$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a020f5a8-63e3-3764-8a0d-6e2c4a0392d4.roa File: a020f5a8-63e3-3764-8a0d-6e2c4a0392d4.roa (raw, json) Hash identifier: 7uMLNplUai7qnTWbpNGCwMgNQeOv5mAlWKwIMQ4dqno= Subject key identifier: 2A:0B:EB:E6:10:35:7D:E0:9A:E1:30:0E:72:06:91:7F:07:01:C0:0A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D1707E732947BF82CD9D4B520 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a020f5a8-63e3-3764-8a0d-6e2c4a0392d4.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 2604:2e88:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e7:32:94:7b:f8:2c:d9:d4:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=c25a9757-6791-40c4-8fdb-0fe3728830c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:cf:fc:bc:68:17:f7:8e:4c:7d:78:51:95: 5f:1e:77:8b:47:23:14:10:a1:b1:c8:87:9f:6e:73: ed:cc:d1:45:fc:07:8e:4f:ba:4d:67:18:65:34:a0: cc:79:9b:7d:40:4f:35:3f:fb:7c:f1:8c:bb:05:1b: 1c:8f:cf:14:f2:4e:15:0f:61:be:a8:10:49:ca:8b: b9:a7:55:20:5b:63:ae:ba:8d:fb:ac:8f:3c:7c:62: 32:63:bf:01:0a:63:dc:09:8a:97:ae:0a:56:72:3f: be:1a:83:eb:b6:f5:85:fd:3b:3f:ef:ea:be:65:0c: ea:27:95:ca:67:75:28:cb:25:8c:5f:de:71:ee:61: 7e:6d:5b:f8:17:5e:66:72:a9:b5:b1:be:d9:24:e3: 69:4f:a9:1e:9d:e8:09:c6:82:4e:89:67:11:f8:f1: 78:81:aa:40:82:cc:fb:20:41:dd:53:d7:87:90:5a: 83:ee:5c:ab:34:57:9b:d2:08:22:e1:ab:4d:b3:4b: e6:d0:c1:78:36:e8:29:5d:d7:3f:e8:7c:36:59:42: 79:e7:7e:46:06:3e:bd:eb:94:f0:83:9b:46:ed:97: 10:73:4e:f1:90:2a:e1:42:00:97:39:bf:f2:d2:6c: a8:88:08:f8:33:21:3b:bc:59:7f:79:a0:1b:98:07: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:EB:E6:10:35:7D:E0:9A:E1:30:0E:72:06:91:7F:07:01:C0:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a020f5a8-63e3-3764-8a0d-6e2c4a0392d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:00:19:4e:9e:5e:6a:fe:f3:5f:76:f0:f5:5c:15:0e:1f:62: 1c:aa:68:05:1a:7f:97:29:9d:2d:c3:ab:68:9a:7d:92:37:04: 45:62:6c:8f:cd:d9:7c:bb:e8:dd:76:75:f5:be:0a:d8:59:f3: a1:56:bd:00:22:a8:5d:f7:af:40:de:c1:6c:95:c1:94:2f:94: 41:b4:4e:b3:d4:3b:8e:06:d4:0c:64:09:1d:6b:e8:f5:6a:da: 22:a4:32:30:16:fa:ec:6f:6e:9e:79:b8:69:e7:06:00:46:b7: 27:ca:b7:76:6f:c6:08:a4:ac:a8:0a:51:41:7f:7d:1d:33:b5: f7:8b:88:74:f4:e6:e9:3f:84:c0:d9:01:cb:2f:a1:d4:96:ee: 85:7f:26:31:54:b2:3a:73:e5:2f:76:6e:cc:fc:bc:ac:d0:54: 45:c3:36:82:32:98:30:96:95:5a:0f:7d:89:94:32:8d:fb:00: 2c:7d:88:4b:1f:2f:5d:21:28:27:fa:97:b7:f8:31:11:07:24: bf:84:bd:9e:0d:95:ca:a7:f0:85:0c:86:e1:87:0b:bf:5d:42: 41:5c:65:99:f5:20:31:5b:1d:22:54:95:22:e1:43:e6:d4:57: fb:51:df:f9:ee:63:85:74:37:16:ce:ef:ac:6d:80:83:69:f1: a3:cb:a5:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0XB+cylHv4LNnUtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YzI1YTk3NTctNjc5MS00MGM0LThmZGItMGZlMzcyODgzMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhTP/LxoF/eOTH14UZVfHneLRyMUEKGxyIef bnPtzNFF/AeOT7pNZxhlNKDMeZt9QE81P/t88Yy7BRscj88U8k4VD2G+qBBJyou5 p1UgW2Ouuo37rI88fGIyY78BCmPcCYqXrgpWcj++GoPrtvWF/Ts/7+q+ZQzqJ5XK Z3UoyyWMX95x7mF+bVv4F15mcqm1sb7ZJONpT6kenegJxoJOiWcR+PF4gapAgsz7 IEHdU9eHkFqD7lyrNFeb0ggi4atNs0vm0MF4NugpXdc/6Hw2WUJ5535GBj6965Tw g5tG7ZcQc07xkCrhQgCXOb/y0myoiAj4MyE7vFl/eaAbmAd92wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCoL6+YQNX3gmuEwDnIGkX8HAcAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTAyMGY1YTgtNjNlMy0z NzY0LThhMGQtNmUyYzRhMDM5MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiIQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXQAZTp5eav7zX3bw9VwVDh9iHKpoBRp/lymdLcOraJp9kjcERWJs j83ZfLvo3XZ19b4K2FnzoVa9ACKoXfevQN7BbJXBlC+UQbROs9Q7jgbUDGQJHWvo 9WraIqQyMBb67G9unnm4aecGAEa3J8q3dm/GCKSsqApRQX99HTO194uIdPTm6T+E wNkByy+h1JbuhX8mMVSyOnPlL3ZuzPy8rNBURcM2gjKYMJaVWg99iZQyjfsALH2I Sx8vXSEoJ/qXt/gxEQckv4S9ng2VyqfwhQyG4YcLv11CQVxlmfUgMVsdIlSVIuFD 5tRX+1Hf+e5jhXQ3Fs7vrG2Ag2nxo8ulEA== -----END CERTIFICATE-----Generated at Thu Mar 12 06:41:04 2026 by rpki-client