$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16008aa1-dfd8-3258-be8f-c984120f4f09.roa File: 16008aa1-dfd8-3258-be8f-c984120f4f09.roa (raw, json) Hash identifier: DXR4UjDweSkOiS2qoR9QYcsWJ/vLoz6VIMunyFGJFH4= Subject key identifier: CA:7E:F0:BA:D6:29:96:A8:10:3E:1F:FF:D4:3D:62:6C:CF:60:34:54 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D27AABFCB67C4255888F00380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16008aa1-dfd8-3258-be8f-c984120f4f09.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:6400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bf:cb:67:c4:25:58:88:f0:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bfb68c15-bb65-464e-8d13-4e869fb98ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:68:ac:4c:33:6c:57:c1:7b:b8:47:0c:63: 2e:dc:17:74:ba:ea:0a:c8:e4:bf:ec:b8:1f:41:29: d0:15:f2:c2:e2:80:77:8f:48:cc:f4:e7:d2:58:e0: 2f:b2:f5:d6:1e:fb:e3:52:9b:93:55:19:e7:a7:01: 73:d8:57:5f:7d:82:0c:66:ef:83:f8:4d:bb:52:c2: 63:7e:7c:83:7e:76:85:45:22:f9:c8:1c:d5:1d:57: f0:27:ff:f0:04:1d:b2:a8:fc:4d:2b:a8:9b:f7:9b: 5c:5d:89:c2:ec:40:78:1f:e5:31:d3:93:eb:b5:fe: 90:22:c6:63:0e:f1:b9:be:7c:a6:45:c0:5d:57:33: 2f:ed:5c:28:55:df:0a:38:51:92:c5:80:33:9a:2a: e2:87:a2:6a:a3:c8:70:72:35:2c:68:29:51:77:a4: c4:f9:17:4d:a9:c6:0a:59:ef:29:b3:dd:54:d5:1b: 8d:94:d7:56:d4:ef:e6:ae:85:61:14:10:97:af:ca: e5:68:0c:86:26:60:91:40:cf:6e:12:9d:3d:3f:06: 38:72:75:ca:01:32:97:0b:7d:74:4f:69:fd:f3:49: 5f:c5:72:62:96:39:f8:86:6f:b8:66:68:b3:7c:d5: e1:59:30:97:33:95:0a:4a:02:62:c6:9f:32:ac:f3: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:F0:BA:D6:29:96:A8:10:3E:1F:FF:D4:3D:62:6C:CF:60:34:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16008aa1-dfd8-3258-be8f-c984120f4f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:6400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:33:66:fa:28:19:42:40:78:10:31:9f:7e:15:30:e8:ea: 49:f6:2a:9c:2d:6f:93:20:4e:66:4a:46:4c:d3:92:27:d7:57: 6f:9b:01:be:15:30:ad:57:b9:de:a3:41:33:f5:27:f7:30:b1: d2:f6:e7:b4:78:6e:77:22:f5:cc:59:4e:2b:4b:43:8d:7b:3b: 54:5d:1c:9d:86:43:ba:33:72:40:f4:dc:cc:39:b9:5c:b4:7b: 1d:02:04:1e:89:42:ff:5e:0d:e7:c3:86:70:ff:16:48:69:7e: f0:90:da:df:34:ae:fb:a1:d7:58:17:fc:b7:d6:a0:ac:22:5a: bd:ec:b8:91:b9:d6:3f:47:f7:0e:a6:82:38:b4:95:e4:82:39: b9:b8:03:63:ef:c1:00:15:92:11:29:32:d5:49:87:96:dd:44: 7d:29:c9:e5:85:eb:e5:49:03:8c:4e:b7:49:a8:e1:14:91:52: 98:5d:db:e0:31:7f:a9:e1:91:a6:ca:d2:65:64:fa:05:15:00: 85:6d:dc:b9:0c:c1:86:1e:dc:64:6b:93:c0:b7:22:76:11:33: 15:09:9b:f2:02:87:70:b3:ad:36:b0:2d:d1:42:6b:49:91:2d: 9c:6f:8d:da:af:49:65:e5:2c:23:6b:50:66:dd:ac:c4:0e:4b: ac:f2:a0:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqr/LZ8QlWIjwA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmZiNjhjMTUtYmI2NS00NjRlLThkMTMtNGU4NjlmYjk4ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirZorEwzbFfBe7hHDGMu3Bd0uuoKyOS/7Lgf QSnQFfLC4oB3j0jM9OfSWOAvsvXWHvvjUpuTVRnnpwFz2FdffYIMZu+D+E27UsJj fnyDfnaFRSL5yBzVHVfwJ//wBB2yqPxNK6ib95tcXYnC7EB4H+Ux05Prtf6QIsZj DvG5vnymRcBdVzMv7VwoVd8KOFGSxYAzmirih6Jqo8hwcjUsaClRd6TE+RdNqcYK We8ps91U1RuNlNdW1O/mroVhFBCXr8rlaAyGJmCRQM9uEp09PwY4cnXKATKXC310 T2n980lfxXJiljn4hm+4ZmizfNXhWTCXM5UKSgJixp8yrPOAUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMp+8LrWKZaoED4f/9Q9YmzPYDRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTYwMDhhYTEtZGZkOC0z MjU4LWJlOGYtYzk4NDEyMGY0ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujGQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOpUzZvooGUJAeBAxn34VMOjqSfYqnC1vkyBOZkpGTNOSJ9dXb5sB vhUwrVe53qNBM/Un9zCx0vbntHhudyL1zFlOK0tDjXs7VF0cnYZDujNyQPTczDm5 XLR7HQIEHolC/14N58OGcP8WSGl+8JDa3zSu+6HXWBf8t9agrCJavey4kbnWP0f3 DqaCOLSV5II5ubgDY+/BABWSESky1UmHlt1EfSnJ5YXr5UkDjE63SajhFJFSmF3b 4DF/qeGRpsrSZWT6BRUAhW3cuQzBhh7cZGuTwLcidhEzFQmb8gKHcLOtNrAt0UJr SZEtnG+N2q9JZeUsI2tQZt2sxA5LrPKgZA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:15 2026 by rpki-client