$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa File: a2015884-e184-3346-b711-59bf5b67b492.roa (raw, json) Hash identifier: fEZN4d7CR8u+7ZcmS28TjEQKoUp42DGWyqjmQ3IM+5U= Subject key identifier: 23:68:9D:06:77:D1:38:33:0E:DD:86:D9:64:36:E7:73:16:21:3F:77 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D1B1A66B019E3AA6D308B60E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e88:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:66:b0:19:e3:aa:6d:30:8b:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=95f2f419-2883-492a-9474-df74c497767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:90:d3:c3:72:de:0c:73:72:3e:b4:d0:43:dd: 3b:1f:2c:2e:ed:a7:b1:66:98:c2:5a:0a:2f:f7:29: fa:da:48:0b:8a:2b:41:64:0a:c4:ad:60:5e:d1:ef: 3b:01:49:25:f0:b0:8f:52:21:85:6a:f9:8e:bf:96: 0c:aa:cb:4e:05:c9:17:0c:85:81:c7:5a:3d:f3:87: f6:a1:a9:0f:9b:f0:07:9a:65:6c:c1:b8:07:6f:a8: 1e:c7:d5:72:52:f5:16:ca:02:c0:c3:f5:1b:ba:61: 4a:0e:bc:34:56:48:78:b6:78:27:94:8f:17:34:25: f3:ea:82:7e:24:2e:a0:02:73:1b:e9:0f:11:ac:3f: 43:af:93:33:c9:21:a6:43:77:2f:2e:51:bb:50:d0: 87:cc:4f:b4:8f:c1:8e:01:64:0b:8c:38:db:60:e3: a4:6d:08:e2:94:a1:d2:3e:b0:01:fd:3f:46:c4:43: be:2b:42:60:87:01:0d:43:e7:44:c8:6c:97:6a:ee: 53:6c:f6:84:df:28:d5:93:56:dc:23:d8:3d:10:c0: c6:dc:3b:ed:28:06:20:ad:cf:8b:0c:1e:ec:0f:b3: e3:6f:a3:79:f3:37:c6:ac:28:a9:e2:29:00:23:9f: d1:8d:8c:12:16:e5:91:bd:29:07:7d:ec:23:c4:d6: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:9D:06:77:D1:38:33:0E:DD:86:D9:64:36:E7:73:16:21:3F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2015884-e184-3346-b711-59bf5b67b492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:f800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b7:35:ae:02:86:a9:44:0d:4f:2c:df:b8:79:07:ef:98:b0: 95:2e:7a:66:87:3a:81:ed:f5:e3:65:3a:0c:4e:63:95:c5:da: 83:ca:1b:c5:54:e3:a9:63:8c:7b:47:a7:66:05:ca:c7:4a:26: 65:e3:b0:db:0e:65:e3:82:11:07:db:a6:e1:e6:e6:1b:26:2b: 28:a2:c7:23:da:f4:50:ed:5a:82:d5:80:e3:d3:04:e2:ea:28: 36:f5:f5:b8:32:76:f6:ae:2f:2b:e4:66:0b:60:31:cc:7b:b0: 66:b5:29:ff:5c:ba:b6:9c:bb:a1:6e:33:dd:78:eb:55:78:2e: c6:c0:9d:19:3f:56:cd:4d:9b:2a:81:74:66:bd:76:be:fa:de: 12:2d:2f:c8:f7:59:6e:55:2f:2f:79:11:b9:b1:49:99:02:d6: 23:0c:79:3f:69:4e:e9:ce:27:eb:ef:56:94:c7:42:ce:dd:40: ce:ff:75:0d:ab:7e:60:00:b8:4e:e6:94:90:f0:be:f5:12:92: 49:fb:c5:76:88:da:52:ba:19:19:9b:49:d5:84:36:78:f2:d4: 4f:8d:da:98:44:52:f0:43:44:e3:1f:c3:87:8b:06:a3:e0:f1: 79:dd:53:ec:85:3b:61:b0:74:91:f8:63:33:92:71:c5:48:c2: 14:e2:5b:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0bGmawGeOqbTCLYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTVmMmY0MTktMjg4My00OTJhLTk0NzQtZGY3NGM0OTc3NjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5DTw3LeDHNyPrTQQ907Hywu7aexZpjCWgov 9yn62kgLiitBZArErWBe0e87AUkl8LCPUiGFavmOv5YMqstOBckXDIWBx1o984f2 oakPm/AHmmVswbgHb6gex9VyUvUWygLAw/UbumFKDrw0Vkh4tngnlI8XNCXz6oJ+ JC6gAnMb6Q8RrD9Dr5MzySGmQ3cvLlG7UNCHzE+0j8GOAWQLjDjbYOOkbQjilKHS PrAB/T9GxEO+K0JghwENQ+dEyGyXau5TbPaE3yjVk1bcI9g9EMDG3DvtKAYgrc+L DB7sD7Pjb6N58zfGrCip4ikAI5/RjYwSFuWRvSkHfewjxNZ4MQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCNonQZ30TgzDt2G2WQ253MWIT93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTIwMTU4ODQtZTE4NC0z MzQ2LWI3MTEtNTliZjViNjdiNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiPgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdrc1rgKGqUQNTyzfuHkH75iwlS56Zoc6ge3142U6DE5jlcXag8ob xVTjqWOMe0enZgXKx0omZeOw2w5l44IRB9um4ebmGyYrKKLHI9r0UO1agtWA49ME 4uooNvX1uDJ29q4vK+RmC2AxzHuwZrUp/1y6tpy7oW4z3XjrVXguxsCdGT9WzU2b KoF0Zr12vvreEi0vyPdZblUvL3kRubFJmQLWIwx5P2lO6c4n6+9WlMdCzt1Azv91 Dat+YAC4TuaUkPC+9RKSSfvFdojaUroZGZtJ1YQ2ePLUT43amERS8ENE4x/Dh4sG o+Dxed1T7IU7YbB0kfhjM5JxxUjCFOJb8Q== -----END CERTIFICATE-----Generated at Thu Mar 12 09:34:40 2026 by rpki-client