$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa File: f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa (raw, json) Hash identifier: UMdqjjiujSmvWfzg67x8VOGsJpoGiMRAlpb5ffW331k= Subject key identifier: 08:42:77:8E:05:8E:C2:06:2C:9D:EC:B3:36:43:B6:8B:F5:44:AB:15 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D27AA20420E51BFFD87AA4EC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2e8b:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:20:42:0e:51:bf:fd:87:aa:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=dd7b2d76-9ef3-4d72-bd7b-8f7f68e55ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3e:11:15:2f:c1:df:d8:57:7d:7a:4d:14:82: a3:26:5c:0f:e8:01:ab:8a:4b:79:d0:36:bb:19:e2: ab:48:e8:bc:2f:b3:04:97:71:e8:8e:2e:56:a8:ad: 3d:73:e9:10:19:ca:99:84:81:3a:37:1b:43:e9:aa: fa:a9:8c:5a:17:ef:e4:cb:6b:30:9f:52:08:95:c8: ff:a8:d4:07:08:3a:6e:aa:08:8d:c3:0c:8b:fb:5d: 76:c1:76:db:6c:75:2b:91:6f:89:bd:c7:6a:d3:c1: 22:3a:4b:ef:bf:82:96:44:51:5e:24:24:da:dd:4f: d7:96:b3:e9:bb:89:45:c3:b7:34:60:32:7f:b4:bc: 07:c9:30:a5:7c:24:ef:54:b2:32:13:3b:cf:f9:24: 71:0f:36:c0:ed:5c:fc:cd:02:bf:cd:40:58:1f:1e: 67:88:fd:fd:13:24:20:9d:46:c0:4b:a2:07:22:b1: 83:ad:70:18:95:bc:ea:22:5f:32:37:24:6e:65:d6: d8:d7:a9:14:03:63:ef:a0:5b:4f:cd:bd:44:58:4e: 56:4f:88:df:de:2b:b1:0b:fa:44:61:9f:dc:d7:f2: b4:59:e7:3a:32:d5:32:e7:06:b3:5c:8b:8f:28:be: e3:17:50:44:82:b0:9a:0a:9a:96:da:bd:00:6f:61: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:77:8E:05:8E:C2:06:2C:9D:EC:B3:36:43:B6:8B:F5:44:AB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f3f3e2a0-ddf0-3b5f-ab35-ba81e32d3c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6d:ec:f5:bb:8b:47:1e:0d:f9:e6:4f:81:be:6d:56:1e:13: c0:06:36:ca:63:5f:01:8c:9e:ad:91:55:67:72:a6:fc:ba:1a: b5:87:c6:0a:de:fc:a3:11:57:2e:c0:0e:e0:47:cb:6c:4e:18: 22:ff:62:47:68:59:50:9d:93:5c:9e:62:e7:0a:5e:ad:33:4a: 9c:db:4b:35:54:0f:4c:5e:9f:79:ed:7d:a3:cb:7c:58:d4:94: 3f:70:2d:d7:3b:e6:3a:e8:46:df:8c:57:ab:8b:85:40:d2:23: f9:e9:1c:65:2d:4f:51:d9:04:04:04:d2:82:f7:ff:ec:22:7a: 68:76:aa:ac:2c:0f:0a:36:cf:32:70:f4:bc:43:94:99:2e:58: 4d:bc:e3:e6:fe:44:7f:35:ca:99:87:27:20:da:28:00:8f:66: f1:dd:e5:01:38:0d:b2:7b:71:c8:13:f2:3e:1f:da:ac:4b:22: d0:91:e8:42:95:02:d1:3f:95:3e:93:8f:1e:52:53:05:3f:10: cd:ea:f6:fc:ed:d9:cc:72:c7:35:07:ec:89:b5:0f:86:10:85: 57:69:64:85:70:22:11:c4:5b:ce:6a:1e:b2:95:f4:4e:15:e5: 22:78:18:e3:52:92:07:53:c8:a3:42:b8:e4:28:5b:9d:12:51: 7e:e3:66:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqiBCDlG//YeqTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGQ3YjJkNzYtOWVmMy00ZDcyLWJkN2ItOGY3ZjY4ZTU1YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz4RFS/B39hXfXpNFIKjJlwP6AGrikt50Da7 GeKrSOi8L7MEl3Hoji5WqK09c+kQGcqZhIE6NxtD6ar6qYxaF+/ky2swn1IIlcj/ qNQHCDpuqgiNwwyL+112wXbbbHUrkW+Jvcdq08EiOkvvv4KWRFFeJCTa3U/XlrPp u4lFw7c0YDJ/tLwHyTClfCTvVLIyEzvP+SRxDzbA7Vz8zQK/zUBYHx5niP39EyQg nUbAS6IHIrGDrXAYlbzqIl8yNyRuZdbY16kUA2PvoFtPzb1EWE5WT4jf3iuxC/pE YZ/c1/K0Wec6MtUy5wazXIuPKL7jF1BEgrCaCpqW2r0Ab2GLbQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAhCd44FjsIGLJ3sszZDtov1RKsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjNmM2UyYTAtZGRmMC0z YjVmLWFiMzUtYmE4MWUzMmQzYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui9gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMG3s9buLRx4N+eZPgb5tVh4TwAY2ymNfAYyerZFVZ3Km/LoatYfG Ct78oxFXLsAO4EfLbE4YIv9iR2hZUJ2TXJ5i5wperTNKnNtLNVQPTF6fee19o8t8 WNSUP3At1zvmOuhG34xXq4uFQNIj+ekcZS1PUdkEBATSgvf/7CJ6aHaqrCwPCjbP MnD0vEOUmS5YTbzj5v5EfzXKmYcnINooAI9m8d3lATgNsntxyBPyPh/arEsi0JHo QpUC0T+VPpOPHlJTBT8Qzer2/O3ZzHLHNQfsibUPhhCFV2lkhXAiEcRbzmoespX0 ThXlIngY41KSB1PIo0K45ChbnRJRfuNmRA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:24:17 2026 by rpki-client