$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa File: d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa (raw, json) Hash identifier: CIta1wh4Qill4fG15KVtmpKRsqOoOafuIsI0btqaV4w= Subject key identifier: CA:30:34:98:F9:64:26:2A:2F:05:F7:C9:4C:21:02:75:87:81:51:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E123786BB253C3CDC96400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:8800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:23:78:6b:b2:53:c3:cd:c9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=83a5ac01-9dcf-49da-b1a0-8812a38058fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:2c:25:26:5b:b6:8a:76:48:b1:9c:e3:f7: f8:28:fa:bd:64:11:94:9a:e2:be:26:91:34:94:fe: e1:b1:d3:15:0e:8c:7d:5c:4e:9f:42:81:76:a7:6e: 77:c6:c5:18:90:f1:4a:56:99:5f:f6:11:42:38:ae: 25:1a:55:d1:0c:88:0e:0e:8e:ad:f8:6e:44:4a:e9: f4:97:cd:1d:53:97:b5:f4:89:9e:a7:ab:96:38:b5: 64:9b:02:34:4e:12:75:b4:a2:87:6c:3d:8b:4d:ab: df:b9:76:ac:ca:7a:71:91:db:ff:d8:ee:f5:66:4c: 2d:31:8f:a5:d8:f1:df:23:2c:e2:dc:07:1c:7d:94: 9a:b7:d7:0e:83:32:54:1a:5f:c8:4d:d8:76:7e:d2: 52:48:58:f2:5d:a4:eb:a2:a8:ac:d3:9b:19:80:f7: 79:80:c2:27:0a:3a:6b:24:59:a2:22:e6:5e:53:20: 7b:99:e7:fc:0c:8c:94:4b:a1:06:e8:65:0c:45:04: 2c:a6:0d:3b:4a:75:11:25:94:5d:6d:8a:df:13:b7: e1:13:09:9c:cb:63:53:02:46:aa:21:83:58:de:ed: 21:c6:bc:3a:39:a5:0a:72:53:22:c3:52:70:7d:97: a2:3d:6c:d5:5d:89:51:ae:d4:09:a7:c6:b6:f2:a8: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:30:34:98:F9:64:26:2A:2F:05:F7:C9:4C:21:02:75:87:81:51:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8450784-a0a1-3b77-ab0e-e5523ff951f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:90:d4:98:b9:cb:d6:a4:b5:c8:c2:94:f4:cc:f8:b9:97:0f: 3d:f7:ad:9f:cf:e9:7c:10:84:c1:0a:9c:22:53:84:ad:3b:c8: a6:05:0c:58:a7:d5:b0:23:fa:f9:9d:9c:ea:e0:d6:e2:22:48: 11:71:8d:6a:a9:d3:08:1f:46:72:29:2b:fb:f8:d0:ae:93:c9: a5:f3:f2:62:15:d9:62:c4:b1:de:8e:81:c0:1a:cc:d7:ec:5a: 1b:b2:7d:90:55:74:7f:06:20:8d:8a:8c:ae:1d:3e:f7:94:ca: 19:23:8e:90:53:19:97:be:f5:96:a1:2c:47:57:6b:6b:2d:fc: d4:d2:63:79:96:76:26:cb:9d:d0:0f:3f:43:4e:04:2a:92:b0: fd:21:9c:c9:fd:8c:8b:2a:79:ce:25:b9:b1:67:ec:bf:f4:8e: 12:51:85:b0:e8:e8:79:8b:a8:81:05:0d:38:d6:ad:79:e4:c6: 2b:0c:32:57:68:01:b0:5a:9c:95:0f:5c:70:4b:7b:d3:82:7f: 85:aa:0c:6b:f9:09:7e:12:55:e2:07:63:e3:b3:e2:da:88:87: 47:2a:0f:04:56:f4:e0:57:73:3f:36:9a:c9:1e:84:20:d4:b5: 8d:d2:6d:e5:d4:6f:2b:64:b9:ce:ed:a4:8e:f1:83:62:3e:50: 6a:b2:4a:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4SN4a7JTw83JZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODNhNWFjMDEtOWRjZi00OWRhLWIxYTAtODgxMmEzODA1OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCEsJSZbtop2SLGc4/f4KPq9ZBGUmuK+JpE0 lP7hsdMVDox9XE6fQoF2p253xsUYkPFKVplf9hFCOK4lGlXRDIgODo6t+G5ESun0 l80dU5e19Imep6uWOLVkmwI0ThJ1tKKHbD2LTavfuXasynpxkdv/2O71ZkwtMY+l 2PHfIyzi3AccfZSat9cOgzJUGl/ITdh2ftJSSFjyXaTroqis05sZgPd5gMInCjpr JFmiIuZeUyB7mef8DIyUS6EG6GUMRQQspg07SnURJZRdbYrfE7fhEwmcy2NTAkaq IYNY3u0hxrw6OaUKclMiw1JwfZeiPWzVXYlRrtQJp8a28qgcKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMowNJj5ZCYqLwX3yUwhAnWHgVF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDg0NTA3ODQtYTBhMS0z Yjc3LWFiMGUtZTU1MjNmZjk1MWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiogw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh5DUmLnL1qS1yMKU9Mz4uZcPPfetn8/pfBCEwQqcIlOErTvIpgUM WKfVsCP6+Z2c6uDW4iJIEXGNaqnTCB9Gcikr+/jQrpPJpfPyYhXZYsSx3o6BwBrM 1+xaG7J9kFV0fwYgjYqMrh0+95TKGSOOkFMZl771lqEsR1dray381NJjeZZ2Jsud 0A8/Q04EKpKw/SGcyf2Miyp5ziW5sWfsv/SOElGFsOjoeYuogQUNONateeTGKwwy V2gBsFqclQ9ccEt704J/haoMa/kJfhJV4gdj47Pi2oiHRyoPBFb04FdzPzaayR6E INS1jdJt5dRvK2S5zu2kjvGDYj5QarJKDQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:00 2026 by rpki-client