$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa File: a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa (raw, json) Hash identifier: DSKjTfKAYWcamoi8cpxCMS9CdEAxDpo8+SBtChPWM2I= Subject key identifier: ED:D5:09:8F:BF:73:5D:0F:7A:A8:37:AD:EE:DA:95:2B:97:A2:5A:8E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D9CEAAF66EE86E439A957E180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa Signing time: Fri 24 Apr 2026 13:00:31 +0000 ROA not before: Fri 24 Apr 2026 13:00:31 +0000 ROA not after: Thu 23 Jul 2026 13:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8f:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:ea:af:66:ee:86:e4:39:a9:57:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 24 13:00:31 2026 GMT Not After : Jul 23 13:00:31 2026 GMT Subject: CN=ba8b11a6-93fc-4494-a177-b91529305daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:d8:be:14:65:48:05:fd:1d:27:5b:54:30: 1e:2d:f7:4b:01:21:58:2d:a8:ef:af:97:5a:78:74: 7e:b3:06:17:c6:08:ad:8f:8e:56:e8:c2:93:85:b1: 93:36:1c:46:c9:3c:21:28:4a:6a:06:92:d9:7b:a9: 82:49:34:86:4b:aa:bd:c1:c6:da:ea:57:5a:04:e8: 99:76:8d:60:31:09:54:ed:20:42:3e:71:cb:e5:50: ac:dc:03:f9:ee:d5:18:32:8b:b1:d9:48:00:1a:13: 11:dc:95:ba:51:b4:f2:20:b3:a6:59:d4:3b:7c:a5: fe:2b:a6:62:25:4c:66:1f:f3:49:61:67:74:b3:e0: 46:f5:68:34:bb:e5:c6:4f:62:7e:44:73:23:b6:3b: 74:76:0b:88:d5:d9:06:a8:44:d5:96:97:4d:1a:38: 95:57:2a:50:b3:0b:58:dc:e4:8d:ac:f3:1a:7b:4b: 28:c8:c9:fa:8b:79:4e:17:6b:7b:64:14:d3:65:da: 9b:e1:1b:c1:75:bd:d1:cf:d4:99:86:11:d4:5e:10: 96:cf:3a:1f:5b:3e:55:57:25:06:12:e8:79:8e:66: 2f:cf:75:3b:f8:f9:3c:01:64:cb:d7:5d:d4:4f:c5: 75:59:73:44:b6:c1:d2:62:82:91:18:9b:75:0f:0c: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D5:09:8F:BF:73:5D:0F:7A:A8:37:AD:EE:DA:95:2B:97:A2:5A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3f3e58b-8c43-3a69-82dd-fa2e49703642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5d:89:fa:e4:83:98:6d:d4:70:5f:32:82:9e:53:1a:5c:51: b2:5d:43:96:b8:a3:87:0b:37:e3:5a:c1:e7:4b:8c:ed:db:91: 11:8c:54:d6:bd:14:52:ac:7f:4e:81:0e:03:f7:7e:a3:e6:e4: 9f:bf:36:f3:ef:d3:64:2f:96:4f:a6:2e:85:12:71:cf:68:83: 6b:73:7b:91:e4:5f:5a:a9:ae:a6:59:4c:21:6c:6d:86:3c:c1: f5:a7:8f:86:15:26:63:0b:9c:d9:4e:b6:1c:25:4b:d1:57:e5: fa:e6:4c:95:f7:33:77:de:54:30:4c:e7:b4:4e:1b:61:b0:da: 26:1d:65:26:cc:eb:da:b9:35:9b:a8:98:f2:e1:84:ba:ad:dc: 46:21:e3:1b:02:54:d8:db:45:75:d8:3e:49:7b:99:0d:87:06: 03:d3:74:c4:64:f6:4e:00:44:54:34:c2:11:e5:67:bc:58:93: 96:f6:25:63:75:db:f4:d8:5f:4d:54:6d:a6:d5:8f:3c:ce:fb: 30:c8:19:3c:24:84:35:b8:66:de:bf:fb:1d:de:18:75:78:23: 0c:ef:83:e7:b9:36:d8:c6:3f:3a:a6:57:64:e2:07:49:e8:5d: b7:97:14:25:5a:f5:0d:f4:5f:6d:bf:6f:51:ab:9c:be:47:1d: 8d:63:d4:df -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2c6q9m7obkOalX4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk YmE4YjExYTYtOTNmYy00NDk0LWExNzctYjkxNTI5MzA1ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyzYvhRlSAX9HSdbVDAeLfdLASFYLajvr5da eHR+swYXxgitj45W6MKThbGTNhxGyTwhKEpqBpLZe6mCSTSGS6q9wcba6ldaBOiZ do1gMQlU7SBCPnHL5VCs3AP57tUYMoux2UgAGhMR3JW6UbTyILOmWdQ7fKX+K6Zi JUxmH/NJYWd0s+BG9Wg0u+XGT2J+RHMjtjt0dguI1dkGqETVlpdNGjiVVypQswtY 3OSNrPMae0soyMn6i3lOF2t7ZBTTZdqb4RvBdb3Rz9SZhhHUXhCWzzofWz5VVyUG Euh5jmYvz3U7+Pk8AWTL113UT8V1WXNEtsHSYoKRGJt1DwzJPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFO3VCY+/c10Peqg3re7alSuXolqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNmM2U1OGItOGM0My0z YTY5LTgyZGQtZmEyZTQ5NzAzNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj9Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABl2J+uSDmG3UcF8ygp5TGlxRsl1Dlrijhws341rB50uM7duREYxU 1r0UUqx/ToEOA/d+o+bkn7828+/TZC+WT6YuhRJxz2iDa3N7keRfWqmupllMIWxt hjzB9aePhhUmYwuc2U62HCVL0Vfl+uZMlfczd95UMEzntE4bYbDaJh1lJszr2rk1 m6iY8uGEuq3cRiHjGwJU2NtFddg+SXuZDYcGA9N0xGT2TgBEVDTCEeVnvFiTlvYl Y3Xb9NhfTVRtptWPPM77MMgZPCSENbhm3r/7Hd4YdXgjDO+D57k22MY/OqZXZOIH Sehdt5cUJVr1DfRfbb9vUaucvkcdjWPU3w== -----END CERTIFICATE-----Generated at Fri May 8 18:25:26 2026 by rpki-client