$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa File: b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa (raw, json) Hash identifier: c34EM0JQHnE/JoD/EiQ5zYMsyWDNXMm5Si1ZWl78eGk= Subject key identifier: 33:AD:40:D5:A6:83:85:2B:6E:78:82:7F:9F:0D:05:D3:C8:9A:46:60 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D20AF4B287A4548F6417D1080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e8e:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4b:28:7a:45:48:f6:41:7d:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=fc59a9c8-9594-416f-99e4-f7a920c1e74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:39:48:58:76:a8:48:81:af:10:e2:43:06: ec:bf:fa:a5:f8:58:ec:8b:08:e8:17:08:e0:72:7d: 78:d6:fc:e1:58:f9:37:91:ac:17:c8:36:43:1d:9e: 04:5c:fa:02:a9:ce:27:98:de:04:fa:9c:9f:bb:63: 9d:6c:27:11:f4:8c:4e:4e:04:fd:96:de:58:d3:29: 2a:94:38:68:13:a0:4d:c8:6e:d9:32:e1:f2:97:51: 55:ae:bd:29:b1:cb:18:02:d3:0d:cf:c0:c5:03:06: ae:4f:9d:f0:d3:b0:53:f8:b7:bd:cb:b5:14:84:8b: da:e3:49:fe:ae:67:63:99:79:87:7e:58:d1:3e:5b: f3:73:0c:c0:d7:9b:84:c2:ca:3e:3e:a8:81:49:1b: af:e2:51:81:16:81:83:e7:86:0b:9e:be:8f:89:65: d0:26:d3:bb:e4:56:83:2e:44:8d:0b:4c:22:9b:75: ea:73:23:99:ab:84:12:d1:08:cd:bd:67:1b:e8:c0: 30:5a:06:1a:44:0d:a1:06:1d:ab:e3:be:5a:f7:00: d2:c5:8c:8b:63:cd:09:9a:60:79:f0:bd:ee:82:51: 70:5a:a0:ba:9c:0d:bb:7e:4b:f2:98:29:f0:a8:ec: 3e:c8:e1:a2:12:91:8b:d0:3e:47:cd:bd:4d:e1:d5: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:40:D5:A6:83:85:2B:6E:78:82:7F:9F:0D:05:D3:C8:9A:46:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b648d3d8-1b7f-3cdb-ba66-c8def564248b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:20:37:d6:5e:8b:50:12:de:d4:3d:d1:c0:aa:fd:b6:08:82: 91:6e:9b:9b:91:45:38:4d:39:95:a8:ce:4a:99:82:93:08:cf: 9b:cd:7f:4c:f1:20:15:5d:d0:1b:d8:74:7a:2b:aa:b3:d2:bd: 73:61:53:76:47:83:14:81:71:fc:2d:95:9f:9e:a8:ae:76:b3: 44:48:d3:a9:fc:17:df:15:21:61:fc:a3:c3:36:06:96:ae:00: f4:ca:5a:3d:df:3c:68:02:a5:1f:70:73:b1:94:7b:fe:80:a5: 87:a9:8a:aa:de:e0:c7:fe:fc:74:4a:2d:11:34:ed:e6:7c:48: 0d:97:9b:cc:82:26:08:8d:fe:81:62:ec:5e:9e:2a:93:46:85: a9:a8:6c:67:71:1b:43:69:76:d5:37:0c:64:4c:b4:7b:02:cf: 67:c1:ec:18:8e:18:8b:cf:61:88:87:9a:0c:79:85:84:2c:85: ea:51:46:57:67:77:de:53:f6:77:74:47:ed:cf:c6:6a:c7:74: 6e:90:d2:a4:ad:f9:22:78:89:b0:b7:43:0e:1a:2b:df:36:00: 4d:41:e0:d4:00:f9:c1:bd:4f:36:12:7d:6b:3b:0c:8c:44:ad: 68:b3:01:e0:57:70:86:90:ba:32:2e:b1:83:69:e1:84:59:fd: f4:d3:c2:17 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0gr0soekVI9kF9EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmM1OWE5YzgtOTU5NC00MTZmLTk5ZTQtZjdhOTIwYzFlNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxc5SFh2qEiBrxDiQwbsv/ql+FjsiwjoFwjg cn141vzhWPk3kawXyDZDHZ4EXPoCqc4nmN4E+pyfu2OdbCcR9IxOTgT9lt5Y0ykq lDhoE6BNyG7ZMuHyl1FVrr0pscsYAtMNz8DFAwauT53w07BT+Le9y7UUhIva40n+ rmdjmXmHfljRPlvzcwzA15uEwso+PqiBSRuv4lGBFoGD54YLnr6PiWXQJtO75FaD LkSNC0wim3XqcyOZq4QS0QjNvWcb6MAwWgYaRA2hBh2r475a9wDSxYyLY80JmmB5 8L3uglFwWqC6nA27fkvymCnwqOw+yOGiEpGL0D5Hzb1N4dUhawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDOtQNWmg4UrbniCf58NBdPImkZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjY0OGQzZDgtMWI3Zi0z Y2RiLWJhNjYtYzhkZWY1NjQyNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujqQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkSA31l6LUBLe1D3RwKr9tgiCkW6bm5FFOE05lajOSpmCkwjPm81/ TPEgFV3QG9h0eiuqs9K9c2FTdkeDFIFx/C2Vn56ornazREjTqfwX3xUhYfyjwzYG lq4A9MpaPd88aAKlH3BzsZR7/oClh6mKqt7gx/78dEotETTt5nxIDZebzIImCI3+ gWLsXp4qk0aFqahsZ3EbQ2l21TcMZEy0ewLPZ8HsGI4Yi89hiIeaDHmFhCyF6lFG V2d33lP2d3RH7c/Gasd0bpDSpK35IniJsLdDDhor3zYATUHg1AD5wb1PNhJ9azsM jEStaLMB4FdwhpC6Mi6xg2nhhFn99NPCFw== -----END CERTIFICATE-----Generated at Thu Mar 12 09:34:29 2026 by rpki-client