$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa File: b38de647-501d-397c-bfa1-f0f2ba6b6022.roa (raw, json) Hash identifier: QL2eAe9A0iK5QUxqxw3Ayw+Ua9c/9l6U46HgeX1ikaE= Subject key identifier: B8:E8:46:72:CB:17:0B:80:E3:E3:75:9D:23:46:28:E2:87:3D:F9:93 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E11B692A88A08E5214BC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1b:69:2a:88:a0:8e:52:14:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8720c26d-92a0-4e1a-81c6-0297fd385da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:41:67:06:96:04:db:82:dd:33:0a:9b:1b: 2e:9f:ed:fe:f7:b8:f1:02:dc:d3:a3:ca:70:85:ea: 02:72:22:8b:3e:68:db:c9:0a:14:3b:a5:56:cf:71: eb:05:3d:ef:47:ce:88:fb:8f:52:56:66:35:3a:98: db:94:54:ba:5b:4b:a1:26:d4:ed:9d:10:5a:fd:10: c3:ae:e3:0c:68:54:3d:c8:d9:e6:43:6c:db:e1:55: 46:6b:ed:93:fb:d5:d3:c2:2f:3b:46:9d:f0:61:22: df:76:fc:55:cc:44:03:91:34:f1:2e:73:c1:e3:9f: 02:8e:83:29:e1:7a:b2:5a:01:8f:8e:58:2e:52:54: 39:fd:df:38:1e:5a:32:d0:20:d8:a7:65:b9:1d:88: 8d:bf:c6:95:56:07:38:d4:6d:51:4a:51:1e:35:90: 89:32:f6:55:0f:95:e8:57:ba:be:0c:9c:1d:00:90: ae:c3:c6:5e:af:ea:6a:3e:e3:80:bc:5a:8e:2e:05: 01:20:4d:0f:8d:fe:20:78:e2:b6:c4:f4:1c:22:b5: 68:74:a7:44:77:4d:18:f2:a9:1d:51:36:70:a5:e4: 24:4b:81:22:e7:2e:81:ad:aa:fb:6c:f0:91:bb:59: 92:cc:eb:40:ae:88:3c:83:df:88:2e:2e:63:55:90: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E8:46:72:CB:17:0B:80:E3:E3:75:9D:23:46:28:E2:87:3D:F9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b38de647-501d-397c-bfa1-f0f2ba6b6022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:25:70:9b:13:88:39:c0:ea:2f:c9:eb:3d:80:4a:d3:11:0f: a9:a4:5c:38:c9:af:23:65:7e:b9:1c:7f:9d:ca:2d:b7:54:67: bc:55:ee:27:84:1e:eb:6f:c5:dc:1a:a5:2a:5b:e0:89:5c:29: 33:cc:94:fc:cf:da:d1:39:da:ac:6e:1d:38:e6:4e:1f:70:16: a8:b6:00:d2:85:fb:11:c2:10:7b:2d:17:14:61:ab:58:a5:d5: 0a:9b:ce:e6:ea:6f:b6:e1:f8:d2:3b:32:f4:5e:cc:9f:ce:5a: c1:8c:2e:b7:73:19:5e:07:1a:88:00:96:40:6c:45:b2:62:8f: 71:33:8a:cb:8f:a9:60:07:c1:d9:b4:c4:e9:3f:aa:9b:3d:1d: bc:9b:8d:71:4d:86:78:f0:47:20:d4:6f:b4:53:a0:f8:16:54: 10:0a:a4:bb:b5:55:41:43:b2:d0:09:6b:8e:67:5a:22:3a:c6: dc:41:d7:1c:da:d6:55:ae:41:18:0a:c5:3d:42:30:09:3e:ad: bc:29:e4:bb:bf:94:e1:a1:89:c6:cc:63:f1:dd:93:98:37:a2: f4:b0:6c:bc:52:05:b0:bd:72:a0:b9:73:b9:63:32:63:21:e8: 33:6e:7a:19:c5:39:a9:da:30:38:d1:ba:c3:04:72:99:9c:2b: 4d:32:eb:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4RtpKoigjlIUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODcyMGMyNmQtOTJhMC00ZTFhLTgxYzYtMDI5N2ZkMzg1ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+5BZwaWBNuC3TMKmxsun+3+97jxAtzTo8pw heoCciKLPmjbyQoUO6VWz3HrBT3vR86I+49SVmY1OpjblFS6W0uhJtTtnRBa/RDD ruMMaFQ9yNnmQ2zb4VVGa+2T+9XTwi87Rp3wYSLfdvxVzEQDkTTxLnPB458CjoMp 4XqyWgGPjlguUlQ5/d84Hloy0CDYp2W5HYiNv8aVVgc41G1RSlEeNZCJMvZVD5Xo V7q+DJwdAJCuw8Zer+pqPuOAvFqOLgUBIE0Pjf4geOK2xPQcIrVodKdEd00Y8qkd UTZwpeQkS4Ei5y6Brar7bPCRu1mSzOtArog8g9+ILi5jVZAMaQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLjoRnLLFwuA4+N1nSNGKOKHPfmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjM4ZGU2NDctNTAxZC0z OTdjLWJmYTEtZjBmMmJhNmI2MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoiVwmxOIOcDqL8nrPYBK0xEPqaRcOMmvI2V+uRx/ncott1RnvFXu J4Qe62/F3BqlKlvgiVwpM8yU/M/a0TnarG4dOOZOH3AWqLYA0oX7EcIQey0XFGGr WKXVCpvO5upvtuH40jsy9F7Mn85awYwut3MZXgcaiACWQGxFsmKPcTOKy4+pYAfB 2bTE6T+qmz0dvJuNcU2GePBHINRvtFOg+BZUEAqku7VVQUOy0AlrjmdaIjrG3EHX HNrWVa5BGArFPUIwCT6tvCnku7+U4aGJxsxj8d2TmDei9LBsvFIFsL1yoLlzuWMy YyHoM256GcU5qdowONG6wwRymZwrTTLrVA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:13 2026 by rpki-client