$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa File: db85abb9-cd34-312f-a6a2-78db24e05c0b.roa (raw, json) Hash identifier: 6naPIdl+V1Xdj/sD4mUUXH+fMRSFMlEh8d/NnxfVswU= Subject key identifier: E6:06:77:5A:39:21:E9:AB:01:40:8A:61:13:C8:69:8E:5E:AF:24:E1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24E13573638BD46522903080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8a:8c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:35:73:63:8b:d4:65:22:90:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=71aa7883-9e1b-48cd-aa96-60c5f48b4c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:fe:f1:53:f2:d0:b0:6e:b6:41:80:69:bd: 5b:e0:ac:c6:5a:e7:44:8d:46:c1:2a:22:c4:52:16: 8e:74:ff:36:97:f9:c0:bb:9f:05:6a:e6:6b:d5:70: 45:8d:5e:4c:c4:dc:a4:d6:64:e6:d8:ec:26:60:17: 29:3a:e4:81:c0:f6:c3:08:45:6d:9c:ff:e7:d6:82: 9d:9f:fe:f2:dc:45:22:66:ad:40:22:68:83:e4:60: 67:2d:79:10:5d:b8:2c:15:3c:5b:b1:55:e2:14:67: e5:4e:32:93:c2:b6:f1:32:3e:77:f2:91:c8:3f:e7: 10:c2:c8:18:0b:d0:84:f1:80:41:ec:b3:c2:6b:4c: 3f:df:2c:ca:a3:17:e9:47:ab:56:99:a4:a7:aa:df: 04:01:9a:4d:3a:8d:b5:ef:86:b3:5b:2d:f4:1b:70: 55:64:b9:65:f3:81:a8:11:b8:72:0d:eb:db:5c:36: 23:3e:2b:65:ad:b1:11:32:18:4d:e8:58:07:e2:a8: 1a:fb:ac:84:f1:fc:3d:03:ec:b3:66:64:c4:ec:ce: e6:50:77:98:09:25:fc:db:e4:c9:44:72:2c:6e:fc: a7:fe:d4:c3:50:c0:fe:f6:09:31:01:45:b8:37:a6: ee:0d:c4:56:50:fd:50:8a:da:35:15:c3:8b:7b:df: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:77:5A:39:21:E9:AB:01:40:8A:61:13:C8:69:8E:5E:AF:24:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/db85abb9-cd34-312f-a6a2-78db24e05c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:8c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a8:9a:c6:a3:8b:f9:06:9a:b4:6a:c7:34:6d:02:a3:b1:09: 3b:82:90:b9:35:ee:51:fa:05:26:0f:bc:50:fa:2e:e2:a2:5c: b9:4e:7d:1b:40:27:d4:42:dd:e1:c6:70:4b:7b:89:1f:93:48: 2c:43:71:0b:21:4c:87:86:43:fe:7a:cd:78:06:fc:82:ff:0b: 3c:e8:48:bd:a6:c3:33:86:7b:d2:55:8d:e8:b0:fa:b7:69:d5: ed:48:d7:ad:a1:0b:39:76:95:18:fa:ab:6b:e2:9e:2c:b5:f0: 6d:e4:a8:a4:33:34:48:34:3d:d7:ae:cf:86:ab:dc:00:96:07: c8:ae:a5:b9:52:40:55:0c:f9:cb:b6:5d:0c:59:23:5c:31:93: 95:0c:aa:73:8f:2b:28:c2:91:77:80:36:4c:4a:e0:05:e3:25: 35:c7:bd:1d:44:b5:c4:87:96:99:c4:38:1c:96:d4:6d:c1:b1: 9e:a9:40:30:c5:42:8b:2d:dc:d8:67:57:fb:bd:31:9a:b8:93: c8:81:06:87:52:f0:86:23:06:64:af:4e:99:40:76:26:bd:34: 7c:c0:d8:01:4d:8c:6d:77:fc:3a:3a:1f:55:cf:6d:b0:d6:7d: 84:2e:6b:e5:01:f4:8b:e2:e5:a7:b0:38:cd:c9:c9:26:69:7b: b5:99:14:ef -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k4TVzY4vUZSKQMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzFhYTc4ODMtOWUxYi00OGNkLWFhOTYtNjBjNWY0OGI0YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUP+8VPy0LButkGAab1b4KzGWudEjUbBKiLE UhaOdP82l/nAu58FauZr1XBFjV5MxNyk1mTm2OwmYBcpOuSBwPbDCEVtnP/n1oKd n/7y3EUiZq1AImiD5GBnLXkQXbgsFTxbsVXiFGflTjKTwrbxMj538pHIP+cQwsgY C9CE8YBB7LPCa0w/3yzKoxfpR6tWmaSnqt8EAZpNOo2174azWy30G3BVZLll84Go EbhyDevbXDYjPitlrbERMhhN6FgH4qga+6yE8fw9A+yzZmTE7M7mUHeYCSX82+TJ RHIsbvyn/tTDUMD+9gkxAUW4N6buDcRWUP1Qito1FcOLe98NmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOYGd1o5IemrAUCKYRPIaY5eryThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGI4NWFiYjktY2QzNC0z MTJmLWE2YTItNzhkYjI0ZTA1YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuioww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPqiaxqOL+QaatGrHNG0Co7EJO4KQuTXuUfoFJg+8UPou4qJcuU59 G0An1ELd4cZwS3uJH5NILENxCyFMh4ZD/nrNeAb8gv8LPOhIvabDM4Z70lWN6LD6 t2nV7UjXraELOXaVGPqra+KeLLXwbeSopDM0SDQ9167PhqvcAJYHyK6luVJAVQz5 y7ZdDFkjXDGTlQyqc48rKMKRd4A2TErgBeMlNce9HUS1xIeWmcQ4HJbUbcGxnqlA MMVCiy3c2GdX+70xmriTyIEGh1LwhiMGZK9OmUB2Jr00fMDYAU2MbXf8OjofVc9t sNZ9hC5r5QH0i+Llp7A4zcnJJml7tZkU7w== -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:42 2026 by rpki-client