$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa File: 25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa (raw, json) Hash identifier: C+74IV+rRouqpkugB3hg2ggGr75npnLD+RixpFqfY48= Subject key identifier: D6:BC:31:27:65:BE:8E:80:23:65:90:28:C7:D7:D0:E2:97:D5:ED:5E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D3623D983B4A505BA22A91A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa Signing time: Wed 18 Mar 2026 17:27:27 +0000 ROA not before: Wed 18 Mar 2026 17:27:27 +0000 ROA not after: Tue 16 Jun 2026 17:27:27 +0000 asID: 19905 IP address blocks: 2604:2e8f:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:23:d9:83:b4:a5:05:ba:22:a9:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 18 17:27:27 2026 GMT Not After : Jun 16 17:27:27 2026 GMT Subject: CN=a096c6c2-ff03-442e-9640-d693917717fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:a1:3e:30:88:b7:f0:f0:48:14:09:47:13: 1c:ab:ea:b3:77:ef:04:28:8b:76:a8:22:42:d4:40: 21:38:92:a5:03:a2:e5:d6:94:f4:08:96:94:18:f8: ea:d8:9e:b3:2e:a1:49:af:fb:0c:47:ec:9e:25:b6: fb:a9:2e:de:5e:88:8d:a3:1a:a5:5b:0a:e7:e3:12: 29:9f:bc:54:55:cc:9a:78:f8:04:5e:f4:4f:7f:3b: ae:f7:da:ff:bc:f8:7e:e9:5c:e9:1c:53:c4:a7:c6: c2:d9:d4:5a:3a:b3:84:da:79:bf:63:3d:25:38:ff: 49:a9:63:2e:f5:76:50:13:20:7c:1f:f7:ae:d6:66: c5:89:54:df:1f:38:83:4b:9d:46:59:f9:29:03:a7: d0:1c:ae:b8:0b:ae:42:a8:0f:28:9f:4e:89:22:2a: 7e:3c:08:84:2a:d9:d9:03:6c:84:51:e5:8f:21:c8: 7e:5f:f3:bb:13:80:9c:b9:6a:e5:09:6a:91:b2:a0: cc:68:3c:c1:a0:45:91:6d:27:51:3b:35:51:ad:8e: 9c:58:4a:d4:4c:bb:20:cc:08:0a:0d:86:b9:14:d6: d0:a6:41:f4:14:f8:57:6c:ef:b0:99:ac:78:3a:61: ab:a2:cb:35:fe:ff:e0:49:f0:94:3a:36:1d:c1:90: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:31:27:65:BE:8E:80:23:65:90:28:C7:D7:D0:E2:97:D5:ED:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25a33f7a-ff25-3976-87f1-9a9002d7abe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:30:c3:9d:0b:da:15:b4:4a:ec:1f:d4:52:f6:69:cf:7c:99: 69:91:d0:8d:12:7d:3d:22:6d:22:df:85:ae:fd:3b:5b:e4:b0: b9:25:22:11:fe:47:36:aa:a7:a1:d1:10:4a:0d:fe:3a:b5:58: c6:4f:a5:e0:53:a9:00:3d:a3:96:09:3f:d1:49:dd:c6:21:ce: 2d:1c:6e:fb:bb:f6:4f:36:41:78:ca:74:ee:e1:32:9c:8d:04: 84:ec:2e:07:9a:ed:2f:1e:27:01:fd:4d:36:f9:51:1f:51:b0: 40:e7:60:14:ed:07:1e:43:ad:22:bf:bf:eb:5f:07:7e:a5:e3: 56:75:ef:95:af:a7:b4:4e:fa:38:5b:02:3e:0e:24:65:82:47: 81:48:89:0a:95:1f:7b:dc:b3:85:90:bf:51:d7:ff:d5:d6:3e: 8c:ea:fd:ae:39:5e:0c:94:e2:5f:62:cc:84:bd:b7:92:4e:71: 8d:6f:b8:aa:f3:97:77:63:53:48:e9:8e:02:1c:9c:8e:fe:be: dc:fc:db:70:3a:13:13:c5:05:5d:db:36:27:6a:1d:b8:50:4c: 0f:54:e5:5c:3a:de:ca:24:5f:06:a2:08:ed:33:2c:28:b8:ca: 0a:95:12:4e:f7:be:dc:38:f5:37:48:81:8a:37:58:19:a2:8c: 9b:1f:60:b6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE02I9mDtKUFuiKpGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxODE3MjcyN1oXDTI2MDYxNjE3MjcyN1owLzEtMCsGA1UEAxMk YTA5NmM2YzItZmYwMy00NDJlLTk2NDAtZDY5MzkxNzcxN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKhPjCIt/DwSBQJRxMcq+qzd+8EKIt2qCJC 1EAhOJKlA6Ll1pT0CJaUGPjq2J6zLqFJr/sMR+yeJbb7qS7eXoiNoxqlWwrn4xIp n7xUVcyaePgEXvRPfzuu99r/vPh+6VzpHFPEp8bC2dRaOrOE2nm/Yz0lOP9JqWMu 9XZQEyB8H/eu1mbFiVTfHziDS51GWfkpA6fQHK64C65CqA8on06JIip+PAiEKtnZ A2yEUeWPIch+X/O7E4CcuWrlCWqRsqDMaDzBoEWRbSdROzVRrY6cWErUTLsgzAgK DYa5FNbQpkH0FPhXbO+wmax4OmGross1/v/gSfCUOjYdwZCa5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNa8MSdlvo6AI2WQKMfX0OKX1e1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjVhMzNmN2EtZmYyNS0z OTc2LTg3ZjEtOWE5MDAyZDdhYmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj0ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKjDDnQvaFbRK7B/UUvZpz3yZaZHQjRJ9PSJtIt+Frv07W+SwuSUi Ef5HNqqnodEQSg3+OrVYxk+l4FOpAD2jlgk/0UndxiHOLRxu+7v2TzZBeMp07uEy nI0EhOwuB5rtLx4nAf1NNvlRH1GwQOdgFO0HHkOtIr+/618HfqXjVnXvla+ntE76 OFsCPg4kZYJHgUiJCpUfe9yzhZC/Udf/1dY+jOr9rjleDJTiX2LMhL23kk5xjW+4 qvOXd2NTSOmOAhycjv6+3PzbcDoTE8UFXds2J2oduFBMD1TlXDreyiRfBqII7TMs KLjKCpUSTve+3Dj1N0iBijdYGaKMmx9gtg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:40 2026 by rpki-client