$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b45a985d-130b-3bf2-9a6a-1849dc2949fd.roa File: b45a985d-130b-3bf2-9a6a-1849dc2949fd.roa (raw, json) Hash identifier: iH4aO6jtduSjSdNxcY7w5Fwl9/9deyBaf9v99QoXkMk= Subject key identifier: 14:0C:3F:BD:5A:C8:C5:2C:80:1E:4C:63:B0:6E:8F:79:F4:4D:8B:74 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D20AF467A721DCD984905C600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b45a985d-130b-3bf2-9a6a-1849dc2949fd.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e8c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:46:7a:72:1d:cd:98:49:05:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=ff27fea1-91f1-49d9-a893-a38680c85b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:99:b5:ef:c5:2e:ac:12:99:9a:88:bf:3b:05: e9:01:dc:d5:6a:13:73:d0:06:b0:42:ba:a2:35:21: 8d:c3:dc:12:45:6e:4d:08:2d:4f:0e:5b:98:7d:e2: b9:1d:c8:7f:2d:ff:89:34:ae:51:b7:46:c1:8a:9b: 60:96:dd:60:4e:62:41:5b:db:1d:a8:78:95:ff:93: 25:16:46:03:c4:f2:43:a3:51:06:1d:ca:b0:96:a2: d9:b0:f5:62:b2:da:97:09:0f:ac:60:02:95:a3:45: 9d:71:ba:48:db:a5:82:dc:d3:ff:ba:b7:21:46:54: ec:89:04:02:51:25:63:9d:97:81:ee:6f:82:bd:5f: db:86:f2:4f:53:de:ef:93:ca:1c:b2:ff:24:cc:37: 30:69:74:1d:21:a2:45:37:e2:76:14:fc:86:3c:79: a7:9b:0c:b5:63:65:a7:96:cb:d7:88:02:20:db:d2: 24:14:ba:d3:c0:4c:de:ae:d9:2c:33:dc:33:f9:f8: 5c:eb:91:8c:58:d4:2a:13:a2:b5:7c:53:b3:60:dd: e2:4a:91:34:f4:46:71:ce:3f:89:d2:0f:98:0e:e4: 60:40:e6:42:ec:fd:38:c2:a1:25:b6:7a:79:0f:11: 7f:de:63:90:9e:36:e1:00:eb:84:53:d4:24:f7:10: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:3F:BD:5A:C8:C5:2C:80:1E:4C:63:B0:6E:8F:79:F4:4D:8B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b45a985d-130b-3bf2-9a6a-1849dc2949fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:58:bf:1d:61:6f:9d:c1:65:c6:4e:27:0d:e4:3f:1a:db: b4:74:92:ea:28:2b:54:c6:82:f3:5a:cc:4f:af:8b:fb:67:86: 2f:61:7f:cf:49:3b:64:b6:ee:1e:02:b1:f9:4f:31:c8:c1:ce: 0e:c5:1e:a6:f5:72:d6:83:f5:17:7b:39:4b:61:07:47:4b:a5: ae:85:4d:d5:fc:46:c0:8b:68:a7:32:dc:40:cd:6b:ad:42:14: c8:07:69:4e:cc:ed:bb:03:a4:dd:5b:e3:d3:a7:2c:27:20:f6: 28:fe:c2:35:16:06:d4:e3:c0:bb:0d:41:91:1e:15:89:da:3a: d3:56:1a:f2:db:b5:d2:4e:57:05:ac:4a:7f:14:4f:4c:7b:33: 70:6a:27:46:38:5c:24:08:0b:9d:25:f5:32:62:7b:cb:bb:28: 62:08:47:5c:0d:c4:34:12:24:4c:55:e2:b3:ad:0c:4d:47:f8: ee:0c:56:0f:f4:98:ff:dc:18:d7:ea:00:51:d0:38:a9:3e:05: 60:56:c0:3f:5d:e5:c8:0d:a6:d9:e9:fe:bd:54:d8:75:8e:08: 22:f0:4e:76:75:73:35:fb:17:b3:e2:9d:64:e6:b4:90:dc:18: 2c:cd:6a:08:86:08:9d:32:e1:f2:b5:3a:e0:3b:f9:ad:50:30: 6e:5f:0d:46 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0gr0Z6ch3NmEkFxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmYyN2ZlYTEtOTFmMS00OWQ5LWE4OTMtYTM4NjgwYzg1YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipm178UurBKZmoi/OwXpAdzVahNz0AawQrqi NSGNw9wSRW5NCC1PDluYfeK5Hch/Lf+JNK5Rt0bBiptglt1gTmJBW9sdqHiV/5Ml FkYDxPJDo1EGHcqwlqLZsPVistqXCQ+sYAKVo0WdcbpI26WC3NP/urchRlTsiQQC USVjnZeB7m+CvV/bhvJPU97vk8ocsv8kzDcwaXQdIaJFN+J2FPyGPHmnmwy1Y2Wn lsvXiAIg29IkFLrTwEzertksM9wz+fhc65GMWNQqE6K1fFOzYN3iSpE09EZxzj+J 0g+YDuRgQOZC7P04wqEltnp5DxF/3mOQnjbhAOuEU9Qk9xDB2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBQMP71ayMUsgB5MY7Buj3n0TYt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjQ1YTk4NWQtMTMwYi0z YmYyLTlhNmEtMTg0OWRjMjk0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQsdYvx1hb53BZcZOJw3kPxrbtHSS6igrVMaC81rMT6+L+2eGL2F/ z0k7ZLbuHgKx+U8xyMHODsUepvVy1oP1F3s5S2EHR0ulroVN1fxGwItopzLcQM1r rUIUyAdpTsztuwOk3Vvj06csJyD2KP7CNRYG1OPAuw1BkR4Vido601Ya8tu10k5X BaxKfxRPTHszcGonRjhcJAgLnSX1MmJ7y7soYghHXA3ENBIkTFXis60MTUf47gxW D/SY/9wY1+oAUdA4qT4FYFbAP13lyA2m2en+vVTYdY4IIvBOdnVzNfsXs+KdZOa0 kNwYLM1qCIYInTLh8rU64Dv5rVAwbl8NRg== -----END CERTIFICATE-----Generated at Thu Mar 12 09:34:40 2026 by rpki-client