$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa File: cf819398-649a-3a62-9382-4ab483cf9621.roa (raw, json) Hash identifier: lJBarv9s8jfF/JkcTYokBAkkitK9RftnmAtuASfJfO4= Subject key identifier: 4C:9A:BA:68:6D:0C:74:32:C0:CA:C9:11:26:26:2B:69:AD:24:A7:27 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F10379D514EA71479F81F3680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e87:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:9d:51:4e:a7:14:79:f8:1f:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=9351e6a0-fad4-44f1-872b-9d7893cccf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:b7:eb:bc:f1:03:8b:e0:c5:88:88:81:71: 6c:10:93:ac:b3:e8:14:13:cd:a8:85:d9:26:be:a1: 86:81:d2:d9:d7:65:d2:c1:0e:2b:e4:1a:d9:99:10: 1a:0f:16:91:15:92:62:fb:f9:49:8b:b1:fd:9c:a2: 57:ad:80:d7:33:08:a1:9e:51:cc:fc:cb:a2:fb:40: 27:cb:62:c7:a4:b5:83:8a:e3:a2:d9:ac:90:6c:e5: 23:fe:b6:62:4b:69:41:88:aa:95:3e:cb:ce:8f:0d: f6:20:60:53:26:bb:8f:68:8a:39:1a:33:93:80:06: 0d:9b:d6:62:82:0c:a3:1b:22:b0:c7:a7:ce:9c:6a: b5:c1:71:14:0e:54:4f:f9:29:e4:fb:95:a8:0e:b7: 40:b3:d8:ec:0f:19:a5:15:73:23:e3:31:1f:40:1e: d3:37:5c:c9:68:a4:00:8c:0e:50:85:49:39:21:95: 22:25:25:c5:72:0e:13:9f:6f:65:b9:34:8d:23:70: 81:b3:32:89:de:77:c6:65:5e:5c:ea:a7:d1:24:22: cf:df:34:ef:55:88:ca:30:f4:51:64:0d:88:02:fd: 5e:59:4b:22:22:22:55:63:09:08:64:e1:53:50:0b: 53:5c:b6:d2:e7:6d:90:9e:8d:81:53:81:88:3f:5a: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9A:BA:68:6D:0C:74:32:C0:CA:C9:11:26:26:2B:69:AD:24:A7:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf819398-649a-3a62-9382-4ab483cf9621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c0:a6:61:74:66:cf:32:bf:82:85:55:2c:fb:dd:dc:54:cf: 89:9e:3f:4a:6e:87:a0:0b:a9:b6:20:a5:2f:39:01:fa:9e:36: 9e:b9:7c:5b:37:4e:0e:c4:58:7d:7b:4d:a3:43:88:41:32:30: 11:18:44:39:64:83:a7:ea:89:7d:77:a2:ca:0a:f5:c0:b1:e6: e9:ee:37:23:89:37:16:e2:82:c7:58:30:cc:5f:c3:51:fa:3a: 48:50:f9:46:ab:ab:ac:92:74:b5:f6:3f:20:75:00:07:d8:10: c6:ad:ec:cb:ac:1f:9b:62:74:f0:2d:a4:86:e7:26:f4:16:d8: f1:77:3d:d5:82:f4:89:1c:56:95:e2:0c:d1:df:a0:30:3d:44: fe:5a:98:15:0f:28:bd:11:bf:0f:b7:f6:d8:c5:18:1d:39:9f: ac:04:d2:81:e5:98:6d:b7:60:c3:03:78:88:1b:00:2b:b0:9c: b3:7d:f1:ed:38:08:1e:b9:24:30:a5:9c:a2:61:ab:b7:f2:ff: bd:d4:35:42:97:6b:ba:f8:d5:3d:d5:43:a0:9b:16:12:79:06: 35:f8:75:0f:7f:55:08:d9:0a:66:a2:b5:50:6e:b3:ae:55:40: 08:fe:13:30:9a:78:9a:c8:29:3f:5c:90:81:62:b7:c8:bf:3d: 84:00:db:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN51RTqcUefgfNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk OTM1MWU2YTAtZmFkNC00NGYxLTg3MmItOWQ3ODkzY2NjZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5y367zxA4vgxYiIgXFsEJOss+gUE82ohdkm vqGGgdLZ12XSwQ4r5BrZmRAaDxaRFZJi+/lJi7H9nKJXrYDXMwihnlHM/Mui+0An y2LHpLWDiuOi2ayQbOUj/rZiS2lBiKqVPsvOjw32IGBTJruPaIo5GjOTgAYNm9Zi ggyjGyKwx6fOnGq1wXEUDlRP+Snk+5WoDrdAs9jsDxmlFXMj4zEfQB7TN1zJaKQA jA5QhUk5IZUiJSXFcg4Tn29luTSNI3CBszKJ3nfGZV5c6qfRJCLP3zTvVYjKMPRR ZA2IAv1eWUsiIiJVYwkIZOFTUAtTXLbS522Qno2BU4GIP1paqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEyaumhtDHQywMrJESYmK2mtJKcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Y4MTkzOTgtNjQ5YS0z YTYyLTkzODItNGFiNDgzY2Y5NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW8CmYXRmzzK/goVVLPvd3FTPiZ4/Sm6HoAuptiClLzkB+p42nrl8 WzdODsRYfXtNo0OIQTIwERhEOWSDp+qJfXeiygr1wLHm6e43I4k3FuKCx1gwzF/D Ufo6SFD5RqurrJJ0tfY/IHUAB9gQxq3sy6wfm2J08C2khucm9BbY8Xc91YL0iRxW leIM0d+gMD1E/lqYFQ8ovRG/D7f22MUYHTmfrATSgeWYbbdgwwN4iBsAK7Ccs33x 7TgIHrkkMKWcomGrt/L/vdQ1QpdruvjVPdVDoJsWEnkGNfh1D39VCNkKZqK1UG6z rlVACP4TMJp4msgpP1yQgWK3yL89hADb0Q== -----END CERTIFICATE-----Generated at Mon Sep 28 06:50:23 2026 by rpki-client