$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa File: 3d5a4791-0867-39ae-aad3-f703055da2e1.roa (raw, json) Hash identifier: So3t5Jq4DnTN3CzGuHWEPDZEI7pNWefQv7EW5k4g14c= Subject key identifier: 78:92:E3:01:86:AD:10:48:55:FC:09:F4:E7:84:44:03:E8:5D:57:74 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA79C1B5F6E927A2D97F76B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8c:5400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:1b:5f:6e:92:7a:2d:97:f7:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=86bd0dad-fa96-42f4-a467-8dc1fa813c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:a7:34:36:09:49:48:87:9e:f1:7f:7d:04: b7:72:20:e5:94:32:98:2a:ab:4c:6d:18:b4:c7:2e: 5c:02:72:62:b1:8a:05:76:00:ec:72:46:30:79:3c: 15:09:51:5c:2a:d5:5e:2a:8e:f6:6b:4e:35:f8:a1: 94:cb:d7:1b:4f:6a:e3:b3:54:a0:e8:a1:fc:dd:73: ea:8e:3b:70:5f:67:a3:fa:97:c8:30:1b:ec:7f:c8: 08:0b:a1:32:27:26:f0:6b:df:f3:42:75:f7:1d:85: 90:b9:10:1c:c9:fb:75:24:42:86:87:98:08:7c:b4: 37:fc:9e:f1:54:1d:e5:a8:f9:72:85:bf:6f:43:aa: e8:6e:1c:a7:73:47:a0:15:63:8c:34:1c:00:e2:61: 44:7b:ad:ac:19:c9:08:1b:4b:a3:6f:d2:12:3b:85: 0a:ba:4c:69:16:18:3f:f0:ef:02:9d:17:d0:2e:30: cd:34:00:b8:00:46:39:ac:8e:d5:e3:12:49:be:68: c7:52:d2:f2:b6:1a:5a:e2:18:3e:10:9b:2d:15:44: 8c:32:e1:75:7d:88:07:8c:e8:72:16:6c:63:aa:24: ff:e2:80:80:ab:ce:21:cb:7e:d5:28:c2:aa:b2:99: b9:4c:22:2e:0d:6d:a8:e1:4b:1a:a1:b3:42:91:e1: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:92:E3:01:86:AD:10:48:55:FC:09:F4:E7:84:44:03:E8:5D:57:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3d5a4791-0867-39ae-aad3-f703055da2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:5400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fa:11:2a:11:1e:7e:c1:c7:6c:49:eb:7c:12:e4:2e:bd:4d: 78:1b:ea:79:44:25:8b:d6:68:2d:ad:bf:86:b8:7e:e6:8f:9e: 46:cc:30:6e:3f:08:92:04:6b:be:0a:3a:65:20:f4:7c:90:56: f7:1b:ec:61:89:eb:df:2d:2c:4d:f8:27:36:b5:7f:38:81:c8: 04:03:0d:e8:ec:29:71:d9:48:cc:17:6c:ab:ec:46:ea:7a:d4: 4c:c2:50:45:17:65:e5:f9:de:2f:9a:3f:56:eb:a0:85:ef:19: 3c:85:50:63:bf:e1:f8:99:a1:66:c1:23:98:6e:ce:56:1e:7c: f6:5e:80:b5:cc:de:7c:0a:2c:32:dc:6b:c0:12:ce:49:e6:6d: 9e:23:b8:4e:20:76:89:ea:3f:a6:15:cf:56:59:84:80:35:bd: 02:45:db:b2:0b:a2:f2:33:68:b1:b2:ab:61:11:67:5e:d0:b9: 66:34:94:1f:43:a6:73:f1:6e:a1:f9:2a:b9:5d:4e:d5:0f:4a: 04:7a:cf:1e:15:06:50:2f:ab:a6:69:00:a8:55:fc:b1:e0:31: f1:e8:28:68:81:90:c8:5c:99:55:bf:6c:22:be:ad:98:c6:3e: 5d:7c:17:36:4a:c4:42:24:a6:25:e1:21:f6:e0:c3:6b:95:74: 57:1e:52:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nnBtfbpJ6LZf3a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODZiZDBkYWQtZmE5Ni00MmY0LWE0NjctOGRjMWZhODEzYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEanNDYJSUiHnvF/fQS3ciDllDKYKqtMbRi0 xy5cAnJisYoFdgDsckYweTwVCVFcKtVeKo72a041+KGUy9cbT2rjs1Sg6KH83XPq jjtwX2ej+pfIMBvsf8gIC6EyJybwa9/zQnX3HYWQuRAcyft1JEKGh5gIfLQ3/J7x VB3lqPlyhb9vQ6robhync0egFWOMNBwA4mFEe62sGckIG0ujb9ISO4UKukxpFhg/ 8O8CnRfQLjDNNAC4AEY5rI7V4xJJvmjHUtLythpa4hg+EJstFUSMMuF1fYgHjOhy FmxjqiT/4oCAq84hy37VKMKqspm5TCIuDW2o4UsaobNCkeF6UwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHiS4wGGrRBIVfwJ9OeERAPoXVd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Q1YTQ3OTEtMDg2Ny0z OWFlLWFhZDMtZjcwMzA1NWRhMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujFQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJvoRKhEefsHHbEnrfBLkLr1NeBvqeUQli9ZoLa2/hrh+5o+eRsww bj8IkgRrvgo6ZSD0fJBW9xvsYYnr3y0sTfgnNrV/OIHIBAMN6OwpcdlIzBdsq+xG 6nrUTMJQRRdl5fneL5o/Vuughe8ZPIVQY7/h+JmhZsEjmG7OVh589l6AtczefAos MtxrwBLOSeZtniO4TiB2ieo/phXPVlmEgDW9AkXbsgui8jNosbKrYRFnXtC5ZjSU H0Omc/FuofkquV1O1Q9KBHrPHhUGUC+rpmkAqFX8seAx8egoaIGQyFyZVb9sIr6t mMY+XXwXNkrEQiSmJeEh9uDDa5V0Vx5SgQ== -----END CERTIFICATE-----Generated at Fri Aug 21 01:48:34 2026 by rpki-client