$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa File: 0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa (raw, json) Hash identifier: fzanyTm4VjCp9krMPAvzEc0orrFT0WUkvcH6wEWB1sc= Subject key identifier: 85:E3:14:32:F8:BE:0E:CA:65:71:4C:A3:F1:2B:A1:4F:F8:6B:DD:D4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF9161AD884395517AD700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:91:61:ad:88:43:95:51:7a:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=656d5947-885e-4e25-a31e-441449cbf81c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1f:a0:2d:33:0b:a4:0b:ce:96:ea:60:57:3f: 5f:26:bc:23:60:74:1e:10:93:13:25:5f:01:c0:d3: 96:f4:cb:d3:9b:cb:34:c6:e0:dd:b7:8b:13:e3:8c: b5:66:8d:b4:f5:17:b3:1f:3c:ce:5f:f0:8e:dc:92: c1:cd:71:e9:82:13:bb:07:c5:5f:26:b2:6a:ef:66: 5f:23:bf:c2:0f:d2:98:7e:06:b8:73:ee:71:22:ff: 2b:68:8a:a5:0c:e8:6d:d4:a8:9a:21:3a:d4:81:29: c0:c0:35:f6:5b:b7:cf:6b:be:81:01:29:08:32:62: c6:4f:5c:43:ae:a6:a1:23:e1:46:b6:a1:34:02:92: 37:17:af:da:d5:c4:ae:7d:6f:10:f6:68:1e:2b:59: 6a:c1:02:bb:6b:a9:a3:d1:d5:50:e2:a3:20:e3:a1: e8:27:53:30:5e:31:c4:60:97:66:c2:08:89:28:cf: e6:38:83:3f:09:b7:fe:1d:62:da:49:ad:6f:07:76: 2d:e6:2b:cd:91:e9:94:44:3e:d4:56:5d:e1:6e:a7: be:5a:ba:e0:62:1b:83:06:dc:1b:5f:c9:03:02:68: 13:8e:fb:11:f4:64:ef:e4:3b:78:37:cd:93:c3:12: 09:89:2d:1e:d7:f0:92:b4:e1:86:2b:03:1a:9a:3c: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:14:32:F8:BE:0E:CA:65:71:4C:A3:F1:2B:A1:4F:F8:6B:DD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f7884a6-ed57-3fce-b2c0-5d8c64e4a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8f:9f:e2:fa:ca:4d:49:3d:a5:0a:b8:91:00:ed:e5:d7:82: 0f:61:dd:fd:dd:de:eb:95:eb:57:fd:7b:35:df:4b:ee:ba:3f: 4e:d6:83:63:07:c9:1d:39:61:30:9a:05:0c:f4:19:87:18:91: e7:8b:f0:63:c6:aa:c2:89:eb:03:8f:10:32:15:f4:70:b6:69: af:28:d2:2b:e1:55:f3:da:7b:74:c3:ad:14:f3:e4:28:1c:2c: 61:f0:87:19:97:0d:a0:c4:ed:03:77:db:0b:31:f3:ee:a4:3a: 48:39:21:90:a6:5e:2f:69:18:3a:8a:bd:47:05:38:f1:3a:bd: 1f:ca:65:0a:d8:aa:85:8f:3a:63:79:7d:3a:98:63:01:7c:48: 66:1e:f2:4d:40:96:a4:53:32:bf:7f:ba:3f:2e:b2:92:99:41: fe:24:4f:fe:e2:86:89:51:5f:1f:07:c5:03:f9:af:61:ad:d5: 19:96:fd:85:92:f7:65:0a:a4:46:f0:c6:fa:38:3a:c5:2c:e9: 60:c7:b1:99:35:55:fe:43:fd:99:7a:de:18:f4:e4:7b:12:74: d2:51:c4:e1:5d:35:f9:5f:78:ce:eb:1b:82:3f:11:51:d0:8a: 11:ad:e7:7c:48:e4:b9:74:e8:57:6d:be:ae:a6:8f:f2:77:68: 56:f3:e2:90 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k35FhrYhDlVF61wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjU2ZDU5NDctODg1ZS00ZTI1LWEzMWUtNDQxNDQ5Y2JmODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh+gLTMLpAvOlupgVz9fJrwjYHQeEJMTJV8B wNOW9MvTm8s0xuDdt4sT44y1Zo209RezHzzOX/CO3JLBzXHpghO7B8VfJrJq72Zf I7/CD9KYfga4c+5xIv8raIqlDOht1KiaITrUgSnAwDX2W7fPa76BASkIMmLGT1xD rqahI+FGtqE0ApI3F6/a1cSufW8Q9mgeK1lqwQK7a6mj0dVQ4qMg46HoJ1MwXjHE YJdmwgiJKM/mOIM/Cbf+HWLaSa1vB3Yt5ivNkemURD7UVl3hbqe+WrrgYhuDBtwb X8kDAmgTjvsR9GTv5Dt4N82TwxIJiS0e1/CStOGGKwMamjwkPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIXjFDL4vg7KZXFMo/EroU/4a93UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3ODg0YTYtZWQ1Ny0z ZmNlLWIyYzAtNWQ4YzY0ZTRhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiiQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjo+f4vrKTUk9pQq4kQDt5deCD2Hd/d3e65XrV/17Nd9L7ro/TtaD YwfJHTlhMJoFDPQZhxiR54vwY8aqwonrA48QMhX0cLZpryjSK+FV89p7dMOtFPPk KBwsYfCHGZcNoMTtA3fbCzHz7qQ6SDkhkKZeL2kYOoq9RwU48Tq9H8plCtiqhY86 Y3l9OphjAXxIZh7yTUCWpFMyv3+6Py6ykplB/iRP/uKGiVFfHwfFA/mvYa3VGZb9 hZL3ZQqkRvDG+jg6xSzpYMexmTVV/kP9mXreGPTkexJ00lHE4V01+V94zusbgj8R UdCKEa3nfEjkuXToV22+rqaP8ndoVvPikA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:38:09 2026 by rpki-client