$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa File: cecd7a26-37f7-391f-988a-77a64e655f49.roa (raw, json) Hash identifier: 1XSbGPqjaOCrfPc7gFm5hfZpCB9Zc8V9PzTYCIECNtg= Subject key identifier: 60:7C:B5:A6:59:07:66:F1:18:DC:FA:CE:63:FA:12:B7:B9:FB:4A:5A Certificate issuer: /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8 Certificate serial: 010D0C9F4328584F4973CEE247B9384D5FCAD830 Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36515 IP address blocks: 2604:4c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ce:e2:47:b9:38:4d:5f:ca:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b00063b5-f49f-4b80-a3f2-0b765987203d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:06:6b:52:b4:a6:1c:32:7c:96:ec:10:3b: 2a:63:96:1e:c7:0a:27:0c:16:05:60:3c:1f:53:93: 69:26:37:11:0d:6b:3b:1b:c8:fc:86:72:0d:99:c1: 54:14:b8:5d:f2:92:2f:77:ad:0c:d6:0a:56:23:8e: 28:a3:b8:89:ff:be:87:73:3e:1b:a7:10:d7:e1:eb: b3:c8:3d:8c:66:10:56:10:d1:0c:82:0d:6f:57:35: 4e:aa:e3:57:9e:53:ae:80:e4:c8:e1:7e:b9:3f:7b: 3a:55:3c:07:17:db:97:17:aa:09:b1:48:2b:10:53: 19:27:17:79:be:fa:98:82:4b:64:62:cb:f9:18:ef: 69:d5:b9:7e:20:ff:f5:f1:79:15:01:6b:95:5b:aa: d7:07:f1:02:e9:7a:5f:6b:9f:1f:7b:36:dd:7c:63: fc:a0:55:82:d2:6f:8a:70:24:fa:04:32:b7:6e:4e: 8c:72:42:6f:83:06:e2:51:b8:9a:aa:fc:46:e8:22: 3e:8f:fb:b3:53:88:88:5b:f8:71:0f:cf:3b:6a:46: 87:ba:81:60:f8:60:d8:58:a7:3c:db:72:7f:02:74: b0:dd:7c:ed:cb:db:d1:b8:69:51:8a:e1:bb:c0:ae: d6:5b:97:48:61:1b:88:97:3d:83:20:90:2d:2a:89: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:B5:A6:59:07:66:F1:18:DC:FA:CE:63:FA:12:B7:B9:FB:4A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/cecd7a26-37f7-391f-988a-77a64e655f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl X509v3 Authority Key Identifier: keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer sbgp-ipAddrBlock: critical IPv6: 2604:4c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0c:83:df:56:6d:97:75:03:32:36:88:38:7e:59:fe:c4:4c: 9a:91:9f:d9:ce:b8:88:ad:3c:a7:63:75:4f:4d:88:f5:f2:ca: 35:cb:8c:7a:1a:e8:3e:12:81:f1:45:ff:39:0a:ff:68:30:6e: bd:ec:a8:77:e4:d7:b2:d5:2b:41:b8:d5:2b:8e:29:17:57:a2: bf:d8:d1:57:8b:44:1e:a0:64:b1:45:68:a2:24:21:db:b7:c5: 4f:d4:48:50:fd:f7:c7:a9:4d:a1:d5:89:a6:6b:69:3b:00:5f: 70:32:0d:a7:4f:ce:08:0e:7a:6f:2e:1b:6d:f6:9e:aa:30:07: 36:a5:27:e4:c3:cc:99:a7:14:25:51:4d:f8:6c:c8:51:ae:78: f4:91:67:c1:fa:2b:db:21:8e:71:0a:9a:46:5c:e6:5e:4a:64: 61:c8:3b:41:32:97:fb:c8:00:20:ad:f0:ef:e5:ff:60:fa:28: a2:16:22:7a:03:63:ec:80:cd:2c:9a:eb:d3:8b:96:b5:1b:d8: c2:7d:f7:ce:f5:e0:2e:5d:4a:75:d2:1e:a0:70:ce:e2:13:70: 49:bd:2c:e2:3b:16:2f:01:47:4e:d1:60:5f:e1:ab:4d:b6:0c: 79:86:1a:aa:43:94:54:30:03:00:ff:50:2a:39:6e:37:d2:d6: 0d:4c:2f:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc87iR7k4TV/K2DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNiNmJmMDctNGUwMC00NDRlLWE0MDQtZDMxNzRmYTk0 Y2U4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjAwMDYzYjUtZjQ5Zi00YjgwLWEzZjItMGI3NjU5ODcyMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxsGa1K0phwyfJbsEDsqY5YexwonDBYFYDwf U5NpJjcRDWs7G8j8hnINmcFUFLhd8pIvd60M1gpWI44oo7iJ/76Hcz4bpxDX4euz yD2MZhBWENEMgg1vVzVOquNXnlOugOTI4X65P3s6VTwHF9uXF6oJsUgrEFMZJxd5 vvqYgktkYsv5GO9p1bl+IP/18XkVAWuVW6rXB/EC6Xpfa58fezbdfGP8oFWC0m+K cCT6BDK3bk6MckJvgwbiUbiaqvxG6CI+j/uzU4iIW/hxD887akaHuoFg+GDYWKc8 23J/AnSw3Xzty9vRuGlRiuG7wK7WW5dIYRuIlz2DIJAtKokNRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGB8taZZB2bxGNz6zmP6Ere5+0paMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82Y2I2 YmYwNy00ZTAwLTQ0NGUtYTQwNC1kMzE3NGZhOTRjZTgvY2VjZDdhMjYtMzdmNy0z OTFmLTk4OGEtNzdhNjRlNjU1ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmNiNmJmMDctNGUwMC00NDRlLWE0 MDQtZDMxNzRmYTk0Y2U4LzZjYjZiZjA3LTRlMDAtNDQ0ZS1hNDA0LWQzMTc0ZmE5 NGNlOC5jcmwwHwYDVR0jBBgwFoAUGC1u+/j4cCWk67xvroSUFGJ7WG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82Y2I2YmYwNy00ZTAwLTQ0NGUtYTQwNC1kMzE3 NGZhOTRjZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFDIPfVm2XdQMyNog4fln+xEyakZ/ZzriIrTynY3VPTYj18so1y4x6 Gug+EoHxRf85Cv9oMG697Kh35Ney1StBuNUrjikXV6K/2NFXi0QeoGSxRWiiJCHb t8VP1EhQ/ffHqU2h1Ymma2k7AF9wMg2nT84IDnpvLhtt9p6qMAc2pSfkw8yZpxQl UU34bMhRrnj0kWfB+ivbIY5xCppGXOZeSmRhyDtBMpf7yAAgrfDv5f9g+iiiFiJ6 A2PsgM0smuvTi5a1G9jCfffO9eAuXUp10h6gcM7iE3BJvSziOxYvAUdO0WBf4atN tgx5hhqqQ5RUMAMA/1AqOW430tYNTC84 -----END CERTIFICATE-----Generated at Fri Sep 25 08:55:38 2026 by rpki-client