$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa File: 01015e5b-5218-36c9-83ed-4ce6023e4861.roa (raw, json) Hash identifier: +IPlCrNnqx5fmgHGloCM4x0Yk2dm9i2OOv60ZvEqKnU= Subject key identifier: 15:06:40:E6:6A:DC:D3:60:3B:B9:9D:F9:18:DF:13:AD:D0:D3:34:2D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E10C93BA840FA9726E29C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0c:93:ba:84:0f:a9:72:6e:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cd8f3b6b-6d58-4d45-ac40-99aa5dd1e045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b6:d5:6f:ee:ad:c7:39:1f:e5:da:ae:09:e1: fa:5c:36:53:40:21:9f:ae:e4:15:7c:9a:87:4c:47: 75:99:65:e7:ef:69:91:be:49:dc:fe:c4:c2:5f:75: e6:97:25:b4:cf:8b:6d:32:3a:c4:82:4c:4a:4b:49: 68:20:e7:30:3f:7a:49:a8:cd:f1:a7:b3:89:3b:47: f0:34:62:78:72:42:02:69:75:f5:e0:43:68:04:24: eb:c3:da:cb:88:59:d1:34:be:e7:ec:ea:c0:3f:98: 80:a8:a9:72:11:c0:17:7b:d0:ca:80:8d:b7:36:b8: c1:5e:76:ed:9a:90:cf:45:57:5e:20:63:a0:28:26: 76:89:10:cd:fb:84:42:f6:16:78:07:60:1a:6e:0b: 7f:43:79:15:62:08:e5:cb:ec:2b:5b:ef:44:5c:53: 72:f2:c2:00:1d:7a:bc:ac:ba:b6:2a:95:40:0e:db: 94:35:d8:4b:ad:90:f4:b7:f0:f6:ec:d5:53:0d:57: c1:ca:d1:28:b8:9d:82:db:da:70:55:da:00:66:1c: bf:85:17:6f:18:21:47:90:c4:3e:5f:bb:21:50:e0: e3:5c:5b:7d:48:63:44:49:a7:48:2d:bb:0b:f0:ee: d0:c5:9f:8b:27:b4:ca:1f:01:63:39:79:57:13:9b: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:40:E6:6A:DC:D3:60:3B:B9:9D:F9:18:DF:13:AD:D0:D3:34:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:5d:d6:18:99:10:b3:4e:89:de:9b:5a:c3:5e:14:0d:30: 24:d7:bd:bc:d5:ed:47:72:70:d4:a7:50:34:6f:a2:46:07:1b: 8a:64:7b:10:dd:e3:91:3f:38:81:95:ab:07:25:af:3a:b9:29: c3:9c:ab:a4:0b:42:1d:e0:f8:21:3e:b7:13:41:0d:ae:a2:f3: 1d:a6:b2:47:c6:db:eb:ad:3c:25:a4:b2:1f:ea:4c:6e:34:d5: f4:12:a9:0d:49:d7:f1:14:f1:f6:7c:c7:70:66:21:bc:9f:a1: 72:9a:50:21:01:38:d8:67:7b:bf:34:2e:1c:81:8e:6b:da:8d: 33:c8:26:a2:c3:8b:2c:e5:de:96:27:80:84:25:e9:4c:dc:77: b0:22:af:9d:71:8d:99:9c:10:f6:c7:13:ac:10:f4:53:83:db: 43:9d:9c:8c:bc:30:d1:48:be:ab:d6:69:f1:93:53:0e:ff:35: 0a:70:c6:a5:2b:e4:bf:4f:bf:7d:06:cd:8a:28:2a:74:2b:ef: 2d:74:7e:1c:e1:ae:a1:9c:b7:cf:70:1b:33:c9:f9:06:22:22: dd:07:39:7e:30:e5:87:58:f8:1c:fe:7a:d6:21:e8:0a:ae:c9: cd:3d:e5:d5:e3:d9:65:4b:6d:7a:d3:62:d6:68:85:12:a9:79: 47:62:17:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4QyTuoQPqXJuKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2Q4ZjNiNmItNmQ1OC00ZDQ1LWFjNDAtOTlhYTVkZDFlMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbbVb+6txzkf5dquCeH6XDZTQCGfruQVfJqH TEd1mWXn72mRvknc/sTCX3XmlyW0z4ttMjrEgkxKS0loIOcwP3pJqM3xp7OJO0fw NGJ4ckICaXX14ENoBCTrw9rLiFnRNL7n7OrAP5iAqKlyEcAXe9DKgI23NrjBXnbt mpDPRVdeIGOgKCZ2iRDN+4RC9hZ4B2Aabgt/Q3kVYgjly+wrW+9EXFNy8sIAHXq8 rLq2KpVADtuUNdhLrZD0t/D27NVTDVfBytEouJ2C29pwVdoAZhy/hRdvGCFHkMQ+ X7shUODjXFt9SGNESadILbsL8O7QxZ+LJ7TKHwFjOXlXE5v8lQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBUGQOZq3NNgO7md+RjfE63Q0zQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDEwMTVlNWItNTIxOC0z NmM5LTgzZWQtNGNlNjAyM2U0ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiaQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALUxd1hiZELNOid6bWsNeFA0wJNe9vNXtR3Jw1KdQNG+iRgcbimR7 EN3jkT84gZWrByWvOrkpw5yrpAtCHeD4IT63E0ENrqLzHaayR8bb6608JaSyH+pM bjTV9BKpDUnX8RTx9nzHcGYhvJ+hcppQIQE42Gd7vzQuHIGOa9qNM8gmosOLLOXe lieAhCXpTNx3sCKvnXGNmZwQ9scTrBD0U4PbQ52cjLww0Ui+q9Zp8ZNTDv81CnDG pSvkv0+/fQbNiigqdCvvLXR+HOGuoZy3z3AbM8n5BiIi3Qc5fjDlh1j4HP561iHo Cq7JzT3l1ePZZUttetNi1miFEql5R2IXMA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:39 2026 by rpki-client