00:1d:88:9d:c3:cc:34:44:b9: cd:b2:6e:b3:3b:38:d1:8c:a5:44:47:2f:4f:2e:ea: 05:69:e7:9e:b3:71:3e:c2:e7:ea:9f:31:df:f0:75: 88:f1:ee:05:c8:f7:88:8a:56:c5:ac:df:0f:66:5b: ee:54:b5:d0:ed:7c:73:9a:62:6a:86:37:d1:9c:13: d2:76:3c:04:66:62:fb:e7:be:51:f3:1c:06:8c:ec: 7b:df:83:65:2e:3d:11:ac:71:9a:df:67:eb:13:e7: 06:b2:cc:5d:3b:20:96:26:bb:32:10:d5:a2:d1:79: c3:fb:e6:d9:56:13:43:a1:6b:c2:3c:50:4a:13:c9: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:04:5C:5F:49:58:F7:52:48:40:6E:65:DE:82:9C:26:F4:7E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc53b635-815b-30bf-a3ea-4d97b5a8a43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5d:0e:c4:2f:d5:99:36:74:cc:d5:5c:df:a7:c0:07:2b:be: 69:fe:38:d5:03:36:0c:33:2d:d3:6c:ae:bf:08:bd:a7:51:23: bf:8d:82:44:44:7c:50:49:ed:fb:ff:4f:cd:bc:c5:33:29:0c: ce:85:63:bb:03:53:51:e0:6e:bd:83:0d:44:3d:b5:33:51:b0: 04:0e:ce:92:8a:8b:b8:ba:43:d7:e8:8b:05:a2:db:1c:39:ac: 0c:fd:2a:19:bc:70:a0:6f:96:83:9f:b8:e0:0a:6c:19:05:c2: 65:ed:56:41:7f:5a:6f:0a:83:30:d9:c8:ae:71:64:4b:a2:a8: 95:51:7f:3a:8f:3e:6e:29:59:be:09:ab:78:cb:0f:4c:c6:16: 4b:7c:5f:49:06:df:b5:25:36:75:85:a6:55:28:f7:40:63:64: c2:06:6e:dd:f0:ac:bd:d1:cc:c1:10:ca:ec:a0:bf:ee:28:09: 9b:d6:3e:16:d0:ad:d7:bb:8e:89:9e:ac:6c:9d:35:08:8c:48: 71:58:72:81:f0:b5:72:c1:17:eb:ff:3f:d9:f4:00:b0:7d:d1: 1e:ad:d9:08:26:60:7a:ec:d9:7d:06:b5:99:7e:f3:9b:33:f7: d6:b6:fa:27:8f:a9:89:93:01:48:3b:e9:02:76:1b:27:af:3d: e7:ee:a5:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jh1+MdXV2E0EwbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlhNGUxM2MtNjdkOC00ZThkLTllYzQtNTFjMTEzMDhjZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/4CHRSrr+StwLqZhL9sr8jQGUdaZDwawT8D 8C6dDJHwmt7GBGBKRuPjOZ0K5hsd13zI+tYg3j9C8ntPB3RcHNtTgPkKH0KKB8Xt BBFOuxPsuGvdhPYEDsEpDar1lidOjICowmxLIQqO3hQT/ZLX4XiNXPfx8fHpWwnc zE0AHYidw8w0RLnNsm6zOzjRjKVERy9PLuoFaeees3E+wufqnzHf8HWI8e4FyPeI ilbFrN8PZlvuVLXQ7XxzmmJqhjfRnBPSdjwEZmL7575R8xwGjOx734NlLj0RrHGa 32frE+cGssxdOyCWJrsyENWi0XnD++bZVhNDoWvCPFBKE8nybwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLieBFxfSVj3UkhAbmXegpwm9H5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2M1M2I2MzUtODE1Yi0z MGJmLWEzZWEtNGQ5N2I1YThhNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiHww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALV0OxC/VmTZ0zNVc36fAByu+af441QM2DDMt02yuvwi9p1Ejv42C RER8UEnt+/9PzbzFMykMzoVjuwNTUeBuvYMNRD21M1GwBA7OkoqLuLpD1+iLBaLb HDmsDP0qGbxwoG+Wg5+44ApsGQXCZe1WQX9abwqDMNnIrnFkS6KolVF/Oo8+bilZ vgmreMsPTMYWS3xfSQbftSU2dYWmVSj3QGNkwgZu3fCsvdHMwRDK7KC/7igJm9Y+ FtCt17uOiZ6sbJ01CIxIcVhygfC1csEX6/8/2fQAsH3RHq3ZCCZgeuzZfQa1mX7z mzP31rb6J4+piZMBSDvpAnYbJ6895+6luA== -----END CERTIFICATE-----Generated at Sun Sep 27 08:13:23 2026 by rpki-client