$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d529afc1-b3fd-3208-b8ed-b349dc12f40c.roa File: d529afc1-b3fd-3208-b8ed-b349dc12f40c.roa (raw, json) Hash identifier: Tfn1f5ra3sag4ccHrJyyu/jynfAiGRtqbd2cmG4UZ8g= Subject key identifier: 68:A4:A7:B1:5A:76:6E:6A:EE:EF:A8:36:0A:C3:29:D0:C3:AD:53:EF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D40CB9ECA5A5EEEF0C535E1C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d529afc1-b3fd-3208-b8ed-b349dc12f40c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2e80:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:ca:5a:5e:ee:f0:c5:35:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=e0fe435d-e8e3-4f53-acac-9a9732394009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:ac:e1:a4:f5:8f:b7:76:40:52:0f:bb:e4: 68:0b:22:be:e1:6c:68:69:74:09:d2:b9:46:5d:c2: 77:a5:60:82:0e:ca:74:c6:b6:ff:0a:ec:b4:9d:4c: 03:fd:ef:df:63:be:ea:10:a3:33:6a:0d:75:49:76: df:1b:93:13:0d:d7:55:02:f1:bb:7d:b0:8f:81:9a: f6:79:9b:52:1b:6e:6e:42:67:9a:c5:4e:87:fc:06: c6:5c:29:9e:20:26:4c:5c:98:8b:66:30:97:09:fc: 94:71:43:29:a2:9c:c4:ca:7b:74:5a:a7:f0:cc:79: 57:43:30:4a:9f:cd:1f:b9:1f:5f:51:c7:c2:da:5c: ac:81:14:da:15:08:be:81:7f:12:0c:11:04:18:6e: de:16:60:bc:37:fd:af:ef:7d:66:47:d1:9e:65:b1: d2:34:2c:cd:58:8b:bd:22:6f:22:52:66:79:a1:12: b3:57:ee:a4:19:55:7f:52:5b:43:60:7e:3a:d7:f5: 6c:fe:52:aa:2e:bf:7a:6b:d9:a2:16:11:1c:49:bf: 6c:90:55:34:3f:c2:4c:4e:42:d6:89:55:46:3a:5d: 8f:d3:0d:a1:a8:36:1f:79:56:fb:ac:55:cb:a4:86: 25:f5:0b:17:d5:66:d4:46:02:a7:76:b4:e5:6d:bd: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A4:A7:B1:5A:76:6E:6A:EE:EF:A8:36:0A:C3:29:D0:C3:AD:53:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d529afc1-b3fd-3208-b8ed-b349dc12f40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80:c01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ab:d1:22:c9:ed:66:b4:bf:79:17:02:ac:8e:97:81:d9:2d: b3:29:cc:f0:e0:c2:73:fd:6e:cd:4b:ce:96:26:4a:be:32:52: 05:ad:ce:32:95:77:0d:61:18:cc:0a:24:f6:d1:13:35:db:0b: c4:75:da:f2:75:6f:d0:61:65:08:11:86:b6:67:71:1b:29:ae: 2c:59:8c:15:5e:99:21:0e:2f:29:d5:ce:c4:b6:4c:d4:18:d9: e1:2d:e1:df:a4:90:12:fb:43:43:91:ac:89:76:3a:bf:51:3b: 22:ec:91:fd:ee:f4:09:84:94:cb:3c:ee:f6:84:b4:b1:c1:87: 31:b9:15:29:23:71:0e:62:09:3e:9f:65:f4:9f:54:cf:b0:60: 4f:e8:2e:29:26:b5:79:31:92:4a:63:e5:e1:d9:ae:47:cc:9d: 38:05:ce:42:4e:66:b5:97:ee:5e:a0:23:b4:9d:36:33:a3:b0: 07:5f:95:2d:47:a2:4e:96:36:26:80:fa:3e:06:68:b0:a1:ad: 48:b4:d5:38:a2:7e:91:a2:5c:bf:f7:09:d5:75:03:cb:52:fd: ef:ac:33:89:19:63:7c:99:bf:40:84:f6:86:57:19:03:c8:34: 24:84:a7:29:90:29:08:6b:b3:57:df:30:34:f9:ca:57:57:ba: 28:6f:e7:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Ay57KWl7u8MU14cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTBmZTQzNWQtZThlMy00ZjUzLWFjYWMtOWE5NzMyMzk0MDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimCs4aT1j7d2QFIPu+RoCyK+4WxoaXQJ0rlG XcJ3pWCCDsp0xrb/Cuy0nUwD/e/fY77qEKMzag11SXbfG5MTDddVAvG7fbCPgZr2 eZtSG25uQmeaxU6H/AbGXCmeICZMXJiLZjCXCfyUcUMpopzEynt0WqfwzHlXQzBK n80fuR9fUcfC2lysgRTaFQi+gX8SDBEEGG7eFmC8N/2v731mR9GeZbHSNCzNWIu9 Im8iUmZ5oRKzV+6kGVV/UltDYH461/Vs/lKqLr96a9miFhEcSb9skFU0P8JMTkLW iVVGOl2P0w2hqDYfeVb7rFXLpIYl9QsX1WbURgKndrTlbb19YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGikp7Fadm5q7u+oNgrDKdDDrVPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDUyOWFmYzEtYjNmZC0z MjA4LWI4ZWQtYjM0OWRjMTJmNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAwB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmr0SLJ7Wa0v3kXAqyOl4HZLbMpzPDgwnP9bs1LzpYmSr4yUgWt zjKVdw1hGMwKJPbREzXbC8R12vJ1b9BhZQgRhrZncRsprixZjBVemSEOLynVzsS2 TNQY2eEt4d+kkBL7Q0ORrIl2Or9ROyLskf3u9AmElMs87vaEtLHBhzG5FSkjcQ5i CT6fZfSfVM+wYE/oLikmtXkxkkpj5eHZrkfMnTgFzkJOZrWX7l6gI7SdNjOjsAdf lS1Hok6WNiaA+j4GaLChrUi01TiifpGiXL/3CdV1A8tS/e+sM4kZY3yZv0CE9oZX GQPINCSEpymQKQhrs1ffMDT5yldXuihv52M= -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:55 2026 by rpki-client