$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/daa82981-71cb-3d94-91a6-61017b3c99b4.roa File: daa82981-71cb-3d94-91a6-61017b3c99b4.roa (raw, json) Hash identifier: yl+1at+fJ+3jnzGhL95F7fL6rY5bfnuTs5LhX7QDgUE= Subject key identifier: 12:2B:E2:0F:0E:71:41:5A:7D:5D:71:8A:49:47:F6:E6:25:E2:D4:9A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF96F7BD4072D41B02C948 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/daa82981-71cb-3d94-91a6-61017b3c99b4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:96:f7:bd:40:72:d4:1b:02:c9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6f918a2a-7983-4221-9874-aede5ffb0ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:cd:9c:97:52:d9:34:99:ca:87:d8:b9:ad: 16:4f:4a:af:fb:a9:df:85:e2:fc:b3:cc:99:3b:8a: 59:c3:25:2d:b0:5a:59:e4:4d:5b:e6:f5:a9:56:ff: 04:2a:64:22:9e:69:47:65:b5:c2:38:3e:f4:82:4d: 0a:d1:77:48:37:2b:69:05:0a:0c:a3:eb:1a:a9:17: 85:a9:91:b1:1e:68:9c:34:f1:be:16:ca:b9:78:9b: 64:a5:f9:e6:16:c7:69:ee:fe:c4:01:31:4a:2d:88: 1f:ce:13:15:9a:ef:02:56:7e:65:f6:47:da:aa:a7: 25:5b:8b:af:9f:2a:63:2f:f8:b7:80:15:aa:cd:55: 4a:87:a5:0a:b2:c6:55:e9:fe:6d:18:bb:c5:f3:b1: f8:c1:be:c6:53:5b:10:21:63:9a:ed:87:31:62:6f: a2:76:d1:fa:c1:e7:7a:2d:9c:82:20:37:52:e9:43: 6b:27:59:7b:84:e1:62:eb:ed:15:d1:6e:09:95:62: 4e:b8:36:50:e0:a4:30:48:09:c7:b5:a0:b8:6b:dc: 7a:a8:12:f0:8b:79:c6:ab:85:9b:31:36:eb:0c:97: 97:c2:0a:34:c5:1d:43:b9:3a:d0:32:5c:99:29:c3: b7:3e:b4:3c:da:de:84:88:d1:8b:57:58:e3:0c:c5: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:E2:0F:0E:71:41:5A:7D:5D:71:8A:49:47:F6:E6:25:E2:D4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/daa82981-71cb-3d94-91a6-61017b3c99b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:79:6d:96:d1:40:bb:0d:d3:e6:1f:26:79:bd:ed:35:1b:cb: 93:df:c4:59:c3:a1:f9:b2:99:53:d9:00:2b:78:57:25:79:e7: 91:b7:d1:a5:ce:39:88:e2:5c:41:65:4c:05:b9:b5:ff:ad:8e: b7:02:2b:b5:c1:ae:e4:c7:63:2d:9a:61:c5:5a:30:e0:bb:cf: 70:08:ac:21:4e:9f:a5:e9:19:5b:d7:e3:85:eb:ad:ba:83:73: 94:68:2b:c5:98:7b:4e:25:67:58:02:66:fd:81:eb:43:70:77: 5d:39:9a:d8:93:72:94:21:cd:e6:64:de:53:e0:6b:fc:c4:4c: 8a:50:b4:2e:cf:81:e4:6f:00:63:48:0e:21:e6:eb:96:42:d8: c1:d2:ca:6a:ff:fc:e3:a1:ce:a7:4d:6f:87:b4:f2:80:e1:10: 8c:df:d6:be:ae:e9:3b:1b:e5:42:ba:6d:81:3b:79:a3:b0:08: 9d:35:e6:52:2e:81:36:7d:4a:c4:66:6e:0a:2c:d3:4d:d1:12: 3c:e0:95:c2:27:9f:99:7f:e6:10:44:1d:d0:0f:b8:aa:fa:61: 56:59:b0:58:80:c4:d4:f1:aa:0b:b8:49:99:aa:c4:9f:37:9b: 84:99:03:b7:53:c1:98:c6:ad:2d:65:15:7a:b4:95:88:1d:60: ba:29:a7:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k35b3vUBy1BsCyUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmY5MThhMmEtNzk4My00MjIxLTk4NzQtYWVkZTVmZmIwYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7NnJdS2TSZyofYua0WT0qv+6nfheL8s8yZ O4pZwyUtsFpZ5E1b5vWpVv8EKmQinmlHZbXCOD70gk0K0XdINytpBQoMo+saqReF qZGxHmicNPG+Fsq5eJtkpfnmFsdp7v7EATFKLYgfzhMVmu8CVn5l9kfaqqclW4uv nypjL/i3gBWqzVVKh6UKssZV6f5tGLvF87H4wb7GU1sQIWOa7YcxYm+idtH6wed6 LZyCIDdS6UNrJ1l7hOFi6+0V0W4JlWJOuDZQ4KQwSAnHtaC4a9x6qBLwi3nGq4Wb MTbrDJeXwgo0xR1DuTrQMlyZKcO3PrQ82t6EiNGLV1jjDMUJSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBIr4g8OcUFafV1xiklH9uYl4tSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGFhODI5ODEtNzFjYi0z ZDk0LTkxYTYtNjEwMTdiM2M5OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuijQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEHltltFAuw3T5h8meb3tNRvLk9/EWcOh+bKZU9kAK3hXJXnnkbfR pc45iOJcQWVMBbm1/62OtwIrtcGu5MdjLZphxVow4LvPcAisIU6fpekZW9fjheut uoNzlGgrxZh7TiVnWAJm/YHrQ3B3XTma2JNylCHN5mTeU+Br/MRMilC0Ls+B5G8A Y0gOIebrlkLYwdLKav/846HOp01vh7TygOEQjN/Wvq7pOxvlQrptgTt5o7AInTXm Ui6BNn1KxGZuCizTTdESPOCVwiefmX/mEEQd0A+4qvphVlmwWIDE1PGqC7hJmarE nzebhJkDt1PBmMatLWUVerSViB1guimnzA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:35 2026 by rpki-client