$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa File: bf84129d-5373-3325-85f9-58b86b087904.roa (raw, json) Hash identifier: tCFGAOnhvdzg7R+EBLMF/yT0G37131ItEXLDuG9sKzQ= Subject key identifier: 05:D6:79:B6:E8:D6:62:6F:81:D8:A0:6F:95:CF:D5:0A:EE:82:93:9F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E1155D7C849B20DE323C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8d:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:15:5d:7c:84:9b:20:de:32:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6a04e921-afa5-478c-ab21-a5a30e6cd50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:1a:b8:a4:61:30:29:a2:7b:38:a4:50:a6: cc:3d:9d:a7:d9:22:f7:09:55:55:6f:0f:76:44:d9: cc:a1:e0:53:45:45:14:2e:52:e4:0f:e6:48:f8:2d: 27:62:96:d2:3d:f6:f8:ba:49:d3:0a:77:6a:f9:75: 44:d9:2c:8a:b9:0c:48:1d:a4:0c:1f:95:2e:56:8d: 3f:ed:82:e6:13:74:54:dd:3a:bd:79:61:44:f5:67: 10:a5:a7:22:ad:ee:89:b5:4c:96:da:2f:a9:57:fd: 0a:5d:27:fa:3f:49:c4:4c:db:8e:3a:94:85:f3:21: 9b:e6:66:9f:b7:bb:c6:2a:40:55:d8:99:8f:e5:85: 73:94:4c:fd:2c:26:c5:0c:9b:16:79:91:92:8e:11: ab:c3:6c:04:e8:a9:d5:fc:9e:55:83:93:e7:76:2d: 09:4d:10:48:98:bc:b9:2b:d2:97:b8:64:ab:b5:5b: 5d:f9:66:55:e2:37:80:eb:77:50:95:75:17:f0:e1: 51:e0:6b:79:9d:1a:d4:62:25:49:3f:01:77:b8:62: 2e:04:28:73:47:46:f8:74:ae:b3:93:64:b6:2a:a3: 02:2e:88:df:ca:cd:12:57:d9:7a:52:e9:f0:11:d4: 90:b6:2c:90:36:f6:a8:b7:56:37:0b:9e:81:6a:f2: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D6:79:B6:E8:D6:62:6F:81:D8:A0:6F:95:CF:D5:0A:EE:82:93:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:4000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:be:00:45:23:74:44:5e:ad:ae:1a:10:bd:bc:33:94:e3:14: f5:59:8d:57:fd:d6:81:51:7a:85:75:25:da:5e:30:b5:4d:53: b9:2d:5e:60:fc:84:58:8f:0d:01:db:27:06:6d:56:c3:65:3e: 84:13:45:1b:c1:52:04:79:dc:7a:b4:a2:35:93:c6:9e:68:25: 0a:c4:c1:97:6b:80:57:65:59:bc:79:7d:ff:d1:44:fc:52:db: 64:b1:95:19:a7:c3:bb:cd:76:3d:63:31:3e:a0:8e:c6:06:1f: 73:da:36:43:b8:86:37:80:46:c5:06:5c:3a:29:30:03:20:6f: c6:c5:68:71:21:69:f0:75:af:5f:92:42:f2:d8:af:82:65:47: 78:82:bb:0f:02:b3:60:81:c5:16:a0:d4:3e:b5:04:0a:76:07: 0d:f2:dc:ab:4d:dd:bc:8b:da:f9:7e:9d:56:3f:7a:46:b0:8c: aa:ac:f2:0c:fc:41:7c:14:e2:eb:ac:34:4a:f1:56:58:a8:e8: f1:7b:c4:91:58:27:42:6d:40:dd:6a:a0:6a:16:07:90:81:bb: 3f:60:d2:9a:f9:7a:f4:0f:0b:27:79:af:2f:67:df:0c:be:72: 56:bf:41:55:a5:22:74:8e:8e:1a:27:26:40:f5:43:60:c6:83: a2:d0:91:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4RVdfISbIN4yPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmEwNGU5MjEtYWZhNS00NzhjLWFiMjEtYTVhMzBlNmNkNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOYauKRhMCmiezikUKbMPZ2n2SL3CVVVbw92 RNnMoeBTRUUULlLkD+ZI+C0nYpbSPfb4uknTCndq+XVE2SyKuQxIHaQMH5UuVo0/ 7YLmE3RU3Tq9eWFE9WcQpacire6JtUyW2i+pV/0KXSf6P0nETNuOOpSF8yGb5maf t7vGKkBV2JmP5YVzlEz9LCbFDJsWeZGSjhGrw2wE6KnV/J5Vg5Pndi0JTRBImLy5 K9KXuGSrtVtd+WZV4jeA63dQlXUX8OFR4Gt5nRrUYiVJPwF3uGIuBChzR0b4dK6z k2S2KqMCLojfys0SV9l6UunwEdSQtiyQNvaot1Y3C56BavLgzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAXWebbo1mJvgdigb5XP1QrugpOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY4NDEyOWQtNTM3My0z MzI1LTg1ZjktNThiODZiMDg3OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ74ARSN0RF6trhoQvbwzlOMU9VmNV/3WgVF6hXUl2l4wtU1TuS1e YPyEWI8NAdsnBm1Ww2U+hBNFG8FSBHncerSiNZPGnmglCsTBl2uAV2VZvHl9/9FE /FLbZLGVGafDu812PWMxPqCOxgYfc9o2Q7iGN4BGxQZcOikwAyBvxsVocSFp8HWv X5JC8tivgmVHeIK7DwKzYIHFFqDUPrUECnYHDfLcq03dvIva+X6dVj96RrCMqqzy DPxBfBTi66w0SvFWWKjo8XvEkVgnQm1A3WqgahYHkIG7P2DSmvl69A8LJ3mvL2ff DL5yVr9BVaUidI6OGicmQPVDYMaDotCRLA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:36 2026 by rpki-client