$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa File: cd4bfe42-e547-395e-a177-c3a90f9b7116.roa (raw, json) Hash identifier: V0BX+f/Pe/k9YMcgYQ3dRHIvZYSJOolcoUG5oNGG9Cs= Subject key identifier: 36:CF:18:67:2F:B8:52:4A:71:3F:16:23:D9:51:42:69:AD:DA:E8:2F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49747CEEABE42DED03EE6D40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7c:ee:ab:e4:2d:ed:03:ee:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cc6a3e48-f855-493d-ae13-a6b95e1d39eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:3b:0d:a8:94:ef:7f:37:27:a0:f3:6b:6c: 00:2a:6b:38:8c:b4:49:da:67:39:36:c2:01:d3:95: 92:f8:55:a6:52:d2:ea:0a:23:a7:4e:74:98:04:f3: b0:c9:38:3f:0c:3f:c9:76:93:c7:ab:58:0a:0c:6a: 3f:4b:76:eb:19:cb:ee:ff:c0:63:af:37:0f:34:bd: 69:1b:3d:09:4f:88:23:31:9b:c9:d4:b3:62:75:ce: 10:2f:9c:30:bb:2a:7a:06:1e:52:4d:31:dd:d4:77: ae:f8:9a:30:00:6f:c5:91:05:53:f8:92:1c:c6:dc: cb:a2:f8:13:ab:92:0a:e5:dc:a5:6a:84:fc:fb:77: af:1e:4d:af:bc:b1:35:75:d1:71:6b:ba:58:b9:db: 60:d4:65:e6:28:0e:89:47:55:ed:07:0a:08:08:af: b9:a4:3d:0e:88:ad:af:39:ff:b1:12:87:6a:92:8b: 77:91:bf:8d:56:47:00:bf:4e:af:82:43:17:60:a9: 5c:82:9e:56:1a:a8:cf:ee:12:2c:f7:fb:16:a1:28: 9d:de:f5:c9:55:6b:4c:d7:d9:a9:64:5e:8b:a8:c6: 6b:b7:2a:06:fd:11:dd:9e:8d:c2:6d:3b:20:01:e2: af:b0:64:0c:76:e0:d8:57:8d:57:e9:25:97:c1:44: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:18:67:2F:B8:52:4A:71:3F:16:23:D9:51:42:69:AD:DA:E8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a3:5d:3a:f6:16:94:96:39:f6:25:7a:6b:e2:da:e5:10:fd: bf:42:29:24:94:a8:ca:cf:1e:94:fa:60:2a:36:46:b8:5e:05: 84:a4:b5:f8:74:fb:68:25:9b:53:e2:70:a4:b0:c1:b0:76:b8: 02:16:21:01:77:49:f7:65:01:c2:54:b7:33:e5:39:11:2e:9f: 19:8e:74:34:b5:fa:45:f7:b5:46:32:cf:eb:b4:c3:15:30:1a: 28:00:d5:dc:fa:cf:e3:cc:d0:c1:2d:ec:9c:54:86:a7:a9:23: 56:6a:5f:7c:fd:65:b4:eb:2d:18:0e:79:ba:36:8b:e6:94:0a: ed:1f:ca:ca:91:7b:fc:fa:6c:63:e9:28:01:96:96:d8:be:4e: 57:08:ed:4b:ba:d5:31:a6:a2:de:d1:ac:23:5d:43:8d:d8:d5: 2c:0f:ac:1e:af:a2:49:05:27:10:b4:56:29:79:be:11:24:db: db:1a:e6:d0:9a:70:0c:26:36:1b:6d:c7:ed:70:02:15:4b:fa: ce:0c:5e:fa:f2:4a:77:bd:5e:71:4d:e5:1b:0c:c4:25:00:71: 70:1e:a7:88:b0:9a:10:03:51:6d:0f:45:85:65:2b:a1:45:00: 1b:7e:dc:3c:90:8f:a9:fe:56:f5:36:b8:93:1e:1a:5f:01:9d: 32:30:c1:8e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdHzuq+Qt7QPubUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2M2YTNlNDgtZjg1NS00OTNkLWFlMTMtYTZiOTVlMWQzOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZg7DaiU7383J6Dza2wAKms4jLRJ2mc5NsIB 05WS+FWmUtLqCiOnTnSYBPOwyTg/DD/JdpPHq1gKDGo/S3brGcvu/8BjrzcPNL1p Gz0JT4gjMZvJ1LNidc4QL5wwuyp6Bh5STTHd1Heu+JowAG/FkQVT+JIcxtzLovgT q5IK5dylaoT8+3evHk2vvLE1ddFxa7pYudtg1GXmKA6JR1XtBwoICK+5pD0OiK2v Of+xEodqkot3kb+NVkcAv06vgkMXYKlcgp5WGqjP7hIs9/sWoSid3vXJVWtM19mp ZF6LqMZrtyoG/RHdno3CbTsgAeKvsGQMduDYV41X6SWXwUSugQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDbPGGcvuFJKcT8WI9lRQmmt2ugvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Q0YmZlNDItZTU0Ny0z OTVlLWExNzctYzNhOTBmOWI3MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui/Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD6NdOvYWlJY59iV6a+La5RD9v0IpJJSoys8elPpgKjZGuF4FhKS1 +HT7aCWbU+JwpLDBsHa4AhYhAXdJ92UBwlS3M+U5ES6fGY50NLX6Rfe1RjLP67TD FTAaKADV3PrP48zQwS3snFSGp6kjVmpffP1ltOstGA55ujaL5pQK7R/KypF7/Pps Y+koAZaW2L5OVwjtS7rVMaai3tGsI11DjdjVLA+sHq+iSQUnELRWKXm+ESTb2xrm 0JpwDCY2G23H7XACFUv6zgxe+vJKd71ecU3lGwzEJQBxcB6niLCaEANRbQ9FhWUr oUUAG37cPJCPqf5W9Ta4kx4aXwGdMjDBjg== -----END CERTIFICATE-----Generated at Fri Sep 25 20:14:29 2026 by rpki-client