$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa File: d6a8f18b-5e76-3449-a876-a38c58d3808a.roa (raw, json) Hash identifier: obRf+gm8gGONXG3jEfpMqGl3my/UQqSSoyEPyGFUzq0= Subject key identifier: B4:87:DD:AC:BC:84:C0:48:8D:84:20:94:84:1F:67:A9:71:D8:19:75 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D2379FCF0CFB99E8C52ABB820 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 2604:2e89:ec00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fc:f0:cf:b9:9e:8c:52:ab:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=cf919b70-a82f-4ccf-a031-d509afa3b8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:90:01:ca:f0:f2:a6:0a:ae:ac:c9:a9:91: d9:4a:0e:e0:3c:3c:a9:28:3a:1a:95:26:1c:af:54: f4:10:7b:fd:b6:5a:96:73:1d:07:c2:40:99:4e:68: d0:73:d3:b0:b3:96:3c:a6:29:85:0a:d9:01:20:31: ca:be:47:4a:1a:65:af:83:43:66:cb:12:36:34:b3: f6:f8:b8:74:97:6c:5a:5f:04:b0:70:43:27:08:11: b0:7b:25:91:71:2e:be:0a:7f:e9:da:cb:82:d4:c4: 1b:4c:b9:c8:0c:1c:05:87:7e:22:36:92:d5:71:99: dc:15:d5:72:e9:f6:34:2f:7b:dd:5b:63:a7:b4:b7: 78:36:29:54:5b:1a:a7:dd:82:1c:a2:f7:04:43:c8: b0:fc:ef:c7:71:59:ae:09:f9:82:73:bb:3a:f5:87: cf:ba:b3:13:7c:ac:e5:aa:a6:38:a3:61:33:c2:b4: 4c:e8:88:4a:4a:19:13:47:31:90:06:24:9a:50:41: 63:48:7d:63:09:6d:8e:87:4d:16:e8:f8:54:78:6c: 82:68:75:c9:7d:7e:c4:c0:be:0b:c2:34:22:ac:26: 7f:c3:1a:85:05:13:f9:d5:4d:39:8b:2b:fd:b8:db: 3e:7a:72:41:46:b8:a9:cc:d6:9d:6d:94:35:e4:a1: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:DD:AC:BC:84:C0:48:8D:84:20:94:84:1F:67:A9:71:D8:19:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d6a8f18b-5e76-3449-a876-a38c58d3808a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:ec00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2f:23:44:e5:88:0a:69:41:81:74:b5:31:7c:22:8d:43:b7: 08:fd:9b:ae:85:b1:1b:9d:f3:d4:4e:17:0a:b3:2c:c6:6f:1b: b0:06:a4:af:ea:7d:de:05:ad:1a:83:c3:9d:c0:03:2e:cb:65: 19:ce:1a:0f:8c:92:f9:40:89:52:9a:2b:7a:41:d1:ee:88:de: c0:24:ca:ad:0b:6e:6e:2f:b4:6e:d5:14:a7:e4:14:d3:c3:68: 20:44:79:31:20:b0:14:0a:74:d9:75:87:e9:23:62:cd:39:bb: 22:df:55:33:9f:93:83:c5:d1:76:60:13:41:82:a9:af:7a:ac: b8:c2:85:18:15:46:47:9d:02:7c:84:ce:95:57:16:28:79:a6: d8:43:2f:98:41:b1:5d:3c:3e:39:30:c7:58:c0:d1:c1:d3:8f: 6f:94:35:65:7f:19:03:a2:b4:2d:af:9b:af:20:0c:8e:3a:3f: 0b:b0:2a:e5:43:85:68:3f:e8:4c:67:ce:49:54:ff:6b:ae:55: e8:15:a0:85:5a:74:51:38:52:34:10:67:ea:aa:94:89:0e:ec: 6f:82:95:42:0c:f5:09:6a:ad:6c:c6:10:07:53:2c:9e:bc:f9: f6:d3:4a:51:dc:71:9b:d2:ee:27:dc:31:b4:e2:e7:c8:8b:65: cc:42:ac:40 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0jefzwz7mejFKruCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y5MTliNzAtYTgyZi00Y2NmLWEwMzEtZDUwOWFmYTNiOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAWQAcrw8qYKrqzJqZHZSg7gPDypKDoalSYc r1T0EHv9tlqWcx0HwkCZTmjQc9Ows5Y8pimFCtkBIDHKvkdKGmWvg0NmyxI2NLP2 +Lh0l2xaXwSwcEMnCBGweyWRcS6+Cn/p2suC1MQbTLnIDBwFh34iNpLVcZncFdVy 6fY0L3vdW2OntLd4NilUWxqn3YIcovcEQ8iw/O/HcVmuCfmCc7s69YfPurMTfKzl qqY4o2EzwrRM6IhKShkTRzGQBiSaUEFjSH1jCW2Oh00W6PhUeGyCaHXJfX7EwL4L wjQirCZ/wxqFBRP51U05iyv9uNs+enJBRripzNadbZQ15KGAcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLSH3ay8hMBIjYQglIQfZ6lx2Bl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDZhOGYxOGItNWU3Ni0z NDQ5LWE4NzYtYTM4YzU4ZDM4MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuieww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjS8jROWICmlBgXS1MXwijUO3CP2broWxG53z1E4XCrMsxm8bsAak r+p93gWtGoPDncADLstlGc4aD4yS+UCJUporekHR7ojewCTKrQtubi+0btUUp+QU 08NoIER5MSCwFAp02XWH6SNizTm7It9VM5+Tg8XRdmATQYKpr3qsuMKFGBVGR50C fITOlVcWKHmm2EMvmEGxXTw+OTDHWMDRwdOPb5Q1ZX8ZA6K0La+bryAMjjo/C7Aq 5UOFaD/oTGfOSVT/a65V6BWghVp0UThSNBBn6qqUiQ7sb4KVQgz1CWqtbMYQB1Ms nrz59tNKUdxxm9LuJ9wxtOLnyItlzEKsQA== -----END CERTIFICATE-----Generated at Thu Mar 12 06:36:40 2026 by rpki-client