$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa File: 5c693768-566f-3cb1-9ae0-9be4f12d911e.roa (raw, json) Hash identifier: 3Cd1OO8glGssqIp+H2TUPr6C90Ffdy1uK85qKLb/BXc= Subject key identifier: 76:D7:8D:53:98:C6:20:C8:F9:D3:CA:CF:AB:97:A4:5B:1C:3D:46:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D2379F86E24D4FC81F6FC4640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e89:e000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f8:6e:24:d4:fc:81:f6:fc:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=32421a4c-01a2-42b2-9ee8-e4e5793e6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:f5:c4:79:e4:78:67:6b:fc:91:58:a2:9c: bf:36:c5:28:38:ee:2c:da:3c:93:73:91:34:76:d4: 2e:0b:5d:e2:ec:51:c9:0a:83:f5:ba:8c:9b:93:f9: 33:71:b7:35:80:f9:d4:48:ac:6b:d6:8c:f2:d8:f9: 5e:c0:b4:ae:7c:eb:6e:35:c1:c7:15:7d:60:b6:2d: cb:64:a5:e2:68:a8:d5:f2:a2:10:58:40:80:4d:fa: 05:84:ed:1a:30:8a:8f:41:95:d6:7d:4e:5c:66:9c: 3d:11:bb:7a:49:31:fa:8d:ba:a0:51:4b:c9:7f:70: 6a:ec:34:cd:ab:ce:ad:92:17:e7:10:8d:ad:42:9e: 65:cc:63:e8:4c:15:3c:23:d7:55:ea:6f:16:7a:8b: 44:37:20:17:40:46:c7:d9:6e:c0:f8:f6:ca:9b:ff: 19:10:39:64:6e:c3:8a:0c:89:59:42:98:28:1b:8c: 57:96:90:d6:4b:ef:e8:ed:c3:03:0f:6f:d4:82:85: f5:ea:59:bb:ef:90:6e:c4:d4:ee:60:83:ca:f0:ea: 6f:92:3d:91:c7:09:d4:fd:0d:a2:0a:06:51:d5:bc: 56:0c:1d:23:f5:30:22:a4:65:d5:c0:62:2d:dc:a3: d9:90:e1:bf:79:06:26:7f:86:b2:27:27:b4:f5:35: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:8D:53:98:C6:20:C8:F9:D3:CA:CF:AB:97:A4:5B:1C:3D:46:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c693768-566f-3cb1-9ae0-9be4f12d911e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:e000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:04:c9:3a:e3:9e:cc:07:a8:3b:73:4b:fa:8b:f9:f9:2e:e4: 74:29:9e:2c:11:fa:4f:59:13:ff:3c:d7:ed:73:31:c2:3e:08: d2:87:0a:b3:8b:fd:59:30:10:f3:c1:7a:81:8a:0f:2d:1e:5b: 2f:db:bc:d4:fa:9e:0d:0d:c0:63:2b:b2:14:f1:ef:dc:e6:38: 24:55:e7:f2:d8:4c:27:d7:4d:ea:d8:e5:f5:6e:8d:8d:a8:34: 5f:dc:ee:77:e8:52:e1:40:4f:40:49:6c:17:c0:ae:81:a8:b8: da:d7:fd:61:b7:b6:d4:3b:2d:df:e8:33:99:51:c3:9c:07:61: 5f:38:b9:81:3d:6c:3e:fe:46:18:04:e2:0d:ac:33:ca:16:f5: d6:84:f6:bd:85:64:39:5c:34:43:2c:c1:46:ad:6a:2a:d6:c7: 3a:cf:ad:ac:28:6f:fd:a3:29:94:fb:2f:a4:43:0c:4f:d8:6a: 4a:69:01:c4:18:f2:8d:a0:f8:03:28:46:3c:4f:0d:71:90:b9: f2:4b:5f:1c:2d:b7:ab:a0:14:44:87:33:20:0f:d6:18:66:e2: 42:7a:a4:b6:81:9d:d6:de:0f:11:09:1c:f4:35:85:7f:a1:00: 2b:11:05:f0:c2:82:22:49:ea:b9:eb:ff:40:b4:53:df:73:cb: 97:54:11:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jefhuJNT8gfb8RkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzI0MjFhNGMtMDFhMi00MmIyLTllZTgtZTRlNTc5M2U2NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmz1xHnkeGdr/JFYopy/NsUoOO4s2jyTc5E0 dtQuC13i7FHJCoP1uoybk/kzcbc1gPnUSKxr1ozy2PlewLSufOtuNcHHFX1gti3L ZKXiaKjV8qIQWECATfoFhO0aMIqPQZXWfU5cZpw9Ebt6STH6jbqgUUvJf3Bq7DTN q86tkhfnEI2tQp5lzGPoTBU8I9dV6m8WeotENyAXQEbH2W7A+PbKm/8ZEDlkbsOK DIlZQpgoG4xXlpDWS+/o7cMDD2/UgoX16lm775BuxNTuYIPK8Opvkj2RxwnU/Q2i CgZR1bxWDB0j9TAipGXVwGIt3KPZkOG/eQYmf4ayJye09TUujwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHbXjVOYxiDI+dPKz6uXpFscPUZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWM2OTM3NjgtNTY2Zi0z Y2IxLTlhZTAtOWJlNGYxMmQ5MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuieAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABQTJOuOezAeoO3NL+ov5+S7kdCmeLBH6T1kT/zzX7XMxwj4I0ocK s4v9WTAQ88F6gYoPLR5bL9u81PqeDQ3AYyuyFPHv3OY4JFXn8thMJ9dN6tjl9W6N jag0X9zud+hS4UBPQElsF8Cugai42tf9Ybe21Dst3+gzmVHDnAdhXzi5gT1sPv5G GATiDawzyhb11oT2vYVkOVw0QyzBRq1qKtbHOs+trChv/aMplPsvpEMMT9hqSmkB xBjyjaD4AyhGPE8NcZC58ktfHC23q6AURIczIA/WGGbiQnqktoGd1t4PEQkc9DWF f6EAKxEF8MKCIknquev/QLRT33PLl1QRIA== -----END CERTIFICATE-----Generated at Thu Mar 12 09:31:05 2026 by rpki-client