$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa File: 5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa (raw, json) Hash identifier: qk10jWcCjzCLYgAfM3eeeJmDHo1XdUgnL+TBzKD26Xo= Subject key identifier: D8:A2:E1:2F:BE:0B:85:75:2D:C1:B5:4B:DE:16:AB:3F:5B:91:03:FA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF775C607A302572290B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:6400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:77:5c:60:7a:30:25:72:29:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3370dfe4-9b8b-431a-af7e-681ad32eeb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:7b:53:26:63:15:d9:a9:db:e5:c0:69:dd: 5f:be:a1:40:cc:e2:b9:c5:f6:75:be:10:98:85:4b: b5:d4:b3:2f:0c:12:ce:6f:fd:30:5b:c8:24:76:ff: 16:d5:c0:36:da:31:fc:ce:25:fc:01:33:df:e6:a9: 41:ab:86:72:93:98:b4:18:04:6a:d7:b5:ae:72:42: 9f:94:7d:45:80:69:82:21:c9:a7:8d:72:6c:5e:88: 4b:68:bb:f3:44:0e:f1:19:c9:6f:4f:3e:07:84:03: 6d:f2:24:97:f1:8e:eb:64:ae:7f:32:fb:39:c3:bb: 0e:09:c5:b8:02:15:00:08:47:33:f4:6a:20:26:93: 47:99:7b:49:33:40:52:c2:d5:76:bb:5e:58:f2:ce: b5:af:19:0c:3f:8a:e8:f8:f3:2c:ff:92:09:52:00: 89:d1:69:36:8d:84:ac:db:fb:60:3f:a6:2d:88:8d: 0a:1b:a1:c9:a9:97:29:9c:af:92:b9:7b:1e:9f:a4: 8a:02:9e:5d:a7:4e:93:66:e3:0c:de:fa:29:20:50: 7e:9c:6d:79:87:0d:04:f1:44:62:d0:6c:8f:be:3e: ad:2a:06:c9:8f:84:3b:70:34:7b:08:ce:8e:c1:32: 09:22:69:ad:c0:53:e9:8e:1f:b5:b0:0c:0b:14:61: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A2:E1:2F:BE:0B:85:75:2D:C1:B5:4B:DE:16:AB:3F:5B:91:03:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c3b88d7-dd8f-3454-bb9a-fc799be27732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:6400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:95:8c:50:c6:b1:13:5c:ef:e7:ea:82:fe:f2:79:22:87:32: b5:e5:53:d8:61:3f:d9:21:73:fa:ee:57:2c:d6:de:14:be:dd: 72:91:fa:53:12:f6:81:fc:bf:66:e1:15:ab:54:7d:7b:97:3c: 09:e9:68:93:8f:b3:c0:ba:7d:05:38:f9:2d:0e:4f:85:21:fd: 11:dd:86:fe:7e:36:bb:30:f9:fb:8b:d9:1c:55:37:73:61:54: f7:b2:da:e2:e8:92:5b:67:20:ac:39:2d:18:8f:23:db:e5:6e: c4:2b:e1:89:a3:53:54:b7:6c:6f:0e:a5:fb:b6:6c:b5:c2:75: 37:6b:c5:01:f9:84:17:0b:ab:12:d6:3a:07:fc:1a:7b:12:1d: 29:3e:72:9a:bd:e8:2c:25:82:5a:8d:a7:e9:a2:ea:c0:c0:32: d1:79:23:f1:55:f8:f2:98:1e:37:95:d4:71:b0:04:9a:ce:58: a6:03:3d:eb:f4:e9:47:4e:90:7c:92:7c:4f:7b:fc:5b:e6:7d: 82:70:a3:a3:bd:6f:9b:e9:69:e1:77:4c:3b:47:4d:96:51:eb: 36:f3:cf:fe:c8:a8:e9:08:00:ec:aa:ad:93:02:3a:6c:ef:71: d4:3c:69:fc:d0:44:ac:35:fd:bf:95:33:2e:1b:dd:c7:5b:71: cc:5c:5a:50 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k33dcYHowJXIpC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzM3MGRmZTQtOWI4Yi00MzFhLWFmN2UtNjgxYWQzMmVlYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNV7UyZjFdmp2+XAad1fvqFAzOK5xfZ1vhCY hUu11LMvDBLOb/0wW8gkdv8W1cA22jH8ziX8ATPf5qlBq4Zyk5i0GARq17WuckKf lH1FgGmCIcmnjXJsXohLaLvzRA7xGclvTz4HhANt8iSX8Y7rZK5/Mvs5w7sOCcW4 AhUACEcz9GogJpNHmXtJM0BSwtV2u15Y8s61rxkMP4ro+PMs/5IJUgCJ0Wk2jYSs 2/tgP6YtiI0KG6HJqZcpnK+SuXsen6SKAp5dp06TZuMM3vopIFB+nG15hw0E8URi 0GyPvj6tKgbJj4Q7cDR7CM6OwTIJImmtwFPpjh+1sAwLFGGTUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNii4S++C4V1LcG1S94Wqz9bkQP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWMzYjg4ZDctZGQ4Zi0z NDU0LWJiOWEtZmM3OTliZTI3NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuimQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkpWMUMaxE1zv5+qC/vJ5IocyteVT2GE/2SFz+u5XLNbeFL7dcpH6 UxL2gfy/ZuEVq1R9e5c8Celok4+zwLp9BTj5LQ5PhSH9Ed2G/n42uzD5+4vZHFU3 c2FU97La4uiSW2cgrDktGI8j2+VuxCvhiaNTVLdsbw6l+7ZstcJ1N2vFAfmEFwur EtY6B/waexIdKT5ymr3oLCWCWo2n6aLqwMAy0Xkj8VX48pgeN5XUcbAEms5YpgM9 6/TpR06QfJJ8T3v8W+Z9gnCjo71vm+lp4XdMO0dNllHrNvPP/sio6QgA7KqtkwI6 bO9x1Dxp/NBErDX9v5UzLhvdx1txzFxaUA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:47:05 2026 by rpki-client