$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa File: 3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa (raw, json) Hash identifier: ZcKZDi4akESEqK5ct0o7jAAdkx9T4CTTeEmNZ/gXQsI= Subject key identifier: 0D:D3:AB:83:36:12:99:E6:72:76:6D:1A:62:F4:B1:DF:B3:68:84:B5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E1224ECBC96D2A4250B980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:22:4e:cb:c9:6d:2a:42:50:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=271e64b9-8ad0-4374-95c1-7cfbeb76afa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:7a:1f:4d:c6:3d:8f:0e:fd:d4:9c:fb:69: af:f5:72:11:55:50:03:83:d4:d3:35:a8:ae:39:89: c4:96:b5:c3:ec:03:25:a9:b3:f4:3d:28:27:99:82: a2:c2:24:9f:15:91:93:be:f2:5c:84:c2:39:3a:19: 52:3d:cc:7b:2f:80:cd:96:6e:d6:55:54:52:96:8e: 4e:f5:ed:3d:02:24:1f:8f:0b:16:8c:b7:f6:a0:e0: 32:20:e1:9e:0f:bf:99:66:e6:b9:af:e2:8e:4a:27: 51:4a:fb:af:a9:d2:b7:2d:f7:6d:9d:d6:19:72:22: 10:3f:4e:8b:dd:7b:fb:d6:32:79:b4:21:30:47:8a: b6:61:68:e8:f7:97:5d:49:f6:2e:c1:f7:b8:bb:ee: 3e:37:9e:65:22:f7:59:85:53:1c:ab:62:33:f1:84: fa:6d:2d:8e:5b:b8:d6:91:62:47:a2:19:0c:ea:e8: b8:de:8b:71:55:0e:6f:53:7c:fc:c5:02:e5:5b:e2: e3:55:e4:a0:26:4e:47:6c:fc:dc:1a:08:1a:55:09: 3e:14:84:6b:55:71:58:40:10:97:95:20:31:b2:0d: 91:f1:07:7e:6d:07:d2:b0:c2:a6:74:c2:30:e2:ad: ab:22:5d:33:3e:33:fa:24:b4:5c:ff:90:45:ff:2b: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:AB:83:36:12:99:E6:72:76:6D:1A:62:F4:B1:DF:B3:68:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ca:81:a8:2b:95:8a:63:1f:35:01:7d:79:59:b4:69:45:fa: eb:5d:a6:3f:58:20:a5:85:40:bd:0c:94:79:4d:46:14:10:78: 0b:f9:5a:a3:02:e9:ed:64:a3:ff:70:5d:57:c8:2f:14:a5:04: 03:94:e4:59:75:70:84:fb:71:40:30:fe:e6:0d:38:67:1f:5b: 72:22:07:d9:54:ad:da:d0:40:f3:05:b0:6b:fb:21:a1:b7:5c: 4f:e7:90:53:84:ea:f6:cb:a4:23:a0:88:fb:d6:f0:fa:39:9c: e3:c9:bb:64:f7:74:dd:f9:86:89:bc:53:98:c4:86:c6:e6:c0: e9:e1:82:f7:32:4d:c3:76:86:81:b7:9b:82:b0:f7:07:8f:bc: 58:20:ea:a7:4d:58:85:5b:ea:63:7d:05:73:b7:c9:8f:ec:d1: 50:08:56:50:af:85:ca:12:54:25:46:ee:a5:6b:f9:89:4f:0f: 28:2d:30:c9:f6:ed:df:8d:e1:6b:c7:c5:79:39:34:f6:8e:a7: 26:37:f7:21:a4:a7:9e:36:c1:eb:47:b5:7a:fd:50:cf:26:b8: 4d:1a:aa:46:5a:90:ab:48:04:e4:32:06:d3:3f:97:e5:e8:ed: 92:aa:24:69:21:54:37:8e:b9:51:91:a2:c4:47:03:50:62:52: 22:77:bf:fc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4SJOy8ltKkJQuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjcxZTY0YjktOGFkMC00Mzc0LTk1YzEtN2NmYmViNzZhZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfZ6H03GPY8O/dSc+2mv9XIRVVADg9TTNaiu OYnElrXD7AMlqbP0PSgnmYKiwiSfFZGTvvJchMI5OhlSPcx7L4DNlm7WVVRSlo5O 9e09AiQfjwsWjLf2oOAyIOGeD7+ZZua5r+KOSidRSvuvqdK3LfdtndYZciIQP06L 3Xv71jJ5tCEwR4q2YWjo95ddSfYuwfe4u+4+N55lIvdZhVMcq2Iz8YT6bS2OW7jW kWJHohkM6ui43otxVQ5vU3z8xQLlW+LjVeSgJk5HbPzcGggaVQk+FIRrVXFYQBCX lSAxsg2R8Qd+bQfSsMKmdMIw4q2rIl0zPjP6JLRc/5BF/ytlrwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA3Tq4M2EpnmcnZtGmL0sd+zaIS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0MmExMmEtN2RhZi0z ZmRjLThkNDAtNDFiNzgyN2FhOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuirQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADsqBqCuVimMfNQF9eVm0aUX6612mP1ggpYVAvQyUeU1GFBB4C/la owLp7WSj/3BdV8gvFKUEA5TkWXVwhPtxQDD+5g04Zx9bciIH2VSt2tBA8wWwa/sh obdcT+eQU4Tq9sukI6CI+9bw+jmc48m7ZPd03fmGibxTmMSGxubA6eGC9zJNw3aG gbebgrD3B4+8WCDqp01YhVvqY30Fc7fJj+zRUAhWUK+FyhJUJUbupWv5iU8PKC0w yfbt343ha8fFeTk09o6nJjf3IaSnnjbB60e1ev1Qzya4TRqqRlqQq0gE5DIG0z+X 5ejtkqokaSFUN465UZGixEcDUGJSIne//A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:19:43 2026 by rpki-client