$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa File: 1f98d05a-221a-3e67-a811-957ae99c4b9f.roa (raw, json) Hash identifier: B3elTEMjYX22YR1qpwbXd2vqMxzhdLRjhSJ+ltdFfs0= Subject key identifier: 4C:C5:D3:90:E4:C5:6B:FA:80:86:2F:66:B8:B2:F7:60:30:12:41:E9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF664850F27A6A66C05B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:66:48:50:f2:7a:6a:66:c0:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3a4af7bc-c69a-4292-bd7c-4e0dbbbd54d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:9c:20:17:9c:5f:94:30:82:6a:62:7a:9e: fe:c2:ad:57:6a:e2:f6:98:eb:44:f5:14:b1:c3:ac: d7:f7:02:66:5f:e6:ab:e5:dd:11:04:46:1b:c7:c6: 4e:a7:1e:70:58:cf:e7:c7:87:98:d2:c3:f7:94:15: c8:1b:47:40:bc:93:06:25:c5:27:a8:af:d4:db:50: 1c:56:b5:04:86:7b:fa:e0:b9:80:18:92:d8:3b:8a: e6:f0:76:91:02:f5:81:10:e3:aa:c4:ea:46:df:e3: 3b:05:b5:36:e6:a3:58:cc:fe:c0:9b:df:4d:44:64: 2c:0d:a0:a5:f8:b2:ff:8b:75:37:2e:91:a4:90:6f: d0:9e:72:60:fa:34:26:14:f4:b4:90:05:e2:40:01: 7a:98:b5:e9:4f:91:a3:4a:0d:c3:40:31:3d:44:42: 00:15:a6:64:05:50:47:da:16:2e:a9:72:4b:0b:b8: a2:64:dd:e1:f5:d0:ae:b0:bd:dd:5a:09:f4:29:f9: 08:7e:a6:aa:36:2c:e0:c0:64:9d:9a:24:cb:34:6c: 2b:ab:1d:94:93:5d:f5:2d:9a:c3:fb:b4:ae:16:8d: 58:97:14:83:65:6a:96:49:f8:81:50:2e:39:58:b9: 70:16:64:38:7b:ea:f0:0c:a1:28:9c:9b:94:0e:5f: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C5:D3:90:E4:C5:6B:FA:80:86:2F:66:B8:B2:F7:60:30:12:41:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:11:42:9d:97:d4:d3:cc:29:73:36:48:93:78:fa:38:66:9e: 05:6f:2c:da:5a:62:e7:9f:fe:78:26:89:db:13:d6:1c:11:d9: a9:a1:c1:95:ad:23:33:46:55:4e:d5:66:46:06:1a:ae:11:67: 38:63:4e:10:c9:0f:c3:67:f0:49:db:9f:c9:f2:a3:18:0c:99: ba:30:cc:f7:e4:ab:1d:6c:a0:f4:5a:36:bc:ff:e7:df:52:d6: ad:bf:cf:0d:ae:c1:4a:de:8b:f8:a1:a4:82:fb:a6:24:47:4d: 66:95:60:d8:29:16:bc:ca:e9:c1:ce:c1:d6:4f:84:49:20:23: 24:e4:bc:a6:77:6f:7b:94:2e:18:7c:97:ff:8e:aa:66:f0:ca: b7:3e:fb:5a:4e:58:12:1b:95:c0:c3:77:51:f7:a0:a1:dc:e7: 59:81:0b:5c:99:c4:76:3b:b9:eb:83:c4:48:21:62:a1:11:a7: ed:fd:c8:21:85:0f:53:f7:ac:b6:44:92:4a:bd:3a:4a:f6:6e: 68:59:9b:79:f0:14:74:55:03:e0:a0:4a:71:82:ed:d2:80:ce: 45:b2:5e:45:83:01:91:de:7a:7a:03:10:5e:ae:b2:4b:9a:ff: 83:cd:db:f2:6c:d9:74:56:33:3a:99:ec:1a:49:ec:85:db:4e: ad:b7:2a:55 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k32ZIUPJ6ambAW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2E0YWY3YmMtYzY5YS00MjkyLWJkN2MtNGUwZGJiYmQ1NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRGcIBecX5Qwgmpiep7+wq1XauL2mOtE9RSx w6zX9wJmX+ar5d0RBEYbx8ZOpx5wWM/nx4eY0sP3lBXIG0dAvJMGJcUnqK/U21Ac VrUEhnv64LmAGJLYO4rm8HaRAvWBEOOqxOpG3+M7BbU25qNYzP7Am99NRGQsDaCl +LL/i3U3LpGkkG/QnnJg+jQmFPS0kAXiQAF6mLXpT5GjSg3DQDE9REIAFaZkBVBH 2hYuqXJLC7iiZN3h9dCusL3dWgn0KfkIfqaqNizgwGSdmiTLNGwrqx2Uk131LZrD +7SuFo1YlxSDZWqWSfiBUC45WLlwFmQ4e+rwDKEonJuUDl/GIQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEzF05DkxWv6gIYvZriy92AwEkHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWY5OGQwNWEtMjIxYS0z ZTY3LWE4MTEtOTU3YWU5OWM0YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAxFCnZfU08wpczZIk3j6OGaeBW8s2lpi55/+eCaJ2xPWHBHZqaHB la0jM0ZVTtVmRgYarhFnOGNOEMkPw2fwSdufyfKjGAyZujDM9+SrHWyg9Fo2vP/n 31LWrb/PDa7BSt6L+KGkgvumJEdNZpVg2CkWvMrpwc7B1k+ESSAjJOS8pndve5Qu GHyX/46qZvDKtz77Wk5YEhuVwMN3UfegodznWYELXJnEdju564PESCFioRGn7f3I IYUPU/estkSSSr06SvZuaFmbefAUdFUD4KBKcYLt0oDORbJeRYMBkd56egMQXq6y S5r/g83b8mzZdFYzOpnsGknshdtOrbcqVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:35 2026 by rpki-client