$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa File: 9d23743a-b916-3509-ac6e-63615d63d932.roa (raw, json) Hash identifier: 42QXkIFEx/HUK8ipuR1aXur2Uhjb7TxxtfaQzc/NO24= Subject key identifier: 1D:22:62:43:2A:6B:4C:E7:79:7D:CF:B0:69:1A:50:5F:5F:4C:08:E3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA79CEF37C07D6010E08D4288 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8d:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:ef:37:c0:7d:60:10:e0:8d:42:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ddcb1b00-eddf-4796-ac63-5cee31b6d737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:5f:d4:71:2c:c4:4b:0b:00:ae:81:07:d0: b9:ff:06:23:8d:51:b6:9b:70:c1:a8:6c:6f:c1:0f: ab:63:1c:9f:66:c5:73:d1:3f:52:1d:1a:0b:ff:6c: c8:3e:b6:d8:a9:33:00:60:86:cd:a8:ad:4c:ea:0b: 56:01:71:42:c8:50:3a:65:6c:93:45:d4:d5:ab:3e: af:db:85:19:9b:92:6f:95:af:de:57:0e:47:bd:d9: d4:97:de:e6:cf:cd:59:65:d4:9c:ef:83:71:26:e4: 1d:44:f2:29:6b:f2:36:a2:5b:fb:ec:f8:ea:0e:d3: ab:21:d2:a6:a1:da:bd:fa:63:fb:58:fb:68:8d:f2: 2f:60:ae:01:7c:be:10:1d:0e:d3:79:d1:e8:6e:58: 93:d9:fe:a9:7d:51:6a:99:df:c4:84:66:72:82:20: 18:b7:d6:50:1e:21:ee:c4:11:41:1d:83:81:aa:7d: 78:ff:89:4b:9c:9d:73:8e:99:77:2a:6f:df:87:e3: e8:d7:f4:a2:03:95:90:d7:f8:ae:d7:99:c7:81:af: 6f:85:3a:a9:a7:fa:a8:1f:aa:6d:40:b4:ee:6c:be: a8:d7:37:b7:1b:ce:bb:bf:a9:b1:c1:af:08:23:df: f5:75:c2:18:21:e9:58:82:b2:d1:0b:c1:09:81:d1: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:22:62:43:2A:6B:4C:E7:79:7D:CF:B0:69:1A:50:5F:5F:4C:08:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d23743a-b916-3509-ac6e-63615d63d932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6c:f4:a0:f0:b5:0e:e1:58:cb:79:33:09:a6:fd:61:d5:33: bd:82:df:33:06:db:1f:57:a2:7f:04:a7:61:1d:e2:6f:6a:9f: f1:7c:7a:77:c4:f0:73:41:17:47:3a:29:22:d7:77:c4:e5:20: 6f:85:75:48:7f:eb:9b:5d:f1:61:b0:5e:3c:ad:37:e8:13:93: 2c:ee:77:ac:f8:26:0c:20:5a:38:64:bc:b6:0f:4f:d7:06:9a: 47:09:0f:de:a1:1d:4e:3c:d3:23:58:1e:fe:be:2f:9d:54:2f: d1:30:ba:6d:29:13:a3:26:9d:12:32:61:51:48:8a:ae:cc:21: 09:18:02:01:c0:60:e1:14:0a:e0:74:9b:59:05:d3:61:75:2f: a2:ce:7a:8a:a5:44:42:83:29:aa:79:59:15:7d:5c:66:e5:26: 2d:32:0b:c8:4b:10:5f:c1:78:17:d8:ab:07:df:91:e0:eb:00: ac:d1:f9:7a:10:43:e8:94:e0:83:ad:ed:72:c0:2f:15:e0:6d: 1b:54:2c:82:d8:44:46:cd:0e:f4:0f:33:68:bd:1a:2b:36:84: f4:aa:64:f6:45:0c:62:6a:1d:a3:a2:db:d5:a0:3a:27:4a:36: 78:54:0c:34:6d:03:26:c3:46:1e:84:ae:40:16:d0:93:7d:cc: fb:c3:4c:42 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nnO83wH1gEOCNQogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGRjYjFiMDAtZWRkZi00Nzk2LWFjNjMtNWNlZTMxYjZkNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7tf1HEsxEsLAK6BB9C5/wYjjVG2m3DBqGxv wQ+rYxyfZsVz0T9SHRoL/2zIPrbYqTMAYIbNqK1M6gtWAXFCyFA6ZWyTRdTVqz6v 24UZm5Jvla/eVw5HvdnUl97mz81ZZdSc74NxJuQdRPIpa/I2olv77PjqDtOrIdKm odq9+mP7WPtojfIvYK4BfL4QHQ7TedHobliT2f6pfVFqmd/EhGZygiAYt9ZQHiHu xBFBHYOBqn14/4lLnJ1zjpl3Km/fh+Po1/SiA5WQ1/iu15nHga9vhTqpp/qoH6pt QLTubL6o1ze3G867v6mxwa8II9/1dcIYIelYgrLRC8EJgdFQKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB0iYkMqa0zneX3PsGkaUF9fTAjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWQyMzc0M2EtYjkxNi0z NTA5LWFjNmUtNjM2MTVkNjNkOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANmz0oPC1DuFYy3kzCab9YdUzvYLfMwbbH1eifwSnYR3ib2qf8Xx6 d8Twc0EXRzopItd3xOUgb4V1SH/rm13xYbBePK036BOTLO53rPgmDCBaOGS8tg9P 1waaRwkP3qEdTjzTI1ge/r4vnVQv0TC6bSkToyadEjJhUUiKrswhCRgCAcBg4RQK 4HSbWQXTYXUvos56iqVEQoMpqnlZFX1cZuUmLTILyEsQX8F4F9irB9+R4OsArNH5 ehBD6JTgg63tcsAvFeBtG1QsgthERs0O9A8zaL0aKzaE9Kpk9kUMYmodo6Lb1aA6 J0o2eFQMNG0DJsNGHoSuQBbQk33M+8NMQg== -----END CERTIFICATE-----Generated at Fri Aug 21 01:49:02 2026 by rpki-client