$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa File: 5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa (raw, json) Hash identifier: VjxTF06/h/sj15nn6n9YCKZ8Lpnsa2H+xNAtXaS8uCQ= Subject key identifier: 52:DF:81:A9:7C:CE:B9:CF:A0:C2:D5:9C:62:8E:BC:1C:2D:69:1C:25 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D237A4F89752220822A6DC490 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 2604:2e89:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4f:89:75:22:20:82:2a:6d:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=422f2428-f312-44b2-815a-0b01ce379664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:d4:89:0e:83:ca:05:2b:c2:c9:d6:3f:a9: e3:11:1e:71:10:ec:08:39:72:74:0b:9c:f7:72:17: 30:90:ed:76:bf:1c:ea:9d:06:65:ee:25:62:7f:be: 36:bc:d8:2a:71:1c:99:89:d1:39:95:1c:76:47:f9: 97:df:a0:d3:be:6f:b7:58:db:59:9f:be:e5:16:25: 4b:c8:68:38:bd:6a:d1:c7:77:31:09:fb:89:b2:37: 5e:64:82:c7:7d:94:17:ae:86:a5:56:25:af:ad:f7: d0:97:ba:6c:8c:0f:5a:ed:e5:bb:88:8d:bb:6f:fb: bc:8c:3d:2a:c1:56:a4:36:4e:43:e3:29:31:9b:24: 4f:89:00:3c:9a:ad:89:32:1e:1c:9f:f8:6e:f2:7c: dc:70:b3:8d:ce:d6:43:40:94:ed:e5:e9:88:ec:a8: 54:27:0b:cd:48:a0:0e:0f:f2:10:ec:80:8c:10:06: 47:9f:62:41:74:6c:f9:15:d1:f4:cd:7e:1d:d1:78: 5a:dd:14:26:83:ab:a3:6f:7e:1e:53:1c:8e:56:91: b4:2e:62:2a:72:a3:5d:90:cf:34:ef:37:f2:b9:fe: 94:00:3c:9b:6d:cb:0e:0b:31:b8:c8:45:04:f6:65: 6d:f4:01:eb:e0:c7:e8:f2:d9:85:e3:46:13:32:24: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:81:A9:7C:CE:B9:CF:A0:C2:D5:9C:62:8E:BC:1C:2D:69:1C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5343cbcc-0f0d-3988-a6d5-f684bf6920a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2e:7d:07:c1:45:78:4c:72:b1:bb:b7:a2:0c:40:d7:b0:31: d6:5c:a0:53:2a:6e:67:e8:3a:0d:c5:b5:d7:19:c3:4a:f4:fa: 89:7e:a5:c8:6f:53:5a:a6:55:36:b4:a7:8d:d4:fb:39:03:a6: 72:b9:95:70:01:a8:4a:ef:1e:36:e1:a5:d6:12:5f:c1:2a:45: 53:53:b9:0b:ec:a0:aa:b0:8c:f5:f6:ea:5d:b8:19:9e:43:59: e2:3a:71:77:bc:60:63:67:8e:df:8b:35:e4:85:d7:25:8a:e0: 4e:0c:c1:79:29:b1:53:f2:02:8d:f5:c0:40:65:4d:00:ef:2c: 84:21:c8:f9:54:dd:d8:8a:8d:ea:b9:ae:27:25:45:52:e5:ff: af:b4:74:08:f9:ba:30:e6:51:9d:6a:66:04:47:33:75:fb:c1: 9d:a8:44:03:cd:9f:75:e6:af:14:39:ac:6a:1d:89:20:33:56: ea:0f:22:b3:fe:12:7a:7c:7b:0b:c7:f1:f6:47:9d:ed:ff:be: c0:f5:06:e2:00:b7:87:1f:a9:0d:69:a4:58:02:a0:d2:00:b1: 20:f5:d2:cc:ac:47:10:ac:89:ef:b4:2c:c2:1f:78:13:c9:a9: e0:a2:ac:f6:ee:11:dc:40:82:66:b3:37:3e:6f:26:0e:3c:c0: d6:28:dd:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jek+JdSIggiptxJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDIyZjI0MjgtZjMxMi00NGIyLTgxNWEtMGIwMWNlMzc5NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUfUiQ6DygUrwsnWP6njER5xEOwIOXJ0C5z3 chcwkO12vxzqnQZl7iVif742vNgqcRyZidE5lRx2R/mX36DTvm+3WNtZn77lFiVL yGg4vWrRx3cxCfuJsjdeZILHfZQXroalViWvrffQl7psjA9a7eW7iI27b/u8jD0q wVakNk5D4ykxmyRPiQA8mq2JMh4cn/hu8nzccLONztZDQJTt5emI7KhUJwvNSKAO D/IQ7ICMEAZHn2JBdGz5FdH0zX4d0Xha3RQmg6ujb34eUxyOVpG0LmIqcqNdkM80 7zfyuf6UADybbcsOCzG4yEUE9mVt9AHr4Mfo8tmF40YTMiQnmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFLfgal8zrnPoMLVnGKOvBwtaRwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTM0M2NiY2MtMGYwZC0z OTg4LWE2ZDUtZjY4NGJmNjkyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFC59B8FFeExysbu3ogxA17Ax1lygUypuZ+g6DcW11xnDSvT6iX6l yG9TWqZVNrSnjdT7OQOmcrmVcAGoSu8eNuGl1hJfwSpFU1O5C+ygqrCM9fbqXbgZ nkNZ4jpxd7xgY2eO34s15IXXJYrgTgzBeSmxU/ICjfXAQGVNAO8shCHI+VTd2IqN 6rmuJyVFUuX/r7R0CPm6MOZRnWpmBEczdfvBnahEA82fdeavFDmsah2JIDNW6g8i s/4Senx7C8fx9ked7f++wPUG4gC3hx+pDWmkWAKg0gCxIPXSzKxHEKyJ77Qswh94 E8mp4KKs9u4R3ECCZrM3Pm8mDjzA1ijdJw== -----END CERTIFICATE-----Generated at Thu Mar 12 06:39:51 2026 by rpki-client