$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa File: a04a33de-95c6-3ceb-9db4-fede37f5994a.roa (raw, json) Hash identifier: VAUSNzxtNPJHmAXqUjJjGPY6113HXXcXuv1ZRvgHpD8= Subject key identifier: 8B:84:3E:08:13:78:85:75:F1:3C:81:B5:1A:54:4E:CF:0F:72:90:38 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D3623D9877AA6C8A4A12F7300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa Signing time: Wed 18 Mar 2026 17:27:28 +0000 ROA not before: Wed 18 Mar 2026 17:27:28 +0000 ROA not after: Tue 16 Jun 2026 17:27:28 +0000 asID: 30036 IP address blocks: 2604:2e8f:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:23:d9:87:7a:a6:c8:a4:a1:2f:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 18 17:27:28 2026 GMT Not After : Jun 16 17:27:28 2026 GMT Subject: CN=05436605-31e4-4306-867a-c422089be703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:9b:20:b2:bc:b3:5e:0d:94:3c:d5:16:a0: 35:b7:c3:b5:3f:14:90:58:7d:b0:5e:2f:e2:48:4e: 5f:15:cf:20:a3:2c:57:c3:19:b8:cf:3d:55:d3:a0: d2:69:80:aa:b8:c5:36:84:3b:20:cb:1c:66:30:ea: f5:f0:2e:83:22:17:cb:16:fd:1f:d8:54:db:b6:f0: 05:68:9d:9f:33:5a:1c:e7:b2:57:2b:4e:17:4b:fe: f0:34:87:ee:4a:7c:05:88:f8:1c:9c:0d:e9:a5:ac: 7a:dd:4b:97:5d:f7:e0:33:2e:9e:29:06:87:55:48: 91:48:01:1b:0e:a8:f4:89:0e:75:c3:1b:6d:62:70: d6:b6:8c:ae:76:10:41:3d:93:29:f5:3a:df:bd:74: 49:df:e0:20:1f:4f:ce:35:4b:b7:d3:ba:87:b6:9e: 44:15:4d:12:d6:a3:d7:44:09:44:c1:07:11:24:95: c7:25:e8:22:9b:2f:dc:00:96:80:e6:dd:e5:4d:e3: 69:c4:2a:57:31:bd:e6:6d:0e:13:45:2d:20:d1:65: 56:a9:af:02:d0:4b:2f:ff:ae:d1:64:2f:68:fc:97: ee:a4:8a:a2:f0:fb:cf:6d:4e:c5:e1:40:5c:e8:d1: 07:cb:84:16:cb:09:a4:25:07:31:2f:7f:69:42:49: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:84:3E:08:13:78:85:75:F1:3C:81:B5:1A:54:4E:CF:0F:72:90:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a04a33de-95c6-3ceb-9db4-fede37f5994a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:20:8b:7b:16:e0:35:47:07:5d:e2:e3:8c:d4:7f:c0:27:33: 1c:4b:f1:18:d9:80:28:1e:08:7f:f9:12:75:63:d2:a4:ef:25: 3c:ec:2a:7d:f0:d4:1b:9a:cc:e3:85:21:67:c4:46:ba:33:7a: 32:30:33:83:86:93:df:18:09:b1:db:28:c8:57:88:d2:8e:e7: 5a:f6:e2:35:91:2c:af:68:c5:7b:f0:ab:38:69:5c:c1:ce:c0: 5e:e6:1d:2e:88:81:a4:b6:32:50:c7:39:40:13:f7:9f:82:14: 13:d2:d5:a7:17:3d:0c:91:f8:64:77:5d:77:8e:52:b6:6f:11: 1b:2c:0a:5e:19:b9:7b:e3:b9:af:ff:81:0f:db:67:5d:75:5f: c6:c0:99:50:bd:a1:03:a7:d5:6e:77:63:ac:25:05:f8:ad:55: dd:aa:0c:0f:2e:7b:25:ab:18:4f:fa:fa:ea:6c:e2:bc:59:68: e6:b6:11:6a:f5:ab:68:0e:2b:41:a3:d3:67:e9:ba:ac:34:ff: a8:62:8b:40:76:1a:5f:86:27:5a:d3:e4:f4:80:75:ae:79:2f: c7:41:c3:57:21:76:68:f3:39:fa:32:1a:c6:3d:e0:2c:83:92: 43:1b:40:93:bd:0c:a3:2b:61:8b:cd:79:3c:36:22:c9:23:97: ed:51:9c:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE02I9mHeqbIpKEvcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxODE3MjcyOFoXDTI2MDYxNjE3MjcyOFowLzEtMCsGA1UEAxMk MDU0MzY2MDUtMzFlNC00MzA2LTg2N2EtYzQyMjA4OWJlNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0mbILK8s14NlDzVFqA1t8O1PxSQWH2wXi/i SE5fFc8goyxXwxm4zz1V06DSaYCquMU2hDsgyxxmMOr18C6DIhfLFv0f2FTbtvAF aJ2fM1oc57JXK04XS/7wNIfuSnwFiPgcnA3ppax63UuXXffgMy6eKQaHVUiRSAEb Dqj0iQ51wxttYnDWtoyudhBBPZMp9TrfvXRJ3+AgH0/ONUu307qHtp5EFU0S1qPX RAlEwQcRJJXHJegimy/cAJaA5t3lTeNpxCpXMb3mbQ4TRS0g0WVWqa8C0Esv/67R ZC9o/JfupIqi8PvPbU7F4UBc6NEHy4QWywmkJQcxL39pQklqaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIuEPggTeIV18TyBtRpUTs8PcpA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTA0YTMzZGUtOTVjNi0z Y2ViLTlkYjQtZmVkZTM3ZjU5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj0ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhSCLexbgNUcHXeLjjNR/wCczHEvxGNmAKB4If/kSdWPSpO8lPOwq ffDUG5rM44UhZ8RGujN6MjAzg4aT3xgJsdsoyFeI0o7nWvbiNZEsr2jFe/CrOGlc wc7AXuYdLoiBpLYyUMc5QBP3n4IUE9LVpxc9DJH4ZHddd45Stm8RGywKXhm5e+O5 r/+BD9tnXXVfxsCZUL2hA6fVbndjrCUF+K1V3aoMDy57JasYT/r66mzivFlo5rYR avWraA4rQaPTZ+m6rDT/qGKLQHYaX4YnWtPk9IB1rnkvx0HDVyF2aPM5+jIaxj3g LIOSQxtAk70Moythi815PDYiySOX7VGccA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:28:36 2026 by rpki-client