$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa File: 21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa (raw, json) Hash identifier: IdkSjjVnki58vDqA3UG1e9Xfp/rHNiSyO16Z0qkhroI= Subject key identifier: D8:A6:0F:DE:2D:F8:D5:99:41:AE:22:75:2A:A8:B8:07:02:78:B4:97 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF6FD1EEE31A3FE6D45280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6f:d1:ee:e3:1a:3f:e6:d4:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=822c52b3-1085-4b79-9555-80fb3650329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:21:1d:2d:6a:f6:96:03:cf:1e:21:bd:a6: ca:97:7a:6f:21:e7:f1:85:ef:99:a2:1b:ba:10:0b: af:e0:3b:f6:b9:20:d9:41:3f:fd:4b:69:4e:2b:70: 42:a0:08:a4:bc:5d:33:14:5f:a6:9b:b8:af:98:d3: 9f:a1:82:b4:86:66:10:66:42:8b:61:5c:b7:df:3f: bd:c7:20:f5:38:34:22:9e:b1:04:a6:d4:a3:b8:26: 62:59:1f:0f:82:09:17:47:aa:84:f9:aa:27:f0:8f: 06:98:ac:83:44:28:4e:00:96:4e:d3:56:e9:da:35: 38:fc:ec:e0:f0:e0:6e:2a:92:06:d5:26:91:83:fc: a0:31:f4:71:72:53:b6:4a:5e:eb:0c:99:50:01:91: 7f:c8:85:a8:2f:6b:53:3f:64:6a:88:9f:1c:75:59: b7:07:7d:8b:4b:56:49:df:70:69:e3:a5:71:50:18: 11:ba:02:9a:41:cf:11:30:3b:d9:5f:82:47:7c:82: 03:6e:22:1a:b9:93:5e:08:1f:16:79:ed:c0:a0:2a: 72:96:10:56:4e:4c:dd:c8:2e:a5:5c:88:d0:0b:4b: b1:14:99:ce:bd:aa:1e:03:b8:72:b3:66:ac:59:67: cd:bb:42:b7:cf:a2:17:f9:fe:62:2b:63:ba:fc:e1: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A6:0F:DE:2D:F8:D5:99:41:AE:22:75:2A:A8:B8:07:02:78:B4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21a650b6-0f13-3acf-b4cf-17e2acc25fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e3:d2:76:b2:49:3e:16:07:f9:7a:c1:7b:e4:33:b5:54:cc: 04:5c:95:f4:e7:e2:ee:f5:ca:e7:cb:0c:35:49:cd:06:29:96: c9:c0:24:1f:fd:8b:e2:46:8f:bc:a4:43:51:a3:c1:70:5c:61: 02:c7:dd:cb:d3:48:8f:ed:6b:d6:ae:e4:55:57:40:75:12:90: 4f:0f:d7:fc:25:5f:38:b7:59:bf:69:e3:b6:37:d4:5b:7e:87: 39:e6:e2:8a:57:62:c1:96:4c:27:a9:54:2c:a6:0a:4e:4e:42: 6d:33:3c:74:4a:ff:97:e3:c4:e8:85:18:90:67:a2:75:8a:74: e3:fd:6a:47:42:3f:4a:6d:c4:b7:fa:db:55:49:d5:7f:02:4a: 8f:78:3b:24:cb:8c:37:ec:0a:77:9c:54:39:92:df:fc:56:59: 23:27:4e:66:a9:8d:69:ce:42:ce:d5:f1:17:2b:31:07:10:81: c9:b4:65:45:9c:4e:49:ed:55:de:4e:ac:33:24:e9:53:76:72: 51:a3:96:aa:cc:cf:46:89:50:4d:39:ab:98:0d:da:8a:3a:e3: c9:9d:78:86:19:f3:f2:6f:53:d9:ca:8e:d3:8e:96:31:9b:24: 76:03:40:58:cc:47:45:bf:0b:32:54:03:e4:ad:90:50:e5:f9: 14:48:8c:96 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k32/R7uMaP+bUUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODIyYzUyYjMtMTA4NS00Yjc5LTk1NTUtODBmYjM2NTAzMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vshHS1q9pYDzx4hvabKl3pvIefxhe+Zohu6 EAuv4Dv2uSDZQT/9S2lOK3BCoAikvF0zFF+mm7ivmNOfoYK0hmYQZkKLYVy33z+9 xyD1ODQinrEEptSjuCZiWR8PggkXR6qE+aon8I8GmKyDRChOAJZO01bp2jU4/Ozg 8OBuKpIG1SaRg/ygMfRxclO2Sl7rDJlQAZF/yIWoL2tTP2RqiJ8cdVm3B32LS1ZJ 33Bp46VxUBgRugKaQc8RMDvZX4JHfIIDbiIauZNeCB8Wee3AoCpylhBWTkzdyC6l XIjQC0uxFJnOvaoeA7hys2asWWfNu0K3z6IX+f5iK2O6/OFXqwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNimD94t+NWZQa4idSqouAcCeLSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjFhNjUwYjYtMGYxMy0z YWNmLWI0Y2YtMTdlMmFjYzI1ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujMgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW+PSdrJJPhYH+XrBe+QztVTMBFyV9Ofi7vXK58sMNUnNBimWycAk H/2L4kaPvKRDUaPBcFxhAsfdy9NIj+1r1q7kVVdAdRKQTw/X/CVfOLdZv2njtjfU W36HOebiildiwZZMJ6lULKYKTk5CbTM8dEr/l+PE6IUYkGeidYp04/1qR0I/Sm3E t/rbVUnVfwJKj3g7JMuMN+wKd5xUOZLf/FZZIydOZqmNac5CztXxFysxBxCBybRl RZxOSe1V3k6sMyTpU3ZyUaOWqszPRolQTTmrmA3aijrjyZ14hhnz8m9T2cqO046W MZskdgNAWMxHRb8LMlQD5K2QUOX5FEiMlg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:08 2026 by rpki-client