$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json) Hash identifier: 2ymag/d2JR+lsgHdPyzPSElozXJrYYP8T8bEIEMe6s4= Subject key identifier: 09:75:A2:2D:10:A2:5B:49:FA:D9:F8:50:32:BA:F1:FE:38:AC:FA:71 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E1180DEC8A55E6963BC200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:18:0d:ec:8a:55:e6:96:3b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=22b803de-dd0e-4d95-a1cd-88e081df1ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:8e:d6:22:b0:04:81:79:c3:77:1d:5d:c8: 44:5a:87:b7:87:3d:25:5b:91:79:8c:a7:4f:a3:d0: 0c:29:1c:c1:8f:c2:a3:82:92:66:c7:af:44:0d:da: 83:3d:99:f5:c9:86:df:04:8e:11:e8:88:6b:13:d8: 1f:fa:d7:8e:91:59:54:05:03:df:38:17:29:c6:39: e7:b8:c0:a9:c9:35:5c:d0:bd:d0:87:92:e2:f5:4f: 1a:ae:3c:54:45:f8:4e:f3:b9:af:25:39:bc:74:b7: d8:35:d9:bf:ba:48:2a:8f:3e:9b:a6:83:cc:cd:4c: 3d:fd:4a:0e:4e:13:34:13:7e:54:50:8a:6b:97:73: 33:1e:c7:8c:b0:d3:2c:6f:ed:2b:1e:b8:4a:69:cf: 1e:c7:c7:43:6e:a6:4c:80:11:ae:91:cd:97:08:fa: 44:8c:cc:03:7d:21:e8:13:46:9b:1e:0f:f9:8a:39: 48:70:f2:96:81:4a:83:f3:e9:9c:04:9c:2c:2e:9d: 07:15:b5:bf:9a:50:ca:8c:c2:26:aa:4c:d8:de:eb: f1:c8:c7:38:49:9f:7d:3e:a1:a1:16:67:9a:6a:9b: e5:cb:a0:30:c8:88:3a:c3:49:5b:3f:b1:85:b6:f8: 59:9a:d9:c6:38:45:45:55:ac:4c:41:65:d7:d7:3c: 22:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:75:A2:2D:10:A2:5B:49:FA:D9:F8:50:32:BA:F1:FE:38:AC:FA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4a:66:ce:6b:0a:56:e5:c3:18:35:af:9d:e3:9b:46:c4:d8: a6:5f:7c:1e:fa:6b:56:79:53:f2:6d:a5:b4:71:77:53:f9:4c: 34:1b:f7:9a:02:a7:c4:b7:fe:3f:95:f2:08:11:4f:86:fb:0d: 48:4a:8d:34:f7:7a:bb:28:f6:f0:6d:f6:4a:bb:9a:63:6c:dc: 0e:a2:27:2a:f5:37:2d:47:12:1a:1b:62:16:a1:02:8d:50:38: ea:ee:2d:05:fc:58:d5:25:6b:89:33:78:56:b3:77:44:cd:53: 42:f9:ec:f1:51:fb:64:7c:f6:21:2b:6f:f7:2c:4b:bb:80:51: 60:68:a5:18:27:46:6a:e8:e5:4e:01:a6:eb:01:a0:3a:66:91: af:ec:65:1a:fc:d5:ab:73:d2:41:9d:c0:80:03:24:53:58:17: eb:01:35:a8:4d:f0:3b:db:db:49:3b:1a:5e:c3:a4:2f:87:bb: 90:dd:f7:00:ad:20:2e:bb:ff:87:0e:35:f6:62:d1:92:e5:db: ee:3c:2e:bb:46:d7:94:f6:f0:dc:87:9d:68:bb:ea:6f:d5:d4: c3:77:7c:c6:1e:55:b7:30:ae:23:1a:f1:1e:c2:e9:cc:cd:22: d0:9b:40:ca:b4:51:40:14:af:60:9d:41:4a:3d:de:30:e9:07: 8c:2a:b1:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4RgN7IpV5pY7wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjJiODAzZGUtZGQwZS00ZDk1LWExY2QtODhlMDgxZGYxYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSWO1iKwBIF5w3cdXchEWoe3hz0lW5F5jKdP o9AMKRzBj8KjgpJmx69EDdqDPZn1yYbfBI4R6IhrE9gf+teOkVlUBQPfOBcpxjnn uMCpyTVc0L3Qh5Li9U8arjxURfhO87mvJTm8dLfYNdm/ukgqjz6bpoPMzUw9/UoO ThM0E35UUIprl3MzHseMsNMsb+0rHrhKac8ex8dDbqZMgBGukc2XCPpEjMwDfSHo E0abHg/5ijlIcPKWgUqD8+mcBJwsLp0HFbW/mlDKjMImqkzY3uvxyMc4SZ99PqGh Fmeaapvly6AwyIg6w0lbP7GFtvhZmtnGOEVFVaxMQWXX1zwiHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAl1oi0QoltJ+tn4UDK68f44rPpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZjU0MzEtNWZjZS0z NmQwLTg0YTgtMGExOWY3YTAzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAX0pmzmsKVuXDGDWvneObRsTYpl98HvprVnlT8m2ltHF3U/lMNBv3 mgKnxLf+P5XyCBFPhvsNSEqNNPd6uyj28G32SruaY2zcDqInKvU3LUcSGhtiFqEC jVA46u4tBfxY1SVriTN4VrN3RM1TQvns8VH7ZHz2IStv9yxLu4BRYGilGCdGaujl TgGm6wGgOmaRr+xlGvzVq3PSQZ3AgAMkU1gX6wE1qE3wO9vbSTsaXsOkL4e7kN33 AK0gLrv/hw419mLRkuXb7jwuu0bXlPbw3IedaLvqb9XUw3d8xh5VtzCuIxrxHsLp zM0i0JtAyrRRQBSvYJ1BSj3eMOkHjCqxmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:30 2026 by rpki-client