$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa File: a2f09972-83a4-3240-871a-2619e0b0b11e.roa (raw, json) Hash identifier: h/7+WGkwbkQJ7/TAHn/UCJ2Q+wRHdGN9Guap48mrD2M= Subject key identifier: 72:05:3A:30:AE:99:62:5D:3A:7C:BD:F2:65:8E:A5:AC:B5:31:2C:CC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D27AACE945FD8F50197A87700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8c:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ce:94:5f:d8:f5:01:97:a8:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=7568d7a4-a0f6-4ea4-b5df-d539c307bfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:31:4d:33:8a:30:cd:fb:10:82:33:9c:6f: 6d:f5:03:ef:84:ce:d3:04:25:f7:fb:82:b3:c2:bd: cf:8a:d5:1d:ff:e8:bb:3d:65:03:f5:8a:0e:69:52: 73:32:de:f2:fd:50:67:67:cd:34:e4:bb:75:31:14: 4d:38:8f:b4:25:52:dd:9c:53:b1:5f:a1:79:dd:ea: 39:bf:81:a3:aa:be:d3:5b:c8:b0:93:32:d1:b2:bb: 6b:aa:c2:5f:9a:fb:78:f0:eb:fc:59:1c:41:f4:ae: 5c:bd:77:9f:37:9c:fb:4a:79:df:35:06:22:33:0b: 30:28:d1:c9:6a:bc:1f:71:be:70:84:ab:84:40:69: 65:4f:46:c8:02:4c:be:5a:99:72:be:06:ad:66:0c: 95:dd:77:0b:d8:e7:a0:34:1c:cc:4d:de:b7:7d:2c: 65:15:c4:0e:8e:40:3c:de:54:f1:9d:28:bb:0e:ca: 3a:0b:4a:aa:e2:18:7c:00:e3:26:a4:ec:54:4d:ea: 90:54:41:96:dc:97:c7:0c:80:06:0d:99:38:77:cb: bb:94:48:d3:af:53:fd:62:29:14:a7:e9:8e:d2:bc: 49:58:a7:a2:c4:61:1c:60:e6:a3:89:04:70:b7:98: b7:a6:f8:93:80:48:73:cd:29:a5:36:6f:da:5c:b4: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:05:3A:30:AE:99:62:5D:3A:7C:BD:F2:65:8E:A5:AC:B5:31:2C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2f09972-83a4-3240-871a-2619e0b0b11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c8:f9:f4:16:49:bb:17:a0:25:35:b6:7f:cf:6d:c5:d1:de: e1:36:6e:47:3c:37:82:a2:9b:0c:a3:af:30:09:6d:1a:77:6e: b4:ba:6a:d3:9c:9d:69:60:b1:ed:7e:cd:05:b2:9b:21:57:21: 2f:cf:24:be:cb:0a:44:cc:4a:f4:e2:b2:0c:a8:3d:66:d6:d0: 03:fb:04:a2:cb:ee:0b:13:1a:e9:d8:0c:84:ee:b6:f6:7c:4f: 8e:c0:22:ff:e5:d2:5d:0a:89:bc:6e:c8:a2:96:09:20:9d:00: a9:af:c7:ce:87:21:36:da:9a:b9:d0:4e:fc:1b:36:fe:55:f1: c2:a2:b2:c2:da:33:3f:b5:c9:f9:cd:10:ff:35:4d:6b:94:81: a8:76:57:60:c4:fc:98:87:df:cc:e3:c1:5b:16:76:48:e7:c3: 43:ed:e4:7f:5c:2a:95:b4:d9:1e:2c:4d:27:c9:25:a6:59:6f: 73:a7:31:98:2f:e5:1c:46:7b:40:98:61:21:e4:7c:8e:26:5a: 51:b1:d3:95:63:51:5f:db:96:10:ed:05:fa:17:b7:83:5a:7d: 80:c9:0f:29:64:e8:41:77:b2:b3:98:5f:4f:86:65:0b:f7:7f: 5e:e9:d1:dc:c1:8c:1f:c5:2f:a2:70:1c:10:92:44:5f:df:b8: 3d:be:4b:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqs6UX9j1AZeodwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NzU2OGQ3YTQtYTBmNi00ZWE0LWI1ZGYtZDUzOWMzMDdiZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd0xTTOKMM37EIIznG9t9QPvhM7TBCX3+4Kz wr3PitUd/+i7PWUD9YoOaVJzMt7y/VBnZ8005Lt1MRRNOI+0JVLdnFOxX6F53eo5 v4Gjqr7TW8iwkzLRsrtrqsJfmvt48Ov8WRxB9K5cvXefN5z7SnnfNQYiMwswKNHJ arwfcb5whKuEQGllT0bIAky+WplyvgatZgyV3XcL2OegNBzMTd63fSxlFcQOjkA8 3lTxnSi7Dso6C0qq4hh8AOMmpOxUTeqQVEGW3JfHDIAGDZk4d8u7lEjTr1P9YikU p+mO0rxJWKeixGEcYOajiQRwt5i3pviTgEhzzSmlNm/aXLRBVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHIFOjCumWJdOny98mWOpay1MSzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmMDk5NzItODNhNC0z MjQwLTg3MWEtMjYxOWUwYjBiMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujEQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIcj59BZJuxegJTW2f89txdHe4TZuRzw3gqKbDKOvMAltGndutLpq 05ydaWCx7X7NBbKbIVchL88kvssKRMxK9OKyDKg9ZtbQA/sEosvuCxMa6dgMhO62 9nxPjsAi/+XSXQqJvG7IopYJIJ0Aqa/HzochNtqaudBO/Bs2/lXxwqKywtozP7XJ +c0Q/zVNa5SBqHZXYMT8mIffzOPBWxZ2SOfDQ+3kf1wqlbTZHixNJ8klpllvc6cx mC/lHEZ7QJhhIeR8jiZaUbHTlWNRX9uWEO0F+he3g1p9gMkPKWToQXeys5hfT4Zl C/d/XunR3MGMH8UvonAcEJJEX9+4Pb5LSg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:21 2026 by rpki-client