$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa File: 4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa (raw, json) Hash identifier: 25zkjMFAi6G/5FqBR4JIirfqZNviy9z2Z5cRpYwoVhg= Subject key identifier: E9:29:46:CF:47:7C:E9:76:D6:24:A1:67:41:65:B8:37:AB:EC:7E:CF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF5F7FFA4ABC383D151F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:5f:7f:fa:4a:bc:38:3d:15:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=66b4c08e-3eff-48cd-9aeb-7b6723e5f090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:6a:bc:bd:46:10:bd:52:bb:5a:30:7d:28: f2:54:0a:69:b9:ea:b3:94:cf:87:47:06:93:66:29: c4:a7:ec:8d:bd:88:3a:b7:ec:11:0e:05:34:3c:a7: f6:6f:4f:4a:15:af:0b:92:cf:37:2f:fb:d9:e0:3c: a7:ec:14:d0:af:f9:f5:b9:24:2c:60:28:e6:50:42: 4e:01:e8:2c:7a:0b:47:c6:e9:d3:2d:50:a3:5a:58: 85:38:e3:47:a1:0a:24:e0:9a:db:0e:64:ba:16:08: 5f:5f:5b:24:02:c3:d9:8f:6a:c4:1d:59:09:e9:e4: b4:80:63:f8:fe:e9:92:2b:dd:a1:51:16:cf:f4:d5: 0b:20:2f:e6:c0:1f:cc:2e:36:51:0e:fe:db:8d:63: 85:8e:65:62:a4:ea:75:2e:93:fc:bf:3a:d5:bb:08: 87:d4:09:fa:d6:46:e5:2f:29:a9:ba:b5:21:34:98: 44:d1:36:76:f0:c6:40:08:ee:cf:78:fe:6c:9e:d0: 12:c1:20:6c:2a:3c:03:7a:3f:83:76:e1:35:96:3f: 42:18:00:90:64:54:59:b9:47:65:6e:2e:40:eb:a7: 62:89:48:13:2f:ca:b9:35:b6:a0:3b:ac:69:cf:16: 19:e9:b3:b6:a6:d4:aa:4a:3b:e6:ca:e3:1c:c0:dd: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:29:46:CF:47:7C:E9:76:D6:24:A1:67:41:65:B8:37:AB:EC:7E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5c3aae-7e4d-3b68-abbe-e12fd2c2f719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e7:75:86:25:5e:51:83:7f:cf:00:d6:03:d2:4d:61:b6:88: 00:0f:46:ec:16:63:02:55:78:a0:75:4e:ca:73:5f:c9:98:d9: 82:f5:2f:38:18:98:4e:b0:84:90:77:71:f8:6f:51:6c:cc:a9: 4b:44:81:02:a8:7c:e7:54:ab:10:0d:af:6a:8f:33:c3:b9:08: e8:56:ed:e2:a2:f6:2c:34:77:ad:66:19:47:46:22:e6:e6:fc: 77:89:52:7a:5d:22:a9:8b:ac:bb:73:ed:7d:e8:76:9c:b0:45: 02:71:ac:1d:73:f1:4a:11:34:50:c5:af:2d:58:05:21:c6:b1: 67:e0:b9:4a:66:b2:00:d3:46:09:a7:12:00:c4:17:ee:91:af: a4:fd:31:64:9a:4c:1c:63:23:f5:62:ca:fc:a7:1f:d9:1e:44: 9f:04:39:d2:a4:a0:30:7f:53:bc:6c:e5:4b:13:26:05:9a:d9: dd:6d:be:ef:30:c7:cf:c6:44:ba:cd:00:a2:ee:83:3f:c8:ba: 25:ac:fc:fa:4b:3f:ec:4d:69:88:f1:7f:4a:c4:96:b5:54:6c: 52:7e:60:57:58:ed:bf:35:35:4f:93:3e:03:3c:77:83:10:4a: 8f:d9:4c:36:92:dd:10:67:bb:c3:94:c4:88:a7:c4:0f:7d:28: 2d:42:c5:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k319/+kq8OD0VH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjZiNGMwOGUtM2VmZi00OGNkLTlhZWItN2I2NzIzZTVmMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QNqvL1GEL1Su1owfSjyVAppueqzlM+HRwaT ZinEp+yNvYg6t+wRDgU0PKf2b09KFa8Lks83L/vZ4Dyn7BTQr/n1uSQsYCjmUEJO AegsegtHxunTLVCjWliFOONHoQok4JrbDmS6FghfX1skAsPZj2rEHVkJ6eS0gGP4 /umSK92hURbP9NULIC/mwB/MLjZRDv7bjWOFjmVipOp1LpP8vzrVuwiH1An61kbl LympurUhNJhE0TZ28MZACO7PeP5sntASwSBsKjwDej+DduE1lj9CGACQZFRZuUdl bi5A66diiUgTL8q5NbagO6xpzxYZ6bO2ptSqSjvmyuMcwN1BRwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOkpRs9HfOl21iShZ0FluDer7H7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YzNhYWUtN2U0ZC0z YjY4LWFiYmUtZTEyZmQyYzJmNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuihww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFed1hiVeUYN/zwDWA9JNYbaIAA9G7BZjAlV4oHVOynNfyZjZgvUv OBiYTrCEkHdx+G9RbMypS0SBAqh851SrEA2vao8zw7kI6Fbt4qL2LDR3rWYZR0Yi 5ub8d4lSel0iqYusu3Ptfeh2nLBFAnGsHXPxShE0UMWvLVgFIcaxZ+C5SmayANNG CacSAMQX7pGvpP0xZJpMHGMj9WLK/Kcf2R5EnwQ50qSgMH9TvGzlSxMmBZrZ3W2+ 7zDHz8ZEus0Aou6DP8i6Jaz8+ks/7E1piPF/SsSWtVRsUn5gV1jtvzU1T5M+Azx3 gxBKj9lMNpLdEGe7w5TEiKfED30oLULFRA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:44 2026 by rpki-client