$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa File: 9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa (raw, json) Hash identifier: wPsXSFtauXltBG+g82QU+GwoQ24bGt5chWsdduTbLQU= Subject key identifier: 3E:7A:42:78:56:53:85:AC:AF:21:57:60:65:89:B6:85:F9:06:DB:50 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF71E75B961679260E4340 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8d:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:71:e7:5b:96:16:79:26:0e:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=58ab0581-d3ac-43cb-841e-224566f6ca41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:af:d2:f3:2d:cc:a6:45:92:de:fe:10:c3: c7:12:47:0c:28:47:d9:77:8a:38:1c:2a:5f:34:d5: 9b:36:8a:29:45:ee:e9:5b:0b:5a:cf:d5:0c:64:47: 01:ba:50:0f:cf:d0:00:2e:fb:f9:eb:4d:1a:03:7a: 4a:41:96:08:c3:1a:55:e3:2f:12:d7:46:da:4a:a7: c1:72:ca:da:d3:81:60:60:a0:c8:89:fd:2b:a2:5f: d6:2c:36:48:c6:10:5b:bf:27:f8:45:33:3d:6c:d3: 01:69:50:24:0d:22:36:19:7e:be:92:89:4d:7a:ee: f8:6f:dd:dc:5d:ef:66:2a:7b:5d:eb:af:66:ac:0d: 36:a1:0a:08:f9:ce:92:fd:03:b3:59:9e:47:e0:b9: 48:73:bb:9a:d9:84:ba:1d:e3:bd:34:70:0b:45:99: 35:a8:e1:c6:00:09:86:dd:87:c9:6c:ed:3f:41:0e: 7f:8c:15:e8:03:2e:12:1a:1e:27:54:2d:9d:b0:d0: 2f:38:51:04:a4:a7:f3:87:3c:e4:89:6a:17:cd:0c: 20:35:07:24:1b:15:d5:30:d6:f2:b2:36:75:a4:c7: 60:2b:8d:4b:f8:40:d3:ee:7f:3a:7a:a7:e8:7f:1b: 3a:08:9d:4e:ac:66:aa:46:4d:3e:f0:71:15:f4:b3: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:42:78:56:53:85:AC:AF:21:57:60:65:89:B6:85:F9:06:DB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9956d50e-8c5c-39a6-a679-bfb09b3987d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d1:52:a3:20:6c:9f:86:43:26:fa:c5:3c:2e:29:5b:21:0c: 6b:a6:67:f7:88:3b:6e:25:0f:37:78:35:1b:f2:27:da:66:9a: df:f7:d1:f0:5f:0f:b6:0f:61:9e:82:0b:97:e8:bd:b4:f5:aa: 69:62:bb:4c:ee:80:bc:89:da:7b:7c:58:89:ea:79:7a:a1:81: b5:66:34:ea:93:b5:10:b4:04:94:f7:f5:82:24:46:c4:65:dd: d7:ef:19:b1:f2:8b:33:fb:aa:36:da:fe:76:cb:c4:00:72:2a: 8c:1d:89:0e:fb:a6:54:6e:82:e8:78:ac:ae:b8:5f:1d:a4:c5: cc:91:01:b9:92:75:ab:5f:bb:ad:37:29:dd:4d:50:c7:07:98: 06:0e:2c:96:a4:b1:73:1a:ef:84:15:ab:d7:05:ef:ee:59:b2: ab:e0:85:85:39:6d:d0:43:b5:fd:7d:27:04:32:13:2e:e9:fd: c3:9f:9e:df:3f:d3:c9:26:83:cf:af:ac:64:6f:6a:dd:b1:c5: d7:26:63:a0:c4:cc:c8:6c:bc:eb:ae:72:d2:15:f0:8d:2c:dc: 7d:94:07:67:68:79:40:e7:bb:f7:37:3c:1c:f1:9d:e0:c9:02: 55:8f:46:72:5e:3d:59:b8:ce:0e:75:de:7f:be:99:8e:8f:7e: 7d:18:93:1b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k33HnW5YWeSYOQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NThhYjA1ODEtZDNhYy00M2NiLTg0MWUtMjI0NTY2ZjZjYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF2v0vMtzKZFkt7+EMPHEkcMKEfZd4o4HCpf NNWbNoopRe7pWwtaz9UMZEcBulAPz9AALvv5600aA3pKQZYIwxpV4y8S10baSqfB csra04FgYKDIif0rol/WLDZIxhBbvyf4RTM9bNMBaVAkDSI2GX6+kolNeu74b93c Xe9mKntd669mrA02oQoI+c6S/QOzWZ5H4LlIc7ua2YS6HeO9NHALRZk1qOHGAAmG 3YfJbO0/QQ5/jBXoAy4SGh4nVC2dsNAvOFEEpKfzhzzkiWoXzQwgNQckGxXVMNby sjZ1pMdgK41L+EDT7n86eqfofxs6CJ1OrGaqRk0+8HEV9LNygwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD56QnhWU4WsryFXYGWJtoX5BttQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTk1NmQ1MGUtOGM1Yy0z OWE2LWE2NzktYmZiMDliMzk4N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujRQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYtFSoyBsn4ZDJvrFPC4pWyEMa6Zn94g7biUPN3g1G/In2maa3/fR 8F8Ptg9hnoILl+i9tPWqaWK7TO6AvInae3xYiep5eqGBtWY06pO1ELQElPf1giRG xGXd1+8ZsfKLM/uqNtr+dsvEAHIqjB2JDvumVG6C6HisrrhfHaTFzJEBuZJ1q1+7 rTcp3U1QxweYBg4slqSxcxrvhBWr1wXv7lmyq+CFhTlt0EO1/X0nBDITLun9w5+e 3z/TySaDz6+sZG9q3bHF1yZjoMTMyGy8665y0hXwjSzcfZQHZ2h5QOe79zc8HPGd 4MkCVY9Gcl49WbjODnXef76Zjo9+fRiTGw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:29 2026 by rpki-client