$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa File: bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa (raw, json) Hash identifier: vyEYkpKDbmhAd0mfNB+bQPVBBD6PNIQOcn1lwga7y/I= Subject key identifier: 4C:86:1A:04:2B:70:D3:5B:6E:CC:BE:AD:C5:D9:25:DA:69:D8:4E:73 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D359FC92048A18DCDD0642080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e87:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c9:20:48:a1:8d:cd:d0:64:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=a733a40c-b060-4e89-869f-ea777d06e324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:ee:bb:1a:fb:a5:45:97:b8:f9:fd:fb:cb: 95:62:d6:19:45:ba:f1:71:e5:0d:34:a6:95:d4:6c: d3:89:3e:e7:a0:fb:4e:50:29:93:92:b6:c3:74:de: 09:e3:69:88:5c:78:13:5f:11:90:11:67:03:98:a7: e3:bc:6e:d0:01:b4:1e:cf:82:4b:b7:a4:05:f7:67: 1d:16:d8:89:6c:1a:bb:c8:c0:3e:dc:19:94:1a:37: 6f:77:e0:e0:0f:82:01:1b:da:01:21:0f:da:b9:60: cb:6b:be:4f:39:49:51:55:f5:09:25:b5:e1:56:56: 23:ec:69:50:99:4e:bc:f8:89:91:cb:a6:2b:a0:f1: 14:1e:f1:c9:0d:f6:b1:32:a8:aa:f6:8c:9b:7f:e2: 63:7b:e8:38:04:63:fa:77:44:70:21:61:13:0b:3e: 88:cb:83:55:2c:cb:5b:b6:04:bd:f3:61:b1:a6:64: 73:4b:e2:d6:dd:2e:76:f0:d6:00:50:50:df:5d:92: cd:3d:e7:f1:f3:f5:c6:78:2b:84:f2:d2:4f:4b:f9: ba:dc:fd:dc:24:90:b4:92:38:9c:83:6a:4c:c4:e7: dc:09:3f:29:d7:16:d5:03:3d:fd:34:57:80:43:57: c7:cd:ba:ab:ea:ce:1b:66:a6:3d:3c:6f:9c:d8:45: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:86:1A:04:2B:70:D3:5B:6E:CC:BE:AD:C5:D9:25:DA:69:D8:4E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bb0b8e75-408a-30d1-b36f-c42a8861ca68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e2:3f:a6:65:0d:ec:fa:52:35:4b:8e:f6:9b:20:71:c1:78: f8:63:c5:c4:02:bc:14:e9:ad:97:ae:a5:13:0b:48:77:f8:13: 80:20:26:af:36:4a:b9:eb:13:67:ba:85:d7:27:47:4c:41:ec: e2:11:18:21:64:41:ce:21:e4:f9:46:10:1c:13:68:35:6b:d4: 6b:2c:e7:07:74:6f:a2:90:b7:90:71:38:26:fe:d4:ef:c6:8e: 8e:43:9d:67:e9:27:1c:2d:c5:8e:09:d8:d8:3d:eb:33:f5:5b: e9:03:5c:3a:d8:eb:76:69:29:7d:a5:1c:6d:66:65:17:12:f7: cb:e5:34:b8:65:33:aa:7b:82:a2:a7:59:6e:fe:7b:06:70:6b: be:85:44:a8:05:0a:c1:99:f8:32:f1:e9:54:23:9b:c5:b2:52: a3:16:7a:f5:c2:83:ba:a5:9e:81:27:fa:3a:6d:3e:78:d0:52: 72:11:7f:71:7a:9d:f3:8e:3b:b3:4d:8d:23:9b:2c:4b:2f:90: cc:0d:15:0f:b4:08:40:47:a4:27:bc:5a:87:2b:42:34:05:d0: 9e:3d:4f:4b:c5:17:4c:cb:4e:7e:e2:32:30:99:e2:fa:63:cf: 63:8d:a4:4d:42:be:4d:9b:22:fb:49:dc:7c:ea:8f:44:d8:d6: 88:34:3c:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE01n8kgSKGNzdBkIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YTczM2E0MGMtYjA2MC00ZTg5LTg2OWYtZWE3NzdkMDZlMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNTuuxr7pUWXuPn9+8uVYtYZRbrxceUNNKaV 1GzTiT7noPtOUCmTkrbDdN4J42mIXHgTXxGQEWcDmKfjvG7QAbQez4JLt6QF92cd FtiJbBq7yMA+3BmUGjdvd+DgD4IBG9oBIQ/auWDLa75POUlRVfUJJbXhVlYj7GlQ mU68+ImRy6YroPEUHvHJDfaxMqiq9oybf+Jje+g4BGP6d0RwIWETCz6Iy4NVLMtb tgS982GxpmRzS+LW3S528NYAUFDfXZLNPefx8/XGeCuE8tJPS/m63P3cJJC0kjic g2pMxOfcCT8p1xbVAz39NFeAQ1fHzbqr6s4bZqY9PG+c2EWGhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEyGGgQrcNNbbsy+rcXZJdpp2E5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmIwYjhlNzUtNDA4YS0z MGQxLWIzNmYtYzQyYTg4NjFjYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhxAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf+I/pmUN7PpSNUuO9psgccF4+GPFxAK8FOmtl66lEwtId/gTgCAm rzZKuesTZ7qF1ydHTEHs4hEYIWRBziHk+UYQHBNoNWvUayznB3RvopC3kHE4Jv7U 78aOjkOdZ+knHC3FjgnY2D3rM/Vb6QNcOtjrdmkpfaUcbWZlFxL3y+U0uGUzqnuC oqdZbv57BnBrvoVEqAUKwZn4MvHpVCObxbJSoxZ69cKDuqWegSf6Om0+eNBSchF/ cXqd8447s02NI5ssSy+QzA0VD7QIQEekJ7xahytCNAXQnj1PS8UXTMtOfuIyMJni +mPPY42kTUK+TZsi+0ncfOqPRNjWiDQ8Mw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:35:00 2026 by rpki-client