$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa File: bf56dedf-58f6-3a50-a772-a07b6c69189c.roa (raw, json) Hash identifier: l7nxXiidoD8PafWvtgTPhqM8V51xvOhS5yInIaN28AA= Subject key identifier: 9D:C0:D9:C8:EA:5E:4D:B0:99:AE:8C:E2:D9:22:44:1A:82:B3:95:7C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D237A2A10F97ADF4A9A8910C7 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 2604:2e89:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2a:10:f9:7a:df:4a:9a:89:10:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ece0fc0c-56fb-450e-af6e-92dea31803bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:88:39:c7:ff:96:94:36:39:a7:c9:a7:b2: db:02:3a:78:b7:9f:32:1e:0c:a7:65:d4:7f:c0:00: d4:8c:98:08:9d:d9:b9:4a:b5:12:8c:c3:29:2b:7d: b4:5c:ea:6c:0f:0e:7a:1f:3b:31:11:28:15:aa:7b: de:37:ea:f5:1f:7d:53:58:ad:13:48:37:bb:ab:6d: 47:29:2e:0f:ed:7a:77:21:da:bf:ae:5d:48:78:08: 3d:ca:67:20:b3:ab:6f:30:c8:9c:64:97:d7:0f:f3: ed:a7:07:74:40:49:f8:8c:c4:1d:fd:ef:20:c8:00: 9e:b7:d9:5b:cb:11:24:62:9f:f6:a1:11:89:3c:0a: 6a:17:e6:2d:94:fd:6c:e7:30:9e:bb:3e:16:bb:56: 2b:0e:13:aa:5b:c0:30:ee:8c:95:7e:6c:08:02:b6: ff:b0:b9:59:f9:7a:00:a8:b9:30:5a:5d:87:0b:da: 42:30:ce:a0:cd:9e:d4:d0:50:4b:24:2e:1b:82:65: bc:a9:e5:e5:6a:f9:46:80:d6:07:d6:70:82:a6:67: ab:4d:4b:c7:7e:cd:b7:04:d9:e2:57:b5:f2:44:05: 0e:8a:45:8f:c5:db:a0:31:12:25:80:75:a2:8c:32: c5:10:94:c7:20:f9:09:d8:e5:55:70:64:81:13:a1: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:D9:C8:EA:5E:4D:B0:99:AE:8C:E2:D9:22:44:1A:82:B3:95:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c0:27:a8:5d:e9:cd:2c:b9:fb:f5:4f:9b:61:7f:c7:e2:07: 0a:7a:aa:41:e5:0b:6e:58:47:76:d9:eb:c4:ee:4f:25:9a:19: f3:24:5c:03:d9:52:cd:ff:3d:e7:ad:25:fc:c7:fd:4e:fe:2a: e9:9a:32:8c:4d:14:ac:c6:69:da:25:29:e2:d7:8c:b7:c0:c4: 94:f6:f1:0f:b9:d8:a0:42:37:a6:10:ca:0a:8c:16:2f:12:b8: 52:70:b9:99:37:06:16:0b:fe:70:c3:57:8f:06:0b:7e:4a:00: 59:40:7e:e4:94:bb:c8:fe:ed:95:2d:67:28:1f:ba:ac:36:f0: 8a:11:7f:b4:dc:02:6b:f2:1f:34:59:33:0b:33:ac:cd:8d:4c: 85:ae:d0:69:80:6e:01:7e:9c:9f:e1:57:82:29:c4:94:17:a9: 1b:d8:a2:72:7b:cf:4d:f8:ac:18:61:93:a0:96:bc:46:05:0d: eb:a9:3f:93:5e:76:8c:5e:ce:6e:48:a0:dc:af:f0:d2:db:5a: 42:5a:19:50:e7:79:36:15:76:ef:ab:ab:44:4a:f0:82:fb:fb: 5d:aa:bb:5c:20:e7:22:90:b7:16:fe:56:5f:c2:55:d1:d7:e2: 8a:b8:02:d5:f6:42:01:38:9d:6d:d0:e2:8b:0d:1d:06:ce:0a: 8d:17:d6:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jeioQ+XrfSpqJEMcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWNlMGZjMGMtNTZmYi00NTBlLWFmNmUtOTJkZWEzMTgwM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmqIOcf/lpQ2OafJp7LbAjp4t58yHgynZdR/ wADUjJgIndm5SrUSjMMpK320XOpsDw56HzsxESgVqnveN+r1H31TWK0TSDe7q21H KS4P7Xp3Idq/rl1IeAg9ymcgs6tvMMicZJfXD/Ptpwd0QEn4jMQd/e8gyACet9lb yxEkYp/2oRGJPApqF+YtlP1s5zCeuz4Wu1YrDhOqW8Aw7oyVfmwIArb/sLlZ+XoA qLkwWl2HC9pCMM6gzZ7U0FBLJC4bgmW8qeXlavlGgNYH1nCCpmerTUvHfs23BNni V7XyRAUOikWPxdugMRIlgHWijDLFEJTHIPkJ2OVVcGSBE6HasQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ3A2cjqXk2wma6M4tkiRBqCs5V8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY1NmRlZGYtNThmNi0z YTUwLWE3NzItYTA3YjZjNjkxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmMAnqF3pzSy5+/VPm2F/x+IHCnqqQeULblhHdtnrxO5PJZoZ8yRc A9lSzf89560l/Mf9Tv4q6ZoyjE0UrMZp2iUp4teMt8DElPbxD7nYoEI3phDKCowW LxK4UnC5mTcGFgv+cMNXjwYLfkoAWUB+5JS7yP7tlS1nKB+6rDbwihF/tNwCa/If NFkzCzOszY1Mha7QaYBuAX6cn+FXginElBepG9iicnvPTfisGGGToJa8RgUN66k/ k152jF7Obkig3K/w0ttaQloZUOd5NhV276urRErwgvv7Xaq7XCDnIpC3Fv5WX8JV 0dfiirgC1fZCATidbdDiiw0dBs4KjRfW5g== -----END CERTIFICATE-----Generated at Thu Mar 12 06:37:48 2026 by rpki-client