$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa File: 4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa (raw, json) Hash identifier: 6ecTOoxeQjc5Vg2Aa1d1PHRc/0/gBB9J2iknIWvTlQU= Subject key identifier: 9B:9F:58:44:CE:9F:7A:B3:DC:FB:33:7A:DC:35:1C:B7:94:10:37:2B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F77835A8EC5DFF90A80A71F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 19905 IP address blocks: 2604:2e8f:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5a:8e:c5:df:f9:0a:80:a7:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=b29d29a6-d25a-436d-9f16-cfcb50143059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c1:6e:80:97:e2:53:ec:18:67:1b:1d:bd:dd: 98:e8:cb:5a:c6:7a:1a:2c:17:6d:15:97:4d:23:79: 80:5d:b2:0d:17:12:68:2b:51:37:4c:35:ef:ce:35: ba:7e:b3:03:b6:51:30:eb:d3:f1:3b:2b:f6:22:fc: 3f:45:ec:c1:32:55:f6:f1:98:91:7e:19:31:73:9c: 41:46:aa:17:06:4f:92:7f:81:72:12:72:bb:ca:39: ab:57:55:1d:e2:59:35:63:b0:66:f5:2b:39:d8:c3: ba:b6:2f:5b:ac:07:77:f0:62:fc:e2:97:68:1a:79: 08:a5:de:e7:55:26:c1:1a:c5:06:2d:cd:6a:f4:8e: 18:5e:83:80:58:c9:57:10:e9:6c:c7:38:19:26:3f: 5b:c2:93:dd:b6:84:80:24:08:4e:c0:e2:36:a1:5f: d3:f6:93:11:48:6e:6c:5d:a1:7f:44:7a:63:dc:f8: 1a:76:08:90:92:10:ca:ba:79:88:ef:9f:fd:0f:1c: 4b:33:df:fa:8d:da:bf:c0:42:a2:53:ac:9b:b7:1a: 5e:6f:ef:59:6d:1e:e2:5a:81:21:46:42:9b:72:ea: 5f:e3:6e:5c:3e:8e:30:3b:87:25:46:48:d5:44:77: 81:bd:69:89:0b:69:99:cd:5c:af:94:6d:18:5f:1e: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9F:58:44:CE:9F:7A:B3:DC:FB:33:7A:DC:35:1C:B7:94:10:37:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4216739c-0ce2-36fb-9c7f-da83acbe7c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:bf:bc:10:19:89:7b:b3:29:4a:be:23:b8:36:36:53:3f:94: 3b:e2:3e:5a:59:cc:76:05:69:a9:a8:85:e3:35:1e:85:0f:93: c8:7c:25:bd:aa:8d:1f:4d:bf:a9:59:97:9f:8e:37:13:05:dd: 85:09:9c:a5:eb:b0:e3:7e:9b:d8:0a:83:8d:e6:90:74:a8:30: b9:a3:8b:17:86:17:fe:21:c9:96:23:d9:c0:c8:25:9a:3e:00: 72:df:00:e7:50:8d:85:54:19:ee:50:58:5b:c5:91:da:3f:9b: e9:24:1d:0a:06:70:18:8f:bf:07:84:27:bd:a2:f4:41:32:3f: cc:1d:42:1f:91:08:d5:01:c0:45:14:47:ae:ad:33:f8:84:42: 83:77:f3:3e:15:b5:8b:f0:ff:a0:8c:f2:5a:64:9c:31:d5:d2: f4:c4:84:46:bd:7d:c3:8b:93:bd:6f:5f:c7:39:48:9f:e4:df: 9b:ab:d8:05:b7:02:50:2a:f6:10:aa:44:fc:59:65:fa:e5:67: 00:87:dd:01:73:8a:5e:33:0a:15:9f:21:7b:56:d6:12:2a:c8: df:82:28:0e:3c:a2:8f:f1:61:5d:b1:d5:ac:f6:2d:b5:79:2d: 26:ca:dc:c5:3b:cb:2c:5b:76:cf:74:ba:97:cd:27:2e:92:97: 85:51:7c:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE93g1qOxd/5CoCnHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YjI5ZDI5YTYtZDI1YS00MzZkLTlmMTYtY2ZjYjUwMTQzMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcFugJfiU+wYZxsdvd2Y6MtaxnoaLBdtFZdN I3mAXbINFxJoK1E3TDXvzjW6frMDtlEw69PxOyv2Ivw/RezBMlX28ZiRfhkxc5xB RqoXBk+Sf4FyEnK7yjmrV1Ud4lk1Y7Bm9Ss52MO6ti9brAd38GL84pdoGnkIpd7n VSbBGsUGLc1q9I4YXoOAWMlXEOlsxzgZJj9bwpPdtoSAJAhOwOI2oV/T9pMRSG5s XaF/RHpj3PgadgiQkhDKunmI75/9DxxLM9/6jdq/wEKiU6ybtxpeb+9ZbR7iWoEh RkKbcupf425cPo4wO4clRkjVRHeBvWmJC2mZzVyvlG0YXx6qyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJufWETOn3qz3Pszetw1HLeUEDcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDIxNjczOWMtMGNlMi0z NmZiLTljN2YtZGE4M2FjYmU3YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj/Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFb+8EBmJe7MpSr4juDY2Uz+UO+I+WlnMdgVpqaiF4zUehQ+TyHwl vaqNH02/qVmXn443EwXdhQmcpeuw436b2AqDjeaQdKgwuaOLF4YX/iHJliPZwMgl mj4Act8A51CNhVQZ7lBYW8WR2j+b6SQdCgZwGI+/B4QnvaL0QTI/zB1CH5EI1QHA RRRHrq0z+IRCg3fzPhW1i/D/oIzyWmScMdXS9MSERr19w4uTvW9fxzlIn+Tfm6vY BbcCUCr2EKpE/Fll+uVnAIfdAXOKXjMKFZ8he1bWEirI34IoDjyij/FhXbHVrPYt tXktJsrcxTvLLFt2z3S6l80nLpKXhVF8SQ== -----END CERTIFICATE-----Generated at Tue Oct 13 03:51:17 2026 by rpki-client