$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa File: 1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa (raw, json) Hash identifier: 8OypYKzvRcTIm7pekPHXSLFXnODqKYttMr/n2OzIajY= Subject key identifier: 4C:6A:F5:60:D9:52:91:B9:AC:25:48:64:B6:B9:C6:8B:A6:63:A5:E0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E1120A5C7BB47607279680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8b:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:0a:5c:7b:b4:76:07:27:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a8437eef-9958-4927-a140-23cdff8bdf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:ad:df:5d:1a:3e:54:b2:0b:24:0b:f7:72: ac:23:b9:85:d9:88:56:8b:bc:1b:a8:bc:31:fe:f4: 72:b5:27:3a:0f:85:9a:37:85:79:b6:43:09:30:63: 62:d3:b1:f9:ac:3f:ed:00:e0:f5:ce:b4:81:97:47: b8:ea:14:b0:78:69:28:b3:38:4f:e7:3c:16:bb:20: 01:4d:c2:06:1f:c3:3a:33:e3:be:09:41:af:a4:ba: b0:10:50:7e:f8:53:0f:70:5f:b0:49:a4:0c:8f:71: 45:57:da:23:37:7c:ce:b9:01:48:83:31:c9:c9:98: c2:26:d5:ad:07:8e:00:37:37:61:63:b1:2b:df:87: f4:22:89:82:cc:16:d8:6e:46:a6:85:4f:63:77:3e: d9:57:c9:16:e5:76:99:50:b5:7b:e6:e6:b3:d1:54: 10:56:a1:a1:e4:24:72:6f:3c:6a:3f:06:64:b2:a4: 8b:ee:78:b1:33:0c:4f:53:ef:10:28:75:ee:88:01: 76:c3:c7:91:69:46:ea:41:53:50:96:02:e8:12:82: da:a3:c6:83:8b:0e:61:86:23:70:70:b2:ae:83:bf: 72:13:a9:72:08:f0:62:f0:d3:0d:d5:93:37:24:de: b0:e0:a8:4f:39:46:b2:de:ac:43:22:0b:ae:4c:23: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6A:F5:60:D9:52:91:B9:AC:25:48:64:B6:B9:C6:8B:A6:63:A5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fda19d3-00fd-375e-b688-4d3c3b74bd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:67:41:02:39:37:02:25:d5:33:93:98:94:16:f3:26:0f:34: f5:ed:2f:07:96:af:c9:85:4b:8e:56:de:df:b2:44:23:0d:5d: fc:96:10:ca:90:ed:10:2f:58:f7:42:19:51:a1:81:20:2c:1d: 30:46:a9:83:93:0e:09:8a:bf:dd:71:2d:e4:40:7d:2d:4d:b7: 92:42:dc:48:96:2d:02:3d:76:7c:05:04:41:c8:92:a1:36:af: 5d:75:af:9e:2b:60:2c:a1:f7:55:61:41:77:f4:65:50:16:b3: 55:c3:f4:0e:c8:60:d6:70:47:ef:a4:69:ee:35:b9:1c:39:85: e8:2c:ff:ff:47:2b:2c:6c:f7:bb:50:a0:1e:df:da:2c:23:6b: 6e:75:1f:91:70:5c:c6:48:d7:e0:5c:bc:64:38:32:27:ec:c1: d8:00:7d:ec:55:a4:75:cf:6b:d2:b5:3f:84:47:9e:28:96:f0: d3:cc:19:65:26:70:a7:f0:14:6c:cd:a3:3d:2b:33:e5:16:08: aa:8b:38:ec:1d:01:29:99:0c:fe:fe:20:65:83:3d:ce:6e:31: e2:01:ff:1c:7a:85:86:27:5e:19:f7:9f:52:b8:1d:2a:d8:7d: 11:a5:14:bf:b8:93:b7:0f:a1:b6:96:55:de:83:87:5c:b5:f5: 76:10:2c:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4RIKXHu0dgcnloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTg0MzdlZWYtOTk1OC00OTI3LWExNDAtMjNjZGZmOGJkZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXGt310aPlSyCyQL93KsI7mF2YhWi7wbqLwx /vRytSc6D4WaN4V5tkMJMGNi07H5rD/tAOD1zrSBl0e46hSweGkoszhP5zwWuyAB TcIGH8M6M+O+CUGvpLqwEFB++FMPcF+wSaQMj3FFV9ojN3zOuQFIgzHJyZjCJtWt B44ANzdhY7Er34f0IomCzBbYbkamhU9jdz7ZV8kW5XaZULV75uaz0VQQVqGh5CRy bzxqPwZksqSL7nixMwxPU+8QKHXuiAF2w8eRaUbqQVNQlgLoEoLao8aDiw5hhiNw cLKug79yE6lyCPBi8NMN1ZM3JN6w4KhPOUay3qxDIguuTCN4MwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFExq9WDZUpG5rCVIZLa5xoumY6XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWZkYTE5ZDMtMDBmZC0z NzVlLWI2ODgtNGQzYzNiNzRiZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIWdBAjk3AiXVM5OYlBbzJg809e0vB5avyYVLjlbe37JEIw1d/JYQ ypDtEC9Y90IZUaGBICwdMEapg5MOCYq/3XEt5EB9LU23kkLcSJYtAj12fAUEQciS oTavXXWvnitgLKH3VWFBd/RlUBazVcP0Dshg1nBH76Rp7jW5HDmF6Cz//0crLGz3 u1CgHt/aLCNrbnUfkXBcxkjX4Fy8ZDgyJ+zB2AB97FWkdc9r0rU/hEeeKJbw08wZ ZSZwp/AUbM2jPSsz5RYIqos47B0BKZkM/v4gZYM9zm4x4gH/HHqFhideGfefUrgd Kth9EaUUv7iTtw+htpZV3oOHXLX1dhAsRA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:46 2026 by rpki-client