$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8431e625-b9d4-3df3-be25-7c7e28c7879d.roa File: 8431e625-b9d4-3df3-be25-7c7e28c7879d.roa (raw, json) Hash identifier: GOOMIvg52/5j+ithAKcXjK190pxiQCbM8KVdI7W2Vzg= Subject key identifier: DA:72:AE:2C:79:FB:24:D2:1B:4F:B2:30:9C:04:83:B0:13:18:29:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D27AA21582852C0BE5C854580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8431e625-b9d4-3df3-be25-7c7e28c7879d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8b:9800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:21:58:28:52:c0:be:5c:85:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c3699f8c-a2b3-4c23-96b3-dcfac66bfa90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:d7:78:90:8b:06:e8:03:88:99:16:26:49: d0:e4:5f:7e:73:58:dc:99:0a:d3:5d:d5:2a:2a:85: 57:c6:8e:d0:4b:27:01:83:d2:9b:2c:32:af:61:73: d7:a7:f3:9c:27:a7:43:a0:99:1e:42:9d:cf:5b:e3: 9f:64:b7:28:c3:05:ff:b5:97:62:4e:31:b4:5d:37: a5:09:3f:21:1e:62:3d:c7:53:6b:31:81:1d:f0:5a: ab:06:93:13:23:4e:ee:bf:82:dc:66:1f:3d:1e:de: 86:63:87:05:ac:23:6d:a1:ad:25:72:e1:33:0b:31: 7c:1e:e6:4d:fa:ba:8a:71:db:37:a5:8d:8b:93:80: 56:ca:38:3a:5f:a5:47:af:de:30:82:23:c0:b6:7e: 38:7a:01:26:8b:d9:c4:ab:1e:25:b2:d0:8d:7a:d1: 87:24:4d:aa:f2:16:8b:d1:d9:10:cd:c4:1e:9c:10: 79:d7:66:35:17:0f:54:0d:dd:2f:90:df:78:a0:4f: db:e7:80:4a:29:42:49:0b:88:dc:75:f2:3e:72:9b: 80:4f:22:dc:6e:7a:9c:c1:53:c3:8c:ee:7f:1c:5c: 3a:92:fe:89:40:25:cf:02:68:3d:82:e9:fe:f6:7a: 4b:db:c0:13:8b:2d:03:77:67:cb:ce:58:a9:91:97: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:72:AE:2C:79:FB:24:D2:1B:4F:B2:30:9C:04:83:B0:13:18:29:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8431e625-b9d4-3df3-be25-7c7e28c7879d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:9800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:49:34:c6:85:38:62:4d:8f:44:3f:6b:f2:ab:5b:6a:42:c8: 58:49:f8:45:27:41:36:19:99:1f:d7:ef:bd:4f:a4:8f:50:45: ad:2a:8c:30:39:c0:70:59:28:bf:b2:86:42:6a:2b:14:d2:4b: ce:ee:3a:0e:56:10:e5:71:e9:73:0c:f2:df:2a:87:7d:da:d6: b8:fa:38:ea:e5:d4:12:f6:45:50:83:73:fa:83:8b:e4:54:33: a2:7c:b4:68:1d:62:89:f0:13:bd:1f:3d:90:18:56:3d:1b:10: 10:8a:85:e5:2f:ef:7c:61:a1:a9:c7:7f:ae:c8:5f:09:6b:62: bc:bc:a5:5c:fd:3c:f9:69:07:7b:ad:6f:58:c0:50:85:97:ba: 40:47:37:e8:15:ae:67:cc:a0:33:3b:02:ae:0c:6f:27:f0:39: 0e:38:45:df:ae:3f:ed:dc:a3:49:fe:e8:47:d9:dc:72:d2:d6: 2a:cc:f6:1c:80:3f:49:54:02:fb:dd:45:91:0c:77:79:ac:ec: 7c:d7:77:27:ca:0d:20:2c:07:9e:c8:fb:5a:31:f4:58:a7:44: f3:ea:4b:45:75:ab:3e:d1:83:2b:e0:5e:cb:0d:53:39:f2:23: 5d:5f:52:bf:fd:4c:64:c3:ac:54:61:33:5b:c5:98:a2:be:50: 8f:5b:69:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqiFYKFLAvlyFRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzM2OTlmOGMtYTJiMy00YzIzLTk2YjMtZGNmYWM2NmJmYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkDXeJCLBugDiJkWJknQ5F9+c1jcmQrTXdUq KoVXxo7QSycBg9KbLDKvYXPXp/OcJ6dDoJkeQp3PW+OfZLcowwX/tZdiTjG0XTel CT8hHmI9x1NrMYEd8FqrBpMTI07uv4LcZh89Ht6GY4cFrCNtoa0lcuEzCzF8HuZN +rqKcds3pY2Lk4BWyjg6X6VHr94wgiPAtn44egEmi9nEqx4lstCNetGHJE2q8haL 0dkQzcQenBB512Y1Fw9UDd0vkN94oE/b54BKKUJJC4jcdfI+cpuATyLcbnqcwVPD jO5/HFw6kv6JQCXPAmg9gun+9npL28ATiy0Dd2fLzlipkZcjqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNpyrix5+yTSG0+yMJwEg7ATGClkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQzMWU2MjUtYjlkNC0z ZGYzLWJlMjUtN2M3ZTI4Yzc4NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui5gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPkk0xoU4Yk2PRD9r8qtbakLIWEn4RSdBNhmZH9fvvU+kj1BFrSqM MDnAcFkov7KGQmorFNJLzu46DlYQ5XHpcwzy3yqHfdrWuPo46uXUEvZFUINz+oOL 5FQzony0aB1iifATvR89kBhWPRsQEIqF5S/vfGGhqcd/rshfCWtivLylXP08+WkH e61vWMBQhZe6QEc36BWuZ8ygMzsCrgxvJ/A5DjhF364/7dyjSf7oR9ncctLWKsz2 HIA/SVQC+91FkQx3eazsfNd3J8oNICwHnsj7WjH0WKdE8+pLRXWrPtGDK+Beyw1T OfIjXV9Sv/1MZMOsVGEzW8WYor5Qj1tpTw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:50 2026 by rpki-client