$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf584d26-6d90-30a0-b8fa-be12de6fd416.roa File: cf584d26-6d90-30a0-b8fa-be12de6fd416.roa (raw, json) Hash identifier: DjTVosXWPicSmrq6a8qBagRjwSmieTW41A3vQim6kqY= Subject key identifier: C1:2E:10:61:48:E5:55:EA:3A:E5:A0:D2:BB:DA:7F:9B:47:F4:4D:81 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584DC565C822C48A13157B15B880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf584d26-6d90-30a0-b8fa-be12de6fd416.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 19905 IP address blocks: 2604:2e8d:e800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:c8:22:c4:8a:13:15:7b:15:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=7f53c956-99d2-44b4-9d8b-98068f0e3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:4d:13:d5:eb:c7:bb:92:7a:31:68:97:af: e3:52:0e:9d:f8:67:5b:94:cf:19:ea:f7:6c:16:6f: d9:63:90:93:79:9d:78:5d:7f:ee:c5:38:37:c4:a4: 86:ad:87:3e:04:94:4c:1f:26:0f:79:7e:ef:47:59: de:cf:b7:9f:36:1b:39:be:67:69:ed:dd:55:3b:dc: bc:ad:57:68:11:50:dc:ec:2d:78:e1:42:73:cd:d5: e5:52:84:eb:de:50:2c:78:6c:1d:0b:21:70:f5:fb: 12:25:69:c6:ae:14:ff:64:6f:82:d6:82:c3:86:94: f8:2d:3b:13:51:2a:a9:36:b9:e4:be:92:36:88:da: 60:f9:71:d3:8a:f6:97:6b:6d:6b:1c:50:fd:34:aa: 83:a5:f6:c1:1e:37:a7:9e:91:0a:a4:d0:f9:b6:00: 69:48:8f:69:7d:33:ad:1c:c3:2f:b8:e3:66:72:b6: a4:33:e6:84:95:4f:e4:f1:af:d4:c2:40:cf:d4:a2: ae:ff:7d:18:5f:1e:35:04:08:c1:73:9a:c5:8d:4b: 54:58:2f:2e:6f:84:5e:9f:b1:3d:1c:c9:80:88:78: 50:aa:13:f3:c0:f4:f7:68:b7:e5:1d:9b:9e:48:1d: ab:df:99:74:1d:f6:e7:1e:6a:7a:a9:ae:e3:c9:c6: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2E:10:61:48:E5:55:EA:3A:E5:A0:D2:BB:DA:7F:9B:47:F4:4D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cf584d26-6d90-30a0-b8fa-be12de6fd416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:e800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9e:9e:d3:a4:ae:b3:ae:91:6f:6e:a3:ac:7d:41:4f:52:5d: aa:e9:9b:da:d9:c6:60:36:41:3b:89:e2:7f:5f:2f:ee:83:29: a0:1c:75:52:ce:51:22:c7:d8:80:45:58:5b:e9:d2:e6:2d:38: c0:b0:8a:c1:9a:ca:0d:ea:11:3d:a3:e3:63:7b:0f:e3:a7:7b: 88:80:ac:a6:3e:12:ee:6e:92:c5:01:8b:28:2c:38:52:b4:f7: 8c:97:9b:13:08:12:31:d3:d5:92:5b:9c:a8:46:8a:a5:d5:c9: 15:7b:fb:bc:03:cc:55:6e:b2:d4:2a:0c:07:ec:e0:c7:15:40: de:65:0c:cd:36:f8:fa:25:bc:ad:85:a6:da:5a:b6:4c:17:8e: 4d:52:2f:0d:b5:cc:58:4e:08:cf:8a:39:08:6d:64:0a:f4:de: 9b:99:b6:b7:52:bb:aa:16:fd:50:70:fb:66:8f:d3:bd:6c:0d: 4f:c7:d3:b3:31:aa:d0:c9:72:69:20:94:e1:38:c8:a4:5c:d7: 97:15:0a:df:1c:d5:46:a4:b7:41:d5:51:45:62:5c:08:60:26: 03:5e:0a:76:eb:6b:42:22:97:ce:c5:45:4a:e1:c8:4b:c7:f7: 10:06:5d:35:39:63:17:f2:27:8c:c5:f7:aa:c7:11:71:99:a4: 97:66:04:5a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3FZcgixIoTFXsVuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk N2Y1M2M5NTYtOTlkMi00NGI0LTlkOGItOTgwNjhmMGUzZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OdNE9Xrx7uSejFol6/jUg6d+GdblM8Z6vds Fm/ZY5CTeZ14XX/uxTg3xKSGrYc+BJRMHyYPeX7vR1nez7efNhs5vmdp7d1VO9y8 rVdoEVDc7C144UJzzdXlUoTr3lAseGwdCyFw9fsSJWnGrhT/ZG+C1oLDhpT4LTsT USqpNrnkvpI2iNpg+XHTivaXa21rHFD9NKqDpfbBHjennpEKpND5tgBpSI9pfTOt HMMvuONmcrakM+aElU/k8a/UwkDP1KKu/30YXx41BAjBc5rFjUtUWC8ub4Ren7E9 HMmAiHhQqhPzwPT3aLflHZueSB2r35l0HfbnHmp6qa7jycbdbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMEuEGFI5VXqOuWg0rvaf5tH9E2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Y1ODRkMjYtNmQ5MC0z MGEwLWI4ZmEtYmUxMmRlNmZkNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujegw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATZ6e06Sus66Rb26jrH1BT1Jdqumb2tnGYDZBO4nif18v7oMpoBx1 Us5RIsfYgEVYW+nS5i04wLCKwZrKDeoRPaPjY3sP46d7iICspj4S7m6SxQGLKCw4 UrT3jJebEwgSMdPVklucqEaKpdXJFXv7vAPMVW6y1CoMB+zgxxVA3mUMzTb4+iW8 rYWm2lq2TBeOTVIvDbXMWE4Iz4o5CG1kCvTem5m2t1K7qhb9UHD7Zo/TvWwNT8fT szGq0MlyaSCU4TjIpFzXlxUK3xzVRqS3QdVRRWJcCGAmA14KdutrQiKXzsVFSuHI S8f3EAZdNTljF/InjMX3qscRcZmkl2YEWg== -----END CERTIFICATE-----Generated at Wed May 13 09:33:18 2026 by rpki-client