$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8baade0-ec60-3ee3-80c9-74eddf83fe06.roa File: f8baade0-ec60-3ee3-80c9-74eddf83fe06.roa (raw, json) Hash identifier: Sw/2LekXLBovpgEDZoNypSzf5D6IuAFrm/R28YkmK6k= Subject key identifier: 89:1F:D7:B1:17:E9:D3:BE:0F:8F:AC:C6:0B:B8:95:48:AE:1E:6A:6B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D100CF1D59380A138F0CA3300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8baade0-ec60-3ee3-80c9-74eddf83fe06.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 2604:2e87:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f1:d5:93:80:a1:38:f0:ca:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=c18be95d-5cba-4ec5-98f0-4e76ec86157f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:83:b5:14:40:43:fc:fb:77:b0:d5:90:41: bf:3f:15:ef:61:1c:ad:6c:d0:51:3b:39:76:75:a1: 72:30:bf:31:11:a4:20:b8:15:4f:86:4d:ef:56:0d: 0d:4b:fd:20:aa:1f:55:90:f2:bf:5e:fa:45:b2:61: 78:04:28:7f:56:48:ee:3d:77:f2:9c:31:06:05:2c: d0:b6:b8:eb:68:9a:cb:4a:e9:88:67:44:9c:f7:f5: 16:b1:b7:14:08:5e:95:90:fe:cd:55:eb:6d:6b:8c: 72:7e:30:ec:30:30:97:cc:ae:3b:42:17:50:46:93: 2e:2a:41:c8:40:7b:33:5b:34:c8:98:cd:47:09:8b: 3c:78:49:2f:3a:0e:8c:fd:cd:6f:ee:d3:f2:50:20: 30:8a:23:90:a6:8a:f8:13:36:d5:ac:b1:0c:36:3d: 50:58:c9:b3:29:7f:26:3d:b8:d9:23:9a:d2:0d:8b: 3e:ad:db:7f:93:0e:18:0e:fe:a3:f9:07:ec:0f:ba: fc:38:02:ca:ce:d8:a1:53:94:69:5e:5d:4a:cf:80: da:f2:9c:e7:f7:a2:5e:96:7b:9e:5e:77:87:98:c8: 50:9c:68:d6:b3:37:33:c3:c3:a0:b9:33:bd:69:66: fe:96:56:14:34:d9:ba:0f:72:da:b3:c4:be:24:f6: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1F:D7:B1:17:E9:D3:BE:0F:8F:AC:C6:0B:B8:95:48:AE:1E:6A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f8baade0-ec60-3ee3-80c9-74eddf83fe06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:79:70:ba:42:22:8f:c3:d8:8e:0d:e3:ef:62:5b:1f:1c:44: a5:5c:29:be:20:5d:7b:b1:82:4d:63:ee:57:08:29:96:12:f3: 36:ba:67:b0:9e:18:5e:f7:c6:28:f3:9e:8a:5e:53:a3:ef:13: 05:35:ff:a4:55:c2:02:b3:43:53:71:d8:e2:fb:d0:ff:9d:69: 48:49:50:8c:ca:d8:5f:8f:e0:9c:3c:7b:bb:e8:93:34:6d:59: 44:2f:fe:9f:69:4d:78:b7:e4:8c:b4:33:8a:a4:44:48:0a:8b: e0:78:fa:de:b9:90:e8:fb:49:85:cb:8f:92:b5:4a:25:1a:26: ef:c4:aa:24:3f:0c:9c:a4:34:70:d6:0c:8f:e0:f2:de:2a:0a: ba:a9:3a:45:e7:8f:a0:77:68:b8:0b:7b:b2:f0:27:ed:9f:61: d5:9d:9b:b6:45:e2:4a:2f:3e:92:2d:7d:aa:b8:8f:64:cf:60: e3:1a:48:2a:ed:7a:52:7a:c9:46:db:79:c8:b4:5c:30:e1:4b: 70:00:7a:aa:57:3f:ae:61:dc:22:c9:f0:1d:32:de:30:c3:d4: aa:31:5d:62:df:29:d0:a2:b5:12:83:de:8e:4e:9a:3e:c8:59: fb:b6:74:2e:29:85:9a:de:1c:5d:ee:5f:65:c4:19:33:68:83: 03:90:0b:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0QDPHVk4ChOPDKMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk YzE4YmU5NWQtNWNiYS00ZWM1LTk4ZjAtNGU3NmVjODYxNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxKDtRRAQ/z7d7DVkEG/PxXvYRytbNBROzl2 daFyML8xEaQguBVPhk3vVg0NS/0gqh9VkPK/XvpFsmF4BCh/VkjuPXfynDEGBSzQ trjraJrLSumIZ0Sc9/UWsbcUCF6VkP7NVetta4xyfjDsMDCXzK47QhdQRpMuKkHI QHszWzTImM1HCYs8eEkvOg6M/c1v7tPyUCAwiiOQpor4EzbVrLEMNj1QWMmzKX8m PbjZI5rSDYs+rdt/kw4YDv6j+QfsD7r8OALKztihU5RpXl1Kz4Da8pzn96Jelnue XneHmMhQnGjWszczw8OguTO9aWb+llYUNNm6D3Las8S+JPb6SQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIkf17EX6dO+D4+sxgu4lUiuHmprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjhiYWFkZTAtZWM2MC0z ZWUzLTgwYzktNzRlZGRmODNmZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh/Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJHlwukIij8PYjg3j72JbHxxEpVwpviBde7GCTWPuVwgplhLzNrpn sJ4YXvfGKPOeil5To+8TBTX/pFXCArNDU3HY4vvQ/51pSElQjMrYX4/gnDx7u+iT NG1ZRC/+n2lNeLfkjLQziqRESAqL4Hj63rmQ6PtJhcuPkrVKJRom78SqJD8MnKQ0 cNYMj+Dy3ioKuqk6ReePoHdouAt7svAn7Z9h1Z2btkXiSi8+ki19qriPZM9g4xpI Ku16UnrJRtt5yLRcMOFLcAB6qlc/rmHcIsnwHTLeMMPUqjFdYt8p0KK1EoPejk6a PshZ+7Z0LimFmt4cXe5fZcQZM2iDA5ALCA== -----END CERTIFICATE-----Generated at Thu Mar 12 06:37:19 2026 by rpki-client