$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa File: eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa (raw, json) Hash identifier: vrfJEyQV80aKFRU9u2Lp3JQvBiKlGPf62Mkih3832b4= Subject key identifier: 88:B7:8C:73:FF:C7:19:37:26:A4:D8:6B:48:5C:EB:2A:61:06:2D:DC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF6FEA5BAD90C34EDB7280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:1800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6f:ea:5b:ad:90:c3:4e:db:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a59181e7-3046-409a-b110-1d40a1c626f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:76:e9:16:c0:b0:af:e5:cc:1c:84:e5:c0: 8b:52:04:5c:ef:94:cf:60:65:87:c0:d8:e9:a1:e5: 0b:6d:da:e9:e8:3d:85:4b:08:bc:85:58:ac:a1:0e: 91:97:6f:e0:25:3a:0d:95:d6:53:53:1c:b4:bd:a4: 94:35:2d:f8:12:00:7d:9b:22:36:83:b6:0f:78:39: 1a:ba:ab:da:de:8c:f2:ea:57:d7:32:93:6b:a5:46: 8f:d0:93:dc:29:9c:dd:99:82:a6:d0:85:24:ce:6f: 9b:e6:81:fa:e4:68:7e:91:73:f5:b6:ba:03:f1:a0: 9b:f2:44:03:38:35:b8:3e:4f:36:52:e7:63:01:57: ef:ce:2d:e9:00:ab:f5:05:ce:be:9a:59:49:53:da: 52:ec:fc:de:fb:17:14:8c:05:5c:c0:70:ad:34:db: 84:71:d0:d5:00:94:14:71:af:04:3e:e8:c4:3a:97: 7b:d3:22:9d:8f:86:d0:11:a2:4f:75:2c:98:47:66: ac:eb:e0:fa:15:5d:3a:77:3e:22:ad:1d:59:b5:76: 11:4f:4a:3d:53:25:8b:c6:fb:8c:a3:68:cd:d5:03: 67:cd:40:b6:5e:db:30:ef:02:20:0a:9e:4a:35:03: c0:f7:e5:71:58:05:c9:d5:a0:95:54:4e:3f:d9:9e: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B7:8C:73:FF:C7:19:37:26:A4:D8:6B:48:5C:EB:2A:61:06:2D:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/eb3fb414-d71f-3b7d-85d9-34e4dfa09e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:1800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:17:c7:3d:33:6b:18:76:9e:1e:d5:01:60:fe:03:30:68:c1: 82:cd:d1:7d:45:2f:54:2a:f1:51:c6:87:98:29:ac:82:c1:a8: 0a:93:4f:2c:60:8b:7c:e1:bf:76:5b:75:6d:55:a8:03:73:0b: 25:dc:9d:5e:ab:9d:61:03:e2:95:6e:28:fe:67:26:16:37:a1: 4d:70:52:22:ef:b1:08:1e:fe:7c:42:38:e0:ef:c1:6a:a8:4e: 53:d1:d1:58:39:a5:eb:8d:5e:14:ce:6b:ee:a8:c1:1d:ce:fd: 11:02:95:ca:dc:63:84:c9:1d:8b:ab:08:af:4c:d6:db:52:9a: 7d:4f:c1:b2:7e:87:1b:51:1e:c3:a4:36:0a:28:1e:4c:a8:44: 45:f2:dc:17:f8:96:f2:df:d2:63:d7:e7:56:84:6c:d4:c3:88: 01:b4:34:2c:28:47:31:3a:83:37:5a:5f:fe:5f:11:df:b9:3d: ca:80:b1:68:57:0d:15:4e:96:19:7d:ca:8a:17:d1:36:5e:2f: 58:84:31:05:16:00:be:0f:26:fe:3d:ff:9f:f0:c5:9c:20:14: 87:d9:8a:54:26:d9:b8:5e:f5:66:de:f0:e9:5d:88:91:6a:4d: 80:4b:0f:bd:b5:33:d5:dd:06:53:f8:34:65:b2:20:f5:de:c6: 75:01:34:56 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k32/qW62Qw07bcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTU5MTgxZTctMzA0Ni00MDlhLWIxMTAtMWQ0MGExYzYyNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuR26RbAsK/lzByE5cCLUgRc75TPYGWHwNjp oeULbdrp6D2FSwi8hVisoQ6Rl2/gJToNldZTUxy0vaSUNS34EgB9myI2g7YPeDka uqva3ozy6lfXMpNrpUaP0JPcKZzdmYKm0IUkzm+b5oH65Gh+kXP1troD8aCb8kQD ODW4Pk82UudjAVfvzi3pAKv1Bc6+mllJU9pS7Pze+xcUjAVcwHCtNNuEcdDVAJQU ca8EPujEOpd70yKdj4bQEaJPdSyYR2as6+D6FV06dz4irR1ZtXYRT0o9UyWLxvuM o2jN1QNnzUC2Xtsw7wIgCp5KNQPA9+VxWAXJ1aCVVE4/2Z5cywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIi3jHP/xxk3JqTYa0hc6yphBi3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWIzZmI0MTQtZDcxZi0z YjdkLTg1ZDktMzRlNGRmYTA5ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiRgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVBfHPTNrGHaeHtUBYP4DMGjBgs3RfUUvVCrxUcaHmCmsgsGoCpNP LGCLfOG/dlt1bVWoA3MLJdydXqudYQPilW4o/mcmFjehTXBSIu+xCB7+fEI44O/B aqhOU9HRWDml641eFM5r7qjBHc79EQKVytxjhMkdi6sIr0zW21KafU/Bsn6HG1Ee w6Q2CigeTKhERfLcF/iW8t/SY9fnVoRs1MOIAbQ0LChHMTqDN1pf/l8R37k9yoCx aFcNFU6WGX3KihfRNl4vWIQxBRYAvg8m/j3/n/DFnCAUh9mKVCbZuF71Zt7w6V2I kWpNgEsPvbUz1d0GU/g0ZbIg9d7GdQE0Vg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:41 2026 by rpki-client