$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a120ecd-0648-3fd8-adc2-4bf5ea8dfd6a.roa File: 4a120ecd-0648-3fd8-adc2-4bf5ea8dfd6a.roa (raw, json) Hash identifier: 75QP6s2PD2cDUzX6saVENJtsFiff79nrqm9yAdN5GYQ= Subject key identifier: B3:26:C7:30:19:CB:58:CB:22:B5:1C:B8:7F:F7:17:FC:14:CC:81:D6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF7D1B9947EB08AB5D47D6 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a120ecd-0648-3fd8-adc2-4bf5ea8dfd6a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:fc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7d:1b:99:47:eb:08:ab:5d:47:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1f5b4105-a6f5-4e95-b97f-64785b90d68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:96:31:73:a3:02:1b:2c:c8:1f:3d:59:73: 90:ae:9a:5f:95:92:dd:40:5f:ee:f3:ca:24:e6:92: 5c:57:7c:98:53:bb:4c:9f:34:e4:0c:17:2e:78:e3: 4f:44:18:41:e6:e3:de:e9:78:2e:55:0d:19:57:67: ee:58:72:d1:59:cd:c0:64:57:24:c0:4a:ea:d7:73: a2:68:98:cc:15:13:9a:8a:57:a1:77:6b:06:a7:de: 6b:2d:69:19:70:d1:fd:48:85:85:39:db:97:af:fb: ee:a8:57:cf:25:d3:34:c3:b8:03:51:ff:76:21:52: f4:ec:75:67:5b:ea:f8:a6:b7:a6:f8:4e:0a:36:6a: 83:a3:05:dd:fb:18:7e:d1:39:7b:05:12:9e:2d:95: fa:a5:64:63:b8:c2:eb:b3:bd:44:ac:51:c9:e6:ea: c6:11:34:99:94:58:af:8d:be:a8:4b:a9:03:26:58: 78:24:00:06:02:c0:3e:8a:e5:b6:b2:26:c5:23:b3: c5:d8:e9:38:3e:f5:fc:37:e2:41:30:d2:4d:c9:94: f1:54:07:be:93:ae:96:56:55:9a:79:87:b9:a2:ed: db:96:ae:e4:ef:74:2a:d3:7a:f6:e6:7b:f1:07:0f: 38:95:1e:15:f7:7c:ae:ce:75:cf:b2:cc:12:7e:2d: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:26:C7:30:19:CB:58:CB:22:B5:1C:B8:7F:F7:17:FC:14:CC:81:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a120ecd-0648-3fd8-adc2-4bf5ea8dfd6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:fc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:93:db:ae:1a:4e:64:01:ed:51:db:56:c7:55:61:4d:35:86: ea:e9:40:57:79:a0:83:27:50:9c:04:8b:df:4f:26:34:f7:35: bf:2c:2c:1f:d3:c9:98:01:41:27:23:c9:0e:73:fa:6a:38:72: e6:81:29:dd:3a:f3:fe:94:e0:a2:a2:1c:5e:35:61:fc:06:e9: dc:7d:aa:be:86:e7:6c:0f:7d:92:b4:83:f2:7b:3a:65:0f:de: 1b:b7:84:4d:07:75:cc:7b:56:5e:35:c8:c0:db:1d:14:42:f3: e6:68:1c:78:b8:4e:15:48:b9:86:1d:8d:fb:92:d9:e1:71:e9: be:4f:fa:ce:5d:d6:e2:d8:72:43:c0:2d:c9:fd:69:dc:8a:82: 59:3e:ae:c6:f1:5b:e6:a9:b8:f7:27:ef:9d:69:f8:0e:fc:7e: 09:7d:4f:49:39:5d:8e:0f:aa:00:f3:19:55:3c:6d:f9:c4:c4: 0a:4c:7c:98:78:92:42:65:4c:2f:3c:9b:36:eb:61:7b:88:28: 35:7d:8e:86:c7:8e:0f:3b:19:a3:10:b2:6d:ab:d7:4b:ba:e9: 6a:d6:86:03:fe:4b:24:bd:af:55:0a:7f:41:66:55:95:bf:f6: ec:16:4f:78:59:cc:b3:97:74:c8:d7:76:a4:74:21:2d:e6:28: b2:21:f2:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k330bmUfrCKtdR9YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWY1YjQxMDUtYTZmNS00ZTk1LWI5N2YtNjQ3ODViOTBkNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCCWMXOjAhssyB89WXOQrppflZLdQF/u88ok 5pJcV3yYU7tMnzTkDBcueONPRBhB5uPe6XguVQ0ZV2fuWHLRWc3AZFckwErq13Oi aJjMFROailehd2sGp95rLWkZcNH9SIWFOduXr/vuqFfPJdM0w7gDUf92IVL07HVn W+r4prem+E4KNmqDowXd+xh+0Tl7BRKeLZX6pWRjuMLrs71ErFHJ5urGETSZlFiv jb6oS6kDJlh4JAAGAsA+iuW2sibFI7PF2Ok4PvX8N+JBMNJNyZTxVAe+k66WVlWa eYe5ou3blq7k73Qq03r25nvxBw84lR4V93yuznXPsswSfi3nOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLMmxzAZy1jLIrUcuH/3F/wUzIHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGExMjBlY2QtMDY0OC0z ZmQ4LWFkYzItNGJmNWVhOGRmZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcJPbrhpOZAHtUdtWx1VhTTWG6ulAV3mggydQnASL308mNPc1vyws H9PJmAFBJyPJDnP6ajhy5oEp3Trz/pTgoqIcXjVh/Abp3H2qvobnbA99krSD8ns6 ZQ/eG7eETQd1zHtWXjXIwNsdFELz5mgceLhOFUi5hh2N+5LZ4XHpvk/6zl3W4thy Q8Atyf1p3IqCWT6uxvFb5qm49yfvnWn4Dvx+CX1PSTldjg+qAPMZVTxt+cTECkx8 mHiSQmVMLzybNuthe4goNX2OhseODzsZoxCybavXS7rpataGA/5LJL2vVQp/QWZV lb/27BZPeFnMs5d0yNd2pHQhLeYosiHyAA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:21 2026 by rpki-client