$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0dc83284-3518-31d5-b349-7056ad176208.roa File: 0dc83284-3518-31d5-b349-7056ad176208.roa (raw, json) Hash identifier: 0XJ2vjF6Tjvu7Ra50LlmmLiUfeSB8GT7wrWv1Ia5lqs= Subject key identifier: D5:6A:5B:80:06:66:77:D1:82:67:5E:77:31:02:0B:9F:7B:2E:02:C3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF7F6F6862069CF8E3B580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0dc83284-3518-31d5-b349-7056ad176208.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:6400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7f:6f:68:62:06:9c:f8:e3:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f3148c99-3c2f-4a9f-8205-b2ac2fb81bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:21:a4:92:77:13:5e:b5:e6:44:bd:9c:02: a8:ae:97:a8:7b:fd:64:fb:b8:00:db:92:b8:0d:0a: 0c:7b:5c:5c:d4:00:78:65:87:42:20:a2:c3:40:e1: 6d:6c:7f:b1:52:22:9c:24:d3:d0:2d:6b:37:78:92: ac:f6:ee:05:6d:7a:c8:cb:6c:6f:ad:7e:eb:ac:52: d1:04:a0:ce:80:fd:2f:f6:01:75:53:51:5d:7e:1b: 1a:18:cc:ee:07:71:51:a6:06:88:c8:ff:1e:43:35: 76:a5:fc:88:64:e1:b0:4c:31:15:8c:57:bb:4a:3f: 03:a4:89:5f:a4:dd:7d:43:5c:46:11:d0:3b:2f:5d: 25:07:4b:54:95:db:25:15:d8:6c:43:19:b3:51:06: 72:6e:34:c1:a8:6c:a7:6c:ba:f4:4f:09:62:ad:8f: e9:69:4a:98:d4:15:8d:54:61:13:0c:e0:5a:ee:68: 8b:d5:11:52:be:23:57:a0:bc:a3:43:64:9e:0e:cd: da:fc:56:ee:60:a2:0d:53:99:10:02:f4:78:99:b9: 4e:a0:d6:c9:64:c4:67:da:c0:c8:43:5f:fc:03:1b: 04:68:c6:44:9c:17:bb:5a:9c:91:9e:b0:09:bb:2e: f8:06:54:b1:14:b5:86:be:f9:4e:bf:55:16:6a:f8: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6A:5B:80:06:66:77:D1:82:67:5E:77:31:02:0B:9F:7B:2E:02:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0dc83284-3518-31d5-b349-7056ad176208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:6400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0f:17:71:54:9d:5f:c4:9d:2f:a3:d1:5b:d0:cd:de:ee:bc: c1:45:c4:7b:77:86:95:b2:db:65:89:40:ca:84:e8:c4:30:0f: d9:76:25:8a:af:6d:81:8c:42:62:90:f4:52:d3:f4:1a:6b:01: 08:ba:6e:15:9c:73:06:29:a7:c4:e4:a4:e8:1d:84:ee:9a:81: dc:3a:8d:f5:c3:df:8e:37:6f:6e:23:75:60:0e:15:60:0e:65: 6e:b0:37:4d:40:f3:a9:6f:3a:c6:e6:d6:45:8d:3c:6a:cf:a3: 28:20:db:0b:c8:ef:48:53:ef:c7:9c:76:36:75:77:b7:c4:0d: 3b:7f:22:1f:1b:d1:ea:5a:20:5d:23:b8:c2:8e:d7:fd:a1:65: a2:b8:76:44:5c:6b:e3:f2:35:86:ba:6a:c1:03:60:9f:3d:8a: 37:37:59:0b:af:0b:92:4c:c6:bb:6c:65:48:5d:9d:b5:1a:d3: 18:1a:bf:ce:f0:fe:37:8d:cb:1d:af:2c:85:bd:7e:07:a1:97: fe:2d:7e:12:4e:41:f4:29:f1:8d:b2:18:50:73:3b:37:84:57: 99:83:45:34:58:45:60:be:fb:64:9c:8e:55:f5:7e:e9:ad:04: 6c:1c:6c:09:c0:ce:66:f1:22:00:9e:1c:4b:c9:b9:db:67:19: ba:74:09:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k339vaGIGnPjjtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjMxNDhjOTktM2MyZi00YTlmLTgyMDUtYjJhYzJmYjgxYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc4hpJJ3E1615kS9nAKorpeoe/1k+7gA25K4 DQoMe1xc1AB4ZYdCIKLDQOFtbH+xUiKcJNPQLWs3eJKs9u4FbXrIy2xvrX7rrFLR BKDOgP0v9gF1U1FdfhsaGMzuB3FRpgaIyP8eQzV2pfyIZOGwTDEVjFe7Sj8DpIlf pN19Q1xGEdA7L10lB0tUldslFdhsQxmzUQZybjTBqGynbLr0TwlirY/paUqY1BWN VGETDOBa7miL1RFSviNXoLyjQ2SeDs3a/FbuYKINU5kQAvR4mblOoNbJZMRn2sDI Q1/8AxsEaMZEnBe7WpyRnrAJuy74BlSxFLWGvvlOv1UWaviuUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNVqW4AGZnfRgmdedzECC597LgLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGRjODMyODQtMzUxOC0z MWQ1LWIzNDktNzA1NmFkMTc2MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiWQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfg8XcVSdX8SdL6PRW9DN3u68wUXEe3eGlbLbZYlAyoToxDAP2XYl iq9tgYxCYpD0UtP0GmsBCLpuFZxzBimnxOSk6B2E7pqB3DqN9cPfjjdvbiN1YA4V YA5lbrA3TUDzqW86xubWRY08as+jKCDbC8jvSFPvx5x2NnV3t8QNO38iHxvR6log XSO4wo7X/aFlorh2RFxr4/I1hrpqwQNgnz2KNzdZC68LkkzGu2xlSF2dtRrTGBq/ zvD+N43LHa8shb1+B6GX/i1+Ek5B9CnxjbIYUHM7N4RXmYNFNFhFYL77ZJyOVfV+ 6a0EbBxsCcDOZvEiAJ4cS8m522cZunQJ7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:19 2026 by rpki-client