$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa File: ec89997a-3ac7-3b00-9699-5bf074cf743e.roa (raw, json) Hash identifier: 3y/+JSUg/qK+1VDmEZCei+yAXOiGFtjlOIgx7enRCW0= Subject key identifier: 74:1E:86:2E:17:4A:35:1F:B5:C8:20:60:D5:2E:42:8F:20:6B:A6:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D24DF739F8C022B2426A0C040 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e89:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:73:9f:8c:02:2b:24:26:a0:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0dec2d8f-ddc0-46e9-8f39-523b6d8c5bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:82:73:1a:32:fc:50:f7:40:1c:d0:30:df:d3: d1:9d:50:73:39:3d:6b:46:b6:1d:bf:5e:7b:06:c2: 3a:a6:02:07:e5:98:58:f0:33:22:66:f6:32:d6:4d: d1:a1:53:b4:13:72:5e:da:e5:77:55:b0:07:8a:a1: ba:c4:e3:f7:fb:10:80:a0:26:a3:36:74:98:f2:0c: 52:c1:f4:38:68:55:f6:b3:38:b2:9e:27:2a:c2:7b: 33:03:fd:d3:d0:3d:0b:5c:fd:89:1a:6d:73:d7:55: 38:a8:c2:4f:59:5d:f4:35:74:76:e3:e1:3a:99:c6: 0a:3e:6d:7e:da:84:fa:bc:79:71:01:c6:e2:9d:c8: d8:2f:45:e3:8b:6c:f8:c3:71:fd:4f:db:27:67:8f: 8b:68:a4:07:4e:bc:2c:6c:3e:e1:6a:8c:87:ef:ae: 3c:83:33:44:08:6d:f1:b5:8d:8b:a4:3c:38:dc:79: 50:86:bd:43:bb:2e:72:c6:02:61:14:65:dd:d8:3d: 5e:b3:f2:f5:de:0f:61:ba:81:ae:76:a1:b7:92:48: 93:d5:54:74:2e:5b:e1:a9:9b:94:8e:0d:63:76:aa: d2:3a:d7:27:72:e7:de:42:76:98:ff:5d:cf:fe:82: e3:4d:a3:cd:d4:50:69:c7:f4:04:93:05:b0:4d:c5: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1E:86:2E:17:4A:35:1F:B5:C8:20:60:D5:2E:42:8F:20:6B:A6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec89997a-3ac7-3b00-9699-5bf074cf743e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9f:3f:2a:13:66:4d:ed:ad:c6:e5:dc:58:b1:4d:84:2b:a9: fd:bf:76:3d:e5:61:f8:be:83:a4:97:b4:f7:33:38:df:9a:2e: 5e:94:a7:c8:b6:85:05:ee:93:22:69:62:40:12:10:32:2c:3f: 27:7b:0c:2e:16:59:09:4a:d2:3b:15:b4:6b:78:cf:36:06:eb: 8c:03:2e:cd:86:4f:8f:6e:c3:bf:98:c3:08:d2:0f:32:03:47: ec:04:7e:50:43:94:0e:c8:a6:04:ba:e9:86:fc:18:54:c4:b5: c8:ab:4a:40:00:b9:b4:d8:96:59:3f:5a:e1:32:3c:8f:cc:6e: 22:d3:79:9d:32:82:b3:03:c3:e3:e8:73:d9:d4:4c:c9:d3:b1: 3e:0a:6a:5a:37:9e:3a:47:6b:c3:34:37:78:0d:25:46:82:12: 1d:49:22:4e:bf:60:40:2a:f1:5a:db:c5:7d:6e:29:b8:ef:f4: a3:13:fe:8e:0d:b5:3d:1e:18:ab:cd:f6:f2:c3:2f:55:34:b4: f0:74:6b:63:10:c0:23:9d:47:c8:35:36:0e:cf:f8:1f:c9:9d: 02:35:01:d5:19:1f:12:22:7d:03:ac:43:57:4d:da:21:e0:c6: bf:d5:2a:12:da:5f:34:ea:d7:2e:f5:2e:a8:d4:f8:53:64:dc: ba:8a:ab:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0k33OfjAIrJCagwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGRlYzJkOGYtZGRjMC00NmU5LThmMzktNTIzYjZkOGM1YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIJzGjL8UPdAHNAw39PRnVBzOT1rRrYdv157 BsI6pgIH5ZhY8DMiZvYy1k3RoVO0E3Je2uV3VbAHiqG6xOP3+xCAoCajNnSY8gxS wfQ4aFX2sziynicqwnszA/3T0D0LXP2JGm1z11U4qMJPWV30NXR24+E6mcYKPm1+ 2oT6vHlxAcbincjYL0Xji2z4w3H9T9snZ4+LaKQHTrwsbD7haoyH7648gzNECG3x tY2LpDw43HlQhr1Duy5yxgJhFGXd2D1es/L13g9huoGudqG3kkiT1VR0LlvhqZuU jg1jdqrSOtcncufeQnaY/13P/oLjTaPN1FBpx/QEkwWwTcUH6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHQehi4XSjUftcggYNUuQo8ga6ZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWM4OTk5N2EtM2FjNy0z YjAwLTk2OTktNWJmMDc0Y2Y3NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuibAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhZ8/KhNmTe2txuXcWLFNhCup/b92PeVh+L6DpJe09zM435ouXpSn yLaFBe6TImliQBIQMiw/J3sMLhZZCUrSOxW0a3jPNgbrjAMuzYZPj27Dv5jDCNIP MgNH7AR+UEOUDsimBLrphvwYVMS1yKtKQAC5tNiWWT9a4TI8j8xuItN5nTKCswPD 4+hz2dRMydOxPgpqWjeeOkdrwzQ3eA0lRoISHUkiTr9gQCrxWtvFfW4puO/0oxP+ jg21PR4Yq8328sMvVTS08HRrYxDAI51HyDU2Ds/4H8mdAjUB1RkfEiJ9A6xDV03a IeDGv9UqEtpfNOrXLvUuqNT4U2TcuoqrLA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:22 2026 by rpki-client