$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa File: 3602582a-a894-32a0-8f9b-5cc020d56039.roa (raw, json) Hash identifier: fAKfzK3UnVDl5h0gbfsKmgW6JVRirye2gyw8Lvccaac= Subject key identifier: AC:30:81:08:D3:C3:18:67:45:FF:87:94:D1:C1:A5:C6:11:EB:2D:40 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D27AA1EEF3C6AAC90C3F89300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:1e:ef:3c:6a:ac:90:c3:f8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d2116ba4-70dd-4517-9272-87044df99c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:da:d3:12:54:0a:cf:0e:c6:f2:9d:d7:28: 84:42:45:48:26:54:c6:69:ec:20:51:ad:15:63:ec: b6:ee:c3:f9:ad:c6:8a:e1:16:df:ea:5e:44:e7:29: cf:44:c4:b2:ca:41:0b:83:83:17:20:61:a6:2b:35: c1:22:1c:31:36:88:ab:8b:48:17:5f:21:12:62:8e: c7:24:6c:76:3f:55:30:aa:be:6a:b5:f2:5c:32:e9: 6e:0d:76:c1:80:37:75:ad:1d:d7:89:55:41:a2:bc: 93:df:2d:b5:39:2f:7b:f4:ca:0f:0e:13:55:cb:20: 20:9b:c1:c5:98:50:d3:ed:76:f6:cd:1b:79:49:90: ba:d7:06:d1:09:3d:f5:2c:a8:4f:3f:ae:a7:2e:7e: be:24:70:70:49:b9:d0:20:33:8a:9e:b9:ef:36:f7: b0:c1:0b:81:24:3b:fa:33:71:88:42:b7:ca:cc:d1: f5:4c:ca:53:35:0c:1a:72:d0:c3:f6:e9:8e:c6:87: 65:66:65:83:88:4a:96:fc:71:be:b1:e1:d2:9b:e0: fd:a9:c6:30:4a:20:e3:f5:e8:cb:59:4a:a6:07:77: 3e:6c:f6:07:e1:58:e4:d0:57:2c:22:a0:f4:4e:12: 77:3f:1c:bf:5f:1f:6e:96:a3:9c:86:f0:ed:7f:16: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:81:08:D3:C3:18:67:45:FF:87:94:D1:C1:A5:C6:11:EB:2D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:74:82:65:e0:5f:79:5b:b6:1d:bc:28:2c:07:cb:54:f5:c9: bc:74:fc:5a:0e:3f:f7:f7:47:89:3d:b3:22:2c:ad:e3:fc:6b: e6:1b:da:c8:71:28:45:e4:e1:42:52:24:6f:6b:3f:39:dd:a1: 14:9f:f4:1d:dd:92:02:8c:b0:b8:1c:57:af:07:35:7c:6b:a2: f2:1f:66:d9:4c:0f:33:ca:2b:87:23:d9:af:7c:fb:82:57:43: c0:b4:98:21:60:1f:b2:cf:a1:7a:b3:51:87:ed:00:eb:29:fd: 26:c6:dc:5a:05:97:61:68:02:3f:fe:80:20:ec:36:5d:38:95: fd:2d:d5:04:62:e6:cf:ad:49:7e:ad:23:0e:ee:d6:b4:e3:c1: 81:bb:42:ca:8e:80:30:f3:68:e6:15:a5:d8:85:65:c8:ec:b1: af:81:dc:51:ff:9b:c1:34:55:9a:09:23:1b:42:f4:54:f7:b4: fd:51:e7:63:bf:c3:f6:ca:b3:48:18:08:05:c4:f1:69:3a:17: 4d:b1:88:a0:09:8a:d1:94:c6:ad:f4:53:69:b6:cd:8b:71:c3: 40:73:26:b7:d0:51:e8:f0:22:12:67:46:2d:77:99:be:87:53: f5:01:dc:32:62:bf:85:a5:ad:3b:4a:98:bb:c3:48:e9:ec:79: be:fe:7c:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqh7vPGqskMP4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDIxMTZiYTQtNzBkZC00NTE3LTkyNzItODcwNDRkZjk5YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG3a0xJUCs8OxvKd1yiEQkVIJlTGaewgUa0V Y+y27sP5rcaK4Rbf6l5E5ynPRMSyykELg4MXIGGmKzXBIhwxNoiri0gXXyESYo7H JGx2P1Uwqr5qtfJcMuluDXbBgDd1rR3XiVVBoryT3y21OS979MoPDhNVyyAgm8HF mFDT7Xb2zRt5SZC61wbRCT31LKhPP66nLn6+JHBwSbnQIDOKnrnvNvewwQuBJDv6 M3GIQrfKzNH1TMpTNQwactDD9umOxodlZmWDiEqW/HG+seHSm+D9qcYwSiDj9ejL WUqmB3c+bPYH4Vjk0FcsIqD0ThJ3Pxy/Xx9ulqOchvDtfxZdHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKwwgQjTwxhnRf+HlNHBpcYR6y1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzYwMjU4MmEtYTg5NC0z MmEwLThmOWItNWNjMDIwZDU2MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJHSCZeBfeVu2HbwoLAfLVPXJvHT8Wg4/9/dHiT2zIiyt4/xr5hva yHEoReThQlIkb2s/Od2hFJ/0Hd2SAoywuBxXrwc1fGui8h9m2UwPM8orhyPZr3z7 gldDwLSYIWAfss+herNRh+0A6yn9JsbcWgWXYWgCP/6AIOw2XTiV/S3VBGLmz61J fq0jDu7WtOPBgbtCyo6AMPNo5hWl2IVlyOyxr4HcUf+bwTRVmgkjG0L0VPe0/VHn Y7/D9sqzSBgIBcTxaToXTbGIoAmK0ZTGrfRTabbNi3HDQHMmt9BR6PAiEmdGLXeZ vodT9QHcMmK/haWtO0qYu8NI6ex5vv58cA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:21 2026 by rpki-client