$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa File: 654d5092-1090-3824-8f45-42e73fd230e9.roa (raw, json) Hash identifier: FBFtijPkwixTKOZI27+BUNh620xkRAVuGuoZqmBylUg= Subject key identifier: D6:01:31:24:E2:AA:9C:D9:A8:4B:68:6A:1F:C7:80:0C:1B:10:C0:AE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E1323C75D9E5DB1110DA00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:32:3c:75:d9:e5:db:11:10:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d18222b1-a312-4e65-8cc7-d8f3b8d3ba9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:6b:f0:42:ca:dc:97:ac:ad:03:b4:83:1a: f4:26:b7:73:57:24:92:35:88:39:c5:a7:23:64:87: d5:ca:28:b4:1b:5d:72:3e:f7:43:8b:06:7a:f7:e8: c7:3f:65:16:9a:76:fc:69:ea:5a:02:71:af:a1:ff: 7d:f3:64:7b:42:ba:fb:82:73:a1:e2:74:73:88:be: e1:f0:b0:e5:da:0f:57:16:25:89:33:05:51:a5:f3: df:f2:e5:41:4b:ba:82:63:26:87:6c:5d:f9:c3:29: b4:c5:d8:19:c5:d1:49:67:4e:1c:a8:3a:fe:d3:f9: 4b:e0:5d:8a:47:75:92:05:25:fc:3f:8f:b4:1d:69: 47:8d:fa:e3:ea:2f:a1:68:6e:6f:09:c4:96:79:9b: 1d:e8:09:96:f8:e1:5d:64:ee:ae:7b:af:eb:9f:c2: 29:7a:e8:5c:63:cc:9f:cd:42:7b:22:a2:57:62:23: ba:05:70:fc:3c:65:42:ae:22:4f:b7:d0:81:42:71: 04:aa:a7:85:10:e4:4c:ae:af:0a:12:6a:93:22:1a: a9:1e:93:67:41:94:4b:a0:54:eb:4c:44:93:df:fa: 4b:c4:8f:1b:9a:15:9d:34:ae:93:4c:9f:6f:e8:2e: c2:a4:44:3a:bf:d2:c7:49:07:cf:7c:5a:ca:53:a5: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:31:24:E2:AA:9C:D9:A8:4B:68:6A:1F:C7:80:0C:1B:10:C0:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/654d5092-1090-3824-8f45-42e73fd230e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f5:c8:c9:64:53:80:96:5d:09:64:8b:59:ea:0a:eb:76:4a: 27:21:a4:80:5f:05:ce:57:f3:1b:ad:b8:c1:a4:ca:9b:a9:5e: fb:56:4c:ec:5e:fa:85:de:d4:c4:d0:5f:61:38:22:eb:dd:c1: 49:f1:ca:13:24:60:18:b3:05:1a:5e:38:6a:c0:b8:45:36:0c: 07:9c:57:af:9b:50:a9:03:9a:1e:fe:27:bf:06:e1:44:2f:b8: 2d:c6:a3:eb:24:35:6c:1f:af:16:1c:15:7c:81:4d:71:76:ba: 4c:54:17:ec:06:b7:c9:30:46:2d:74:d8:81:15:08:ab:b2:c8: 36:e2:2a:26:23:d9:77:23:f1:18:aa:41:9d:ff:a1:bc:49:8f: 1f:94:ac:0f:35:90:4e:62:6a:50:87:4c:67:fb:ab:12:63:dc: c3:26:37:49:a5:3a:aa:97:53:75:0b:51:c9:e9:f6:53:ce:85: c5:c3:fc:30:c6:73:a6:98:e7:60:20:76:c8:5a:bb:99:c1:d7: 37:78:30:20:af:6d:dd:83:3a:92:76:5b:1b:3a:9d:e2:ef:2b: bc:c9:30:85:70:7e:fc:71:10:7e:a1:ba:d3:fe:69:b6:01:ab: cb:13:f5:51:72:9b:48:6c:a7:82:eb:f1:06:28:99:3d:50:cc: 2a:fb:51:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4TI8ddnl2xEQ2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDE4MjIyYjEtYTMxMi00ZTY1LThjYzctZDhmM2I4ZDNiYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVr8ELK3JesrQO0gxr0JrdzVySSNYg5xacj ZIfVyii0G11yPvdDiwZ69+jHP2UWmnb8aepaAnGvof9982R7Qrr7gnOh4nRziL7h 8LDl2g9XFiWJMwVRpfPf8uVBS7qCYyaHbF35wym0xdgZxdFJZ04cqDr+0/lL4F2K R3WSBSX8P4+0HWlHjfrj6i+haG5vCcSWeZsd6AmW+OFdZO6ue6/rn8IpeuhcY8yf zUJ7IqJXYiO6BXD8PGVCriJPt9CBQnEEqqeFEORMrq8KEmqTIhqpHpNnQZRLoFTr TEST3/pLxI8bmhWdNK6TTJ9v6C7CpEQ6v9LHSQfPfFrKU6WTWwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNYBMSTiqpzZqEtoah/HgAwbEMCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjU0ZDUwOTItMTA5MC0z ODI0LThmNDUtNDJlNzNmZDIzMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujIww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQvXIyWRTgJZdCWSLWeoK63ZKJyGkgF8FzlfzG624waTKm6le+1ZM 7F76hd7UxNBfYTgi693BSfHKEyRgGLMFGl44asC4RTYMB5xXr5tQqQOaHv4nvwbh RC+4Lcaj6yQ1bB+vFhwVfIFNcXa6TFQX7Aa3yTBGLXTYgRUIq7LINuIqJiPZdyPx GKpBnf+hvEmPH5SsDzWQTmJqUIdMZ/urEmPcwyY3SaU6qpdTdQtRyen2U86FxcP8 MMZzppjnYCB2yFq7mcHXN3gwIK9t3YM6knZbGzqd4u8rvMkwhXB+/HEQfqG60/5p tgGryxP1UXKbSGynguvxBiiZPVDMKvtRoA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:00 2026 by rpki-client