$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa File: 4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa (raw, json) Hash identifier: 22evApqSD9CQZCaaileFvjaIhvRiLofADZmpJ8XizFY= Subject key identifier: 31:82:FE:FB:0F:22:E4:C5:6B:09:48:34:25:DE:CC:2E:A4:90:01:C2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D93254B37D24761DFE2F58330 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 2604:2e87:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4b:37:d2:47:61:df:e2:f5:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=b5721c1e-b798-485c-84e6-d4b55b974c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:f3:34:f2:61:40:a2:57:89:8d:e2:45:52: 2c:42:78:90:5c:1e:bb:09:8c:99:1a:7c:0e:bc:57: 41:64:7a:45:f3:a0:98:d8:d4:74:86:3c:24:c8:73: 25:46:7a:8b:39:94:2b:5a:bd:16:b2:e3:15:eb:1a: 43:db:57:fe:f9:5d:af:62:cb:00:f3:37:f1:a1:95: cb:58:90:cf:82:e4:62:d7:48:1d:7f:07:84:96:03: ec:68:04:a7:65:ab:06:d4:c2:57:2d:94:5a:f2:f9: 36:0f:10:80:21:ba:07:59:a2:b1:99:cd:eb:45:0e: 86:31:65:cd:6b:32:45:c1:c6:e8:f3:6c:56:33:75: bf:c5:59:f1:23:16:e2:12:2f:39:22:a7:a3:b4:d5: 3b:bd:e1:39:cb:04:80:73:d1:72:09:ac:6e:c1:03: 5d:5f:d9:be:5c:32:80:de:d3:f9:47:e7:35:8d:37: 48:df:2e:45:a3:26:e9:45:81:01:39:43:2a:2d:4e: 74:b0:e9:23:26:7e:f3:b0:59:a5:4e:9b:c6:5c:23: 16:e0:8b:cf:82:40:6d:85:94:be:f7:e3:71:d4:e1: a7:e3:42:82:85:f3:9a:a5:bf:e8:9d:58:c5:92:62: 1b:a9:ac:90:cd:f0:6b:0b:07:25:40:d5:be:5d:42: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:82:FE:FB:0F:22:E4:C5:6B:09:48:34:25:DE:CC:2E:A4:90:01:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d0:ae:40:ad:e4:17:d2:85:55:73:27:51:f0:1c:e2:ec:0e: c0:72:41:97:db:90:27:69:ef:05:bf:b2:b3:f3:70:9b:42:84: 4e:22:03:0c:3c:f5:f1:5e:4e:cd:b0:e5:db:60:00:f2:13:b6: c1:dd:78:c4:e0:99:e3:a4:b2:a6:8d:ee:9e:d2:b3:b9:03:e0: 78:44:3e:9f:6b:49:34:49:15:95:1a:20:0b:b7:88:8b:1f:49: 7a:4a:0c:c9:e0:c5:09:ad:0a:47:21:f7:e7:7b:03:17:7b:6a: f2:f1:42:f2:a4:34:a1:57:ef:58:92:f6:67:54:5a:bd:c5:ba: f4:22:ad:c3:5a:8f:a2:b0:f1:79:46:a4:97:14:e3:27:a5:10: 9b:d1:df:e4:05:59:8b:14:4a:66:5d:99:9d:b5:b2:b5:f7:38: d2:cf:e9:38:4f:5d:8e:35:fc:ce:8c:e3:e7:2c:9a:c5:5e:93: b5:6d:84:40:21:cb:e2:34:75:a5:bd:49:8a:61:f3:09:a8:61: e1:b5:0a:1f:f0:d2:a5:fa:1e:f9:c2:32:b1:34:b3:a2:cf:6a: 8a:ff:f1:d7:06:68:1a:32:06:95:20:12:89:e4:72:42:da:44: 31:81:f5:5c:72:27:de:b7:51:12:d3:19:f4:6b:ac:33:00:81: c3:d0:37:a2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2TJUs30kdh3+L1gzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YjU3MjFjMWUtYjc5OC00ODVjLTg0ZTYtZDRiNTViOTc0YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurLzNPJhQKJXiY3iRVIsQniQXB67CYyZGnwO vFdBZHpF86CY2NR0hjwkyHMlRnqLOZQrWr0WsuMV6xpD21f++V2vYssA8zfxoZXL WJDPguRi10gdfweElgPsaASnZasG1MJXLZRa8vk2DxCAIboHWaKxmc3rRQ6GMWXN azJFwcbo82xWM3W/xVnxIxbiEi85IqejtNU7veE5ywSAc9FyCaxuwQNdX9m+XDKA 3tP5R+c1jTdI3y5FoybpRYEBOUMqLU50sOkjJn7zsFmlTpvGXCMW4IvPgkBthZS+ 9+Nx1OGn40KChfOapb/onVjFkmIbqayQzfBrCwclQNW+XUInmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDGC/vsPIuTFawlINCXezC6kkAHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQzZDgwMWItMDU0Ny0z OGUwLWI3ZWItNWM5YTAxNzQwYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWNCuQK3kF9KFVXMnUfAc4uwOwHJBl9uQJ2nvBb+ys/Nwm0KETiID DDz18V5OzbDl22AA8hO2wd14xOCZ46Sypo3untKzuQPgeEQ+n2tJNEkVlRogC7eI ix9JekoMyeDFCa0KRyH353sDF3tq8vFC8qQ0oVfvWJL2Z1RavcW69CKtw1qPorDx eUaklxTjJ6UQm9Hf5AVZixRKZl2ZnbWytfc40s/pOE9djjX8zozj5yyaxV6TtW2E QCHL4jR1pb1JimHzCahh4bUKH/DSpfoe+cIysTSzos9qiv/x1wZoGjIGlSASieRy QtpEMYH1XHIn3rdREtMZ9GusMwCBw9A3og== -----END CERTIFICATE-----Generated at Fri May 8 18:26:57 2026 by rpki-client