$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/235c5090-5ac9-399f-96fe-4c1a75337670.roa File: 235c5090-5ac9-399f-96fe-4c1a75337670.roa (raw, json) Hash identifier: GSHn+e2UQy/wz24L50stlcuwMNoLq9BABRtALMoljg8= Subject key identifier: 94:79:F3:1C:79:E3:51:C0:6A:0B:C4:0E:3A:C1:F9:A8:A6:EF:F5:00 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D39CF837F810F89CC39F31560 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/235c5090-5ac9-399f-96fe-4c1a75337670.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e8d:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:83:7f:81:0f:89:cc:39:f3:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=57293525-4e02-4424-a838-8a914455a1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:c5:c0:4a:7c:6e:44:6e:a0:12:c1:d6:b0: 91:03:49:76:24:cf:77:b5:79:4a:04:0a:51:1a:58: 3c:a6:94:c5:0e:a1:d3:43:0d:dd:81:a4:0a:a5:cf: ac:8a:92:ad:9d:4c:c5:a2:92:67:50:10:d1:4b:06: 46:3f:0d:14:98:85:32:74:ce:7a:65:ca:08:bd:18: 53:54:f4:ce:0c:88:22:9c:20:79:60:cd:1d:de:9a: 66:63:ac:41:ee:34:92:14:43:e8:e1:49:5f:28:a2: be:59:42:76:56:95:e8:72:50:50:5c:f1:e2:41:58: 53:b4:7a:fe:a0:7a:57:a4:41:35:95:56:ee:46:a8: c8:c9:94:83:c9:2c:cd:c3:f6:dd:00:04:19:dd:b6: d9:82:f2:9f:98:8b:6f:58:25:27:2c:a9:83:ce:b1: e0:86:9f:ba:dd:58:15:5a:ea:38:63:64:5f:64:86: 07:80:37:57:7e:7f:89:2c:3e:a5:13:ec:83:77:94: 94:a6:95:cd:e0:67:82:48:00:74:c3:e7:65:b3:54: 8d:ed:17:f5:7e:c3:cc:b6:2e:70:86:8d:1a:c5:2d: dc:d9:cb:7c:ed:a7:3a:4e:2d:ae:4c:16:00:72:e3: 53:8b:c5:b7:b7:68:5c:0a:b8:85:9e:b3:01:e6:65: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:79:F3:1C:79:E3:51:C0:6A:0B:C4:0E:3A:C1:F9:A8:A6:EF:F5:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/235c5090-5ac9-399f-96fe-4c1a75337670.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d2:7e:b2:10:bd:f3:65:fb:a6:70:e1:a0:7e:66:96:38:63: 52:68:d7:a7:bd:b8:92:00:6b:b6:ce:da:ed:18:0f:de:f0:fa: 19:35:18:58:82:fe:d0:77:7f:e6:24:21:d2:4b:ba:4f:c4:4e: 40:81:8d:35:fa:15:1b:9e:d8:ad:f9:e7:bb:6a:dd:b2:9a:ef: a2:b7:8f:12:b9:ca:bc:b5:59:3f:86:66:21:2f:7a:70:15:9f: d9:18:7c:5b:b6:a4:0c:f3:b3:1e:fd:cf:78:88:6a:6c:6a:a5: ae:05:18:dc:34:54:5c:46:34:66:0c:b1:48:e3:73:10:cd:12: 9d:39:c0:71:18:73:e4:49:26:0b:0c:4b:00:82:94:53:2c:42: b7:61:c4:83:d4:2d:5e:00:2d:ea:f4:3a:ea:43:7a:85:59:35: 6d:4a:b4:8d:a7:41:4a:4e:45:be:8a:60:0c:9b:ee:84:51:be: 16:7a:8b:9a:fe:89:e0:e6:64:82:4a:50:39:6f:6a:2a:32:a9: 54:09:f6:fb:0a:d6:78:ad:3c:fd:eb:a9:37:75:a7:5f:d2:36: 98:11:eb:b0:b6:ea:e2:2e:10:25:ef:0d:3a:bb:6a:ec:ad:4a: 1a:d4:66:5c:ae:2f:a5:b6:e9:35:da:ef:c7:5e:f6:ee:a7:fd: 78:e7:2b:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE05z4N/gQ+JzDnzFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NTcyOTM1MjUtNGUwMi00NDI0LWE4MzgtOGE5MTQ0NTVhMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvLFwEp8bkRuoBLB1rCRA0l2JM93tXlKBApR Glg8ppTFDqHTQw3dgaQKpc+sipKtnUzFopJnUBDRSwZGPw0UmIUydM56ZcoIvRhT VPTODIginCB5YM0d3ppmY6xB7jSSFEPo4UlfKKK+WUJ2VpXoclBQXPHiQVhTtHr+ oHpXpEE1lVbuRqjIyZSDySzNw/bdAAQZ3bbZgvKfmItvWCUnLKmDzrHghp+63VgV Wuo4Y2RfZIYHgDdXfn+JLD6lE+yDd5SUppXN4GeCSAB0w+dls1SN7Rf1fsPMti5w ho0axS3c2ct87ac6Ti2uTBYAcuNTi8W3t2hcCriFnrMB5mXfVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJR58xx541HAagvEDjrB+aim7/UAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjM1YzUwOTAtNWFjOS0z OTlmLTk2ZmUtNGMxYTc1MzM3NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATdJ+shC982X7pnDhoH5mljhjUmjXp724kgBrts7a7RgP3vD6GTUY WIL+0Hd/5iQh0ku6T8ROQIGNNfoVG57Yrfnnu2rdsprvorePErnKvLVZP4ZmIS96 cBWf2Rh8W7akDPOzHv3PeIhqbGqlrgUY3DRUXEY0ZgyxSONzEM0SnTnAcRhz5Ekm CwxLAIKUUyxCt2HEg9QtXgAt6vQ66kN6hVk1bUq0jadBSk5FvopgDJvuhFG+FnqL mv6J4OZkgkpQOW9qKjKpVAn2+wrWeK08/eupN3WnX9I2mBHrsLbq4i4QJe8NOrtq 7K1KGtRmXK4vpbbpNdrvx1727qf9eOcrfQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:30 2026 by rpki-client