$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa File: e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa (raw, json) Hash identifier: NlessxmL8QMGJ2vk49MtPE23cPgvOXVf86pjD8jkqAE= Subject key identifier: 5C:7D:9A:41:AE:7A:3F:3C:54:7B:BB:A0:C7:12:C0:F6:C0:29:B0:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4C3DE7C9255D98197D13D680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 2604:2e8a:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e7:c9:25:5d:98:19:7d:13:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=fd5b9152-5cf7-42bd-bebd-f8b349f2eb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:17:76:a3:e8:5b:da:71:32:fb:a9:df:f3: ba:e6:22:6f:75:b5:26:cf:8d:72:c5:3a:3c:44:60: e5:23:e3:4a:da:80:a8:b0:d2:ac:a5:f9:13:ef:76: 33:5d:63:55:27:b3:40:af:21:60:b1:c9:20:5a:3c: f9:48:1d:39:20:e8:e5:5f:e1:90:6c:e1:f2:8a:5b: 1a:7a:1c:d4:e4:b8:86:a9:3c:be:86:fe:06:e4:f8: 44:61:53:d2:d0:ec:47:5e:18:ec:e4:71:fd:92:b4: 12:02:c3:16:84:f8:92:98:d7:07:51:35:f9:cd:bc: 1f:88:dd:94:df:1f:2a:f0:46:2b:77:ef:d1:d2:4d: d0:1e:b2:8e:2b:c4:07:65:81:8a:cb:e3:4b:9e:d4: 2b:9a:2b:d6:dc:ea:bd:fb:1b:21:9d:eb:af:b0:38: db:96:91:8c:dc:00:76:6a:fa:1b:c2:17:e3:49:12: 2d:c5:2b:dd:2a:7b:1b:d0:71:88:3a:06:c1:b9:09: a5:8e:4a:4e:1b:6d:49:bb:d9:ba:33:7d:c0:2c:15: 04:a9:49:13:26:e0:58:84:88:1b:17:e8:49:3e:7e: d3:be:6d:5d:0b:e1:ad:de:8d:a5:62:89:ff:be:4a: 8f:79:8e:48:07:5a:6a:7d:e7:d1:0f:23:df:e8:8b: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:9A:41:AE:7A:3F:3C:54:7B:BB:A0:C7:12:C0:F6:C0:29:B0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e1:64:bb:51:50:03:b5:b6:ec:e3:ab:a8:fa:32:93:a5:7b: cf:41:62:3e:ef:18:7b:fd:3f:c0:9e:c9:e0:b0:3b:1b:64:ab: 82:4e:e7:e3:0e:e9:79:77:06:ca:46:56:f2:c2:4a:81:df:81: 87:1c:e6:55:ac:3a:01:7f:3b:94:46:1d:96:85:bc:8c:03:41: e5:d6:04:d6:a2:e1:12:e5:fb:f4:ff:b4:21:8a:d3:44:8c:8e: 40:41:b6:9d:90:6b:86:00:75:e7:50:4f:d3:db:52:67:10:89: 09:b3:6b:04:55:63:48:d2:25:ef:54:bb:f6:4f:53:b3:c7:9e: 52:07:0d:f7:d6:d6:b0:ca:89:bd:bc:dc:57:00:e6:77:85:39: d5:09:c1:e9:a3:a6:16:be:71:7f:a1:f0:bb:59:77:21:82:d4: 95:8b:64:8a:f4:08:ea:ab:db:d8:7c:37:b0:de:f4:7f:ba:10: 91:0a:94:e1:90:d7:e4:a5:a6:55:28:12:0e:bf:16:bf:af:4d: 31:91:93:88:51:e3:b2:d3:55:7a:39:c1:5d:5b:e7:d8:7a:a1: 10:97:e0:d2:9d:42:b0:ea:5a:69:79:a7:8c:38:5f:96:29:d6: 18:c4:70:28:b5:90:55:31:1e:05:1b:56:60:df:89:48:8f:4f: 88:1a:16:8b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9MPefJJV2YGX0T1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ1YjkxNTItNWNmNy00MmJkLWJlYmQtZjhiMzQ5ZjJlYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11EXdqPoW9pxMvup3/O65iJvdbUmz41yxTo8 RGDlI+NK2oCosNKspfkT73YzXWNVJ7NAryFgsckgWjz5SB05IOjlX+GQbOHyilsa ehzU5LiGqTy+hv4G5PhEYVPS0OxHXhjs5HH9krQSAsMWhPiSmNcHUTX5zbwfiN2U 3x8q8EYrd+/R0k3QHrKOK8QHZYGKy+NLntQrmivW3Oq9+xshneuvsDjblpGM3AB2 avobwhfjSRItxSvdKnsb0HGIOgbBuQmljkpOG21Ju9m6M33ALBUEqUkTJuBYhIgb F+hJPn7Tvm1dC+Gt3o2lYon/vkqPeY5IB1pqfefRDyPf6Iu+KQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFx9mkGuej88VHu7oMcSwPbAKbDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTA4N2FlNmQtYmVhOS0z MTU0LThiNWItODA0N2QxYmM1MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuipAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoeFku1FQA7W27OOrqPoyk6V7z0FiPu8Ye/0/wJ7J4LA7G2Srgk7n 4w7peXcGykZW8sJKgd+BhxzmVaw6AX87lEYdloW8jANB5dYE1qLhEuX79P+0IYrT RIyOQEG2nZBrhgB151BP09tSZxCJCbNrBFVjSNIl71S79k9Ts8eeUgcN99bWsMqJ vbzcVwDmd4U51QnB6aOmFr5xf6Hwu1l3IYLUlYtkivQI6qvb2Hw3sN70f7oQkQqU 4ZDX5KWmVSgSDr8Wv69NMZGTiFHjstNVejnBXVvn2HqhEJfg0p1CsOpaaXmnjDhf linWGMRwKLWQVTEeBRtWYN+JSI9PiBoWiw== -----END CERTIFICATE-----Generated at Tue Sep 29 19:43:07 2026 by rpki-client