$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa File: 68c68e79-1c47-3078-9917-47c5d37abb24.roa (raw, json) Hash identifier: eAi/Wpe+RRYas1dw396CK3iWTxgw6fPep55T+r4II+Y= Subject key identifier: 0E:F4:C8:C8:EF:87:55:10:FF:B1:A4:B3:41:10:1B:44:7D:1F:6B:F5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D237A1EBF7DF4F7AE3DAA4500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e89:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1e:bf:7d:f4:f7:ae:3d:aa:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0520af8e-43e1-4791-a5f9-93aeb9524771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:51:c3:e9:6e:a1:17:2d:18:18:f3:45:59: 0d:0c:1d:23:54:5d:b3:f4:02:70:0a:5b:6e:13:44: 1d:ee:f0:87:3e:bb:fa:75:71:dd:d8:37:d3:12:d5: 7c:0b:b5:23:a1:6f:76:6d:cb:cc:83:33:01:d2:2b: 51:41:a5:c7:df:b3:de:0e:90:79:e5:96:fc:74:f1: dd:a4:e7:10:6a:f8:25:9e:db:72:75:df:37:30:25: 59:59:1c:7d:74:c1:ca:30:88:66:eb:6a:76:5a:f1: e9:3c:c7:29:6d:00:45:3c:0e:95:8b:a3:3b:52:dc: 1b:42:18:c7:ed:34:3b:29:15:f1:19:3e:b8:1c:29: 94:36:c5:2f:2b:f5:a7:f9:4e:39:dc:4e:85:d8:c0: 74:67:76:5f:d7:cb:24:b0:ca:b1:0c:10:d7:b0:50: d2:f9:45:b0:d6:8a:6f:e2:15:20:39:f1:94:fa:fe: 0a:f4:23:36:c3:e7:84:54:35:f4:63:98:f5:37:f6: 70:7c:7e:27:c9:a5:20:01:9b:dc:8d:e7:96:2b:92: 9d:25:8f:c9:8d:a2:1e:95:c5:e7:5b:6f:f3:8b:ea: b6:63:0b:7d:dd:77:ba:81:69:f0:92:c0:ac:10:33: e3:31:a7:67:ff:81:11:41:57:17:a6:62:94:2b:bd: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:C8:C8:EF:87:55:10:FF:B1:A4:B3:41:10:1B:44:7D:1F:6B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:de:f1:05:e5:ec:ab:dd:10:10:59:2b:cb:f0:66:63:f5:7c: 22:bc:18:ca:77:db:69:9e:11:5d:6b:21:2a:78:5a:20:36:8f: 07:3f:37:12:86:86:5c:ea:72:60:4b:bb:4b:55:4e:4d:05:35: 3b:dc:dc:4b:ec:77:f1:6d:cf:22:aa:07:2b:bc:35:8a:6f:1b: 2d:13:3c:54:4b:14:c9:05:5a:d4:f1:d1:fa:ab:02:18:53:62: 81:65:e7:13:2d:2a:97:69:ef:96:cb:d6:2a:ec:14:34:96:aa: d9:d5:b5:a3:bc:54:01:ac:fb:8e:92:b9:d5:9a:18:41:bb:d5: d0:08:8c:72:da:fd:63:89:51:f2:49:68:84:cb:4b:42:c3:c0: 5b:08:33:e4:7f:a0:6d:c0:74:ff:06:e1:c3:89:f3:c4:6b:0f: 8c:1d:37:90:26:ea:44:33:32:e7:80:75:aa:1b:14:16:55:30: 84:16:2f:17:ee:ba:bd:a4:7b:ff:0d:f9:b2:95:e9:fe:a8:32: a9:87:f0:17:3e:46:61:2d:a0:b9:eb:32:8a:db:59:a1:b0:cb: 4e:2e:68:5e:61:c1:3c:33:e0:30:be:48:d9:78:67:4a:16:8c: 6b:1b:0b:bd:ec:6f:74:c0:57:38:da:d5:97:6f:f4:d1:cb:68: 17:47:21:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jeh6/ffT3rj2qRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDUyMGFmOGUtNDNlMS00NzkxLWE1ZjktOTNhZWI5NTI0NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wlRw+luoRctGBjzRVkNDB0jVF2z9AJwCltu E0Qd7vCHPrv6dXHd2DfTEtV8C7UjoW92bcvMgzMB0itRQaXH37PeDpB55Zb8dPHd pOcQavglnttydd83MCVZWRx9dMHKMIhm62p2WvHpPMcpbQBFPA6Vi6M7UtwbQhjH 7TQ7KRXxGT64HCmUNsUvK/Wn+U453E6F2MB0Z3Zf18sksMqxDBDXsFDS+UWw1opv 4hUgOfGU+v4K9CM2w+eEVDX0Y5j1N/ZwfH4nyaUgAZvcjeeWK5KdJY/JjaIelcXn W2/zi+q2Ywt93Xe6gWnwksCsEDPjMadn/4ERQVcXpmKUK73v6wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA70yMjvh1UQ/7Gks0EQG0R9H2v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhjNjhlNzktMWM0Ny0z MDc4LTk5MTctNDdjNWQzN2FiYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAd7xBeXsq90QEFkry/BmY/V8IrwYynfbaZ4RXWshKnhaIDaPBz83 EoaGXOpyYEu7S1VOTQU1O9zcS+x38W3PIqoHK7w1im8bLRM8VEsUyQVa1PHR+qsC GFNigWXnEy0ql2nvlsvWKuwUNJaq2dW1o7xUAaz7jpK51ZoYQbvV0AiMctr9Y4lR 8klohMtLQsPAWwgz5H+gbcB0/wbhw4nzxGsPjB03kCbqRDMy54B1qhsUFlUwhBYv F+66vaR7/w35spXp/qgyqYfwFz5GYS2guesyittZobDLTi5oXmHBPDPgML5I2Xhn ShaMaxsLvexvdMBXONrVl2/00ctoF0chSg== -----END CERTIFICATE-----Generated at Thu Mar 12 09:35:07 2026 by rpki-client