$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa File: 9da71338-4f42-3df5-ac4d-a986c0adfd27.roa (raw, json) Hash identifier: RHKgJ7qqlvKxPXyrYiN/88cpu6D/bSng7iaj3W7K7Zg= Subject key identifier: 2F:A2:8D:D2:5F:47:86:2A:C0:64:D6:D8:19:83:2D:60:4F:8B:B0:7F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF678B6AEA186550B62280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8e:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:67:8b:6a:ea:18:65:50:b6:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=afdc0945-454f-40d5-9262-fd8bc9580759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:ef:c9:f3:e0:29:15:3d:ba:b6:28:93:8d: 3a:73:2d:51:c2:23:a5:1e:7e:32:a9:db:ea:8b:9a: fa:06:5b:94:ea:8e:a6:10:e0:70:71:20:9d:50:42: b7:88:80:84:d7:80:7e:ff:27:f2:a9:32:a4:ef:15: d5:73:19:da:b0:9f:8c:01:e9:26:de:42:c2:16:e1: ed:5e:9f:d4:41:d9:4b:43:fd:e9:04:be:11:54:8f: 61:29:e9:da:f1:e0:af:53:eb:80:7d:35:36:89:50: 12:15:8a:dd:f2:a5:59:7d:0e:ac:2e:64:45:80:1a: 2f:b1:20:c2:05:50:ac:b6:3e:42:e7:a7:6f:bd:7d: 95:62:cd:9f:f0:23:d9:62:a8:22:2e:d4:58:08:36: 6d:2c:30:18:7a:28:0a:a7:4e:ec:08:8a:de:a1:38: df:18:1f:97:bc:10:8e:b9:7b:d7:58:ea:3c:05:31: 6d:3a:c9:73:48:f5:b2:7e:10:49:1d:9b:53:93:9e: d8:f4:44:c3:f4:45:77:38:31:c4:2b:42:33:58:e0: 2c:e1:aa:80:89:36:b6:5e:a0:ae:f5:24:6f:76:4e: f5:6c:92:81:eb:d4:e7:b8:53:67:23:bb:61:b3:35: 63:ef:61:ea:a9:cd:1e:68:b2:e4:5e:12:9b:b4:06: 8b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A2:8D:D2:5F:47:86:2A:C0:64:D6:D8:19:83:2D:60:4F:8B:B0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9da71338-4f42-3df5-ac4d-a986c0adfd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c7:5a:ea:2d:1c:ad:a8:d5:c1:f7:3d:57:19:1a:58:ec:cd: 7f:cc:c0:68:30:ee:26:f1:16:e9:88:33:d7:5d:0d:9a:64:1e: aa:45:aa:5d:a4:ca:fb:0b:33:c4:01:64:55:a4:60:ac:04:4f: a5:60:53:6f:9b:3e:c0:cf:eb:49:b9:c8:c0:5e:42:24:f2:c8: c1:97:94:50:80:46:af:60:ee:44:db:11:b1:5f:70:dd:63:00: 83:0a:4d:04:72:6f:db:d2:bb:a2:15:81:81:11:f8:08:00:6a: 2f:3d:69:e1:4a:0d:78:b7:69:6b:c8:84:52:d7:5e:fb:a4:51: 8b:41:17:74:6d:db:87:07:b3:e3:15:6a:40:b5:ce:9b:1a:2f: 12:e9:c0:b1:7d:2a:6e:02:17:db:40:2c:1f:ee:db:29:88:76: d7:ed:70:28:e1:a2:59:42:f5:72:e1:45:7c:40:df:a7:a2:dc: 95:47:71:9a:1a:5e:0f:12:fa:ea:95:54:66:c1:ab:8d:5d:b4: e4:5e:a7:07:7d:64:08:d1:b3:84:6b:4c:61:f0:f3:07:fc:a4: f8:58:34:77:fa:fb:3d:91:c8:ca:1c:33:73:46:b9:95:26:a5: 8d:54:04:b9:32:81:2b:3b:bc:6d:69:32:93:03:f0:2f:4b:b9: d8:56:7c:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k32eLauoYZVC2IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWZkYzA5NDUtNDU0Zi00MGQ1LTkyNjItZmQ4YmM5NTgwNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRfvyfPgKRU9urYok406cy1RwiOlHn4yqdvq i5r6BluU6o6mEOBwcSCdUEK3iICE14B+/yfyqTKk7xXVcxnasJ+MAekm3kLCFuHt Xp/UQdlLQ/3pBL4RVI9hKena8eCvU+uAfTU2iVASFYrd8qVZfQ6sLmRFgBovsSDC BVCstj5C56dvvX2VYs2f8CPZYqgiLtRYCDZtLDAYeigKp07sCIreoTjfGB+XvBCO uXvXWOo8BTFtOslzSPWyfhBJHZtTk57Y9ETD9EV3ODHEK0IzWOAs4aqAiTa2XqCu 9SRvdk71bJKB69TnuFNnI7thszVj72Hqqc0eaLLkXhKbtAaLUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC+ijdJfR4YqwGTW2BmDLWBPi7B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWRhNzEzMzgtNGY0Mi0z ZGY1LWFjNGQtYTk4NmMwYWRmZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujogw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGMda6i0crajVwfc9VxkaWOzNf8zAaDDuJvEW6Ygz110NmmQeqkWq XaTK+wszxAFkVaRgrARPpWBTb5s+wM/rSbnIwF5CJPLIwZeUUIBGr2DuRNsRsV9w 3WMAgwpNBHJv29K7ohWBgRH4CABqLz1p4UoNeLdpa8iEUtde+6RRi0EXdG3bhwez 4xVqQLXOmxovEunAsX0qbgIX20AsH+7bKYh21+1wKOGiWUL1cuFFfEDfp6LclUdx mhpeDxL66pVUZsGrjV205F6nB31kCNGzhGtMYfDzB/yk+Fg0d/r7PZHIyhwzc0a5 lSaljVQEuTKBKzu8bWkykwPwL0u52FZ8Ng== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:25 2026 by rpki-client