$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa File: 25e70741-b5f3-324a-aea0-8a74994173d3.roa (raw, json) Hash identifier: ZGawAVTfN6XwfKjh8bQnZRr5rmtm4g2aZX0bwJjnp0o= Subject key identifier: 30:6F:E2:65:0B:75:3E:65:96:22:50:51:F3:C2:BE:4D:53:D7:65:83 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D3E0013A71DE086117142CFC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 19905 IP address blocks: 2604:2e87:7000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:13:a7:1d:e0:86:11:71:42:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5b54f4aa-7f80-4768-a81e-b04275cd676c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:a4:04:eb:d1:4c:38:1e:99:53:77:cf:48: c0:93:45:53:35:82:6a:e6:14:cf:59:5b:36:51:cc: 91:f2:e1:d6:35:5c:89:51:bc:19:e3:28:e2:01:9d: 9e:eb:56:be:af:17:3c:64:5e:d3:a6:7d:0f:3f:09: 3d:08:62:6f:f8:78:d9:69:2b:12:ba:79:26:0f:18: 2f:77:1d:e4:8f:c2:b7:82:10:0d:58:ac:4e:bd:0b: 48:69:65:32:90:93:58:e6:54:ac:09:36:8b:5b:5a: e6:ab:7f:02:d0:be:cb:ff:bf:1c:20:2b:37:d5:7e: 93:e4:cf:cf:61:ee:0c:e2:22:39:98:c1:2d:44:1e: e6:30:5a:d7:fd:6c:35:cc:60:19:16:ae:97:7a:f3: 18:bd:af:f3:07:75:eb:16:2b:0c:2f:d6:4a:f5:a4: 4b:11:68:d8:61:1b:2f:23:29:04:71:fe:46:a2:d7: 98:bb:36:65:82:b7:e6:af:03:87:dc:b9:eb:f5:d9: a1:d9:09:4e:9d:54:5b:2d:0e:e4:90:8a:2e:2e:b7: 00:33:c5:ae:a8:93:22:03:e3:e3:2b:49:16:63:4d: 2a:45:98:be:55:4f:5a:a3:5f:39:2f:2a:c5:48:4a: ed:35:a0:cb:7d:21:34:9a:db:1a:ae:9b:b1:d6:02: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:E2:65:0B:75:3E:65:96:22:50:51:F3:C2:BE:4D:53:D7:65:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/25e70741-b5f3-324a-aea0-8a74994173d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:7000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:00:da:2a:df:f9:4a:93:bf:d2:bf:d5:3e:bd:93:2a:d2:aa: d3:bf:19:7f:ba:24:c2:d5:c8:91:78:ce:33:55:f4:d1:ac:01: 4b:4d:5d:13:0e:01:bc:04:e4:2b:59:90:77:56:6a:ff:42:fe: 67:da:27:10:9c:ab:7a:9f:3a:43:1f:b2:b4:a4:97:4a:c5:1c: 5a:bc:8f:be:e2:28:80:f1:ef:77:1c:6d:71:6d:bb:b2:02:aa: 10:56:41:bd:bd:16:03:e0:fa:51:b7:e4:9e:75:ea:46:54:60: e9:bc:c4:e1:ab:e1:20:1d:a3:05:8c:f3:4c:c0:c7:ed:b6:f8: 7b:14:ce:74:5e:58:5f:e2:9c:65:31:61:ed:ff:a0:c8:7a:d3: ff:01:78:b8:b3:76:dc:94:f3:a3:1d:1b:38:5a:b3:32:bb:39: d1:50:49:a6:1a:ac:11:7c:92:ee:0a:f0:68:2f:8f:f8:9d:8a: 1d:d7:34:2f:6b:e9:86:a1:63:3a:31:b9:d1:94:cb:c1:a4:dd: 5b:48:7c:1e:90:c4:6e:f7:bd:93:d9:25:47:eb:81:3f:06:a8: 35:f0:4e:4f:d9:14:b3:16:27:64:3b:47:00:e2:eb:5f:cb:12: 72:eb:e6:a9:0a:f1:9b:13:15:8c:cf:1d:7b:9f:2b:73:da:4d: 8e:eb:ef:de -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0+ABOnHeCGEXFCz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWI1NGY0YWEtN2Y4MC00NzY4LWE4MWUtYjA0Mjc1Y2Q2NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/+kBOvRTDgemVN3z0jAk0VTNYJq5hTPWVs2 UcyR8uHWNVyJUbwZ4yjiAZ2e61a+rxc8ZF7Tpn0PPwk9CGJv+HjZaSsSunkmDxgv dx3kj8K3ghANWKxOvQtIaWUykJNY5lSsCTaLW1rmq38C0L7L/78cICs31X6T5M/P Ye4M4iI5mMEtRB7mMFrX/Ww1zGAZFq6XevMYva/zB3XrFisML9ZK9aRLEWjYYRsv IykEcf5GoteYuzZlgrfmrwOH3Lnr9dmh2QlOnVRbLQ7kkIouLrcAM8WuqJMiA+Pj K0kWY00qRZi+VU9ao185LyrFSErtNaDLfSE0mtsarpux1gIkHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDBv4mULdT5lliJQUfPCvk1T12WDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjVlNzA3NDEtYjVmMy0z MjRhLWFlYTAtOGE3NDk5NDE3M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh3Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWADaKt/5SpO/0r/VPr2TKtKq078Zf7okwtXIkXjOM1X00awBS01d Ew4BvATkK1mQd1Zq/0L+Z9onEJyrep86Qx+ytKSXSsUcWryPvuIogPHvdxxtcW27 sgKqEFZBvb0WA+D6UbfknnXqRlRg6bzE4avhIB2jBYzzTMDH7bb4exTOdF5YX+Kc ZTFh7f+gyHrT/wF4uLN23JTzox0bOFqzMrs50VBJphqsEXyS7grwaC+P+J2KHdc0 L2vphqFjOjG50ZTLwaTdW0h8HpDEbve9k9klR+uBPwaoNfBOT9kUsxYnZDtHAOLr X8sScuvmqQrxmxMVjM8de58rc9pNjuvv3g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:23 2026 by rpki-client