$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa File: 0efee355-5896-3c51-847c-e6f6ca25205e.roa (raw, json) Hash identifier: lgRQjHmMD7JULJKjtQqIaVBEJEkUNMoF74DdUG3/3W0= Subject key identifier: 8C:39:C6:DC:7E:06:CA:FA:73:86:EF:8E:6F:BB:14:D7:81:17:66:82 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D4D5A93DFD718C22C4041ED80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8f:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:93:df:d7:18:c2:2c:40:41:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=66d15c79-0225-44f0-8e2a-cb696ad77dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:7b:c4:9a:c4:cf:8d:74:9f:ff:79:ca:d0: f9:8d:d8:dd:f2:ca:36:8b:39:18:bb:a9:44:a4:2c: b5:37:cb:59:bb:97:55:e3:52:f5:d6:2a:26:65:2f: 3b:48:c7:72:ba:76:3a:5c:3a:fd:62:32:e3:e1:61: 56:d1:7a:70:b9:d9:fa:50:c3:90:e9:cc:a4:cb:80: ff:f2:94:ac:e6:94:66:4c:2b:7b:ad:04:8b:44:9f: cf:89:cf:a6:0b:24:46:2f:ff:3c:d6:b1:46:ef:28: fb:f8:5f:a6:b6:0b:5d:01:1a:72:6a:03:81:ef:ef: 1d:18:a5:09:35:8f:76:32:e5:4c:83:2f:72:ac:24: e4:a1:bb:f5:7b:c5:95:2d:5d:21:04:f7:a1:a5:4d: 3f:00:69:1b:6d:da:ea:2c:46:fe:96:d9:2b:23:9c: ed:b9:e7:c3:1b:12:16:44:e6:c0:1c:d5:f1:5e:b9: f9:19:17:b8:07:b6:a3:43:17:d3:e6:50:e8:fa:c1: 6f:94:17:b9:ed:dc:2d:91:ab:42:eb:9c:dc:18:29: 87:d5:9f:79:f0:c6:77:93:b8:4a:1f:c2:4d:64:c3: 30:02:31:25:c9:a7:dd:b6:01:36:e1:64:71:44:85: 5d:8e:1a:2e:47:cc:28:76:76:c6:1c:f9:14:32:85: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:C6:DC:7E:06:CA:FA:73:86:EF:8E:6F:BB:14:D7:81:17:66:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0efee355-5896-3c51-847c-e6f6ca25205e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2e:00:42:c4:e3:c6:95:2d:03:bf:2d:7b:d5:6a:93:de:cd: 21:00:f4:d1:c7:47:80:2e:cc:84:52:56:d2:19:80:33:1c:2a: 2a:86:ce:0d:6b:23:b7:71:cb:bc:d5:7f:15:65:85:07:6b:2f: 29:f1:e3:e5:33:cf:74:37:c1:19:b1:59:7f:03:41:94:2c:d3: 24:8a:e0:ed:b0:ba:87:af:df:fd:e4:22:46:bd:69:0f:ee:b5: a5:99:08:63:cc:4e:2c:91:1d:0a:d9:8c:5c:12:55:32:7d:e6: fc:15:33:d1:f2:31:1f:b3:77:fb:55:4c:64:bf:b8:04:5f:e6: 86:b4:b0:c4:9f:cc:5b:cb:80:00:42:28:40:c4:45:5a:67:67: 8c:81:77:eb:62:53:56:81:6f:0b:c2:bf:3e:46:80:77:fd:c7: e6:4a:35:4c:24:6b:ae:65:0c:0a:57:82:07:21:7d:47:05:2b: 8f:09:52:ea:0b:fe:5f:ac:2c:7d:04:cc:bd:86:1a:a6:2f:cf: 99:51:92:67:34:5d:61:f9:47:37:66:cb:65:d5:ab:73:9e:63: 8d:56:55:1e:d7:41:98:7e:94:e6:27:ad:16:47:91:a8:ed:fc: 80:d7:0d:f4:6f:ab:a9:2b:f3:f7:90:1c:76:cb:52:53:fb:bf: b6:c6:bf:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1NWpPf1xjCLEBB7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjZkMTVjNzktMDIyNS00NGYwLThlMmEtY2I2OTZhZDc3ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIl7xJrEz410n/95ytD5jdjd8so2izkYu6lE pCy1N8tZu5dV41L11iomZS87SMdyunY6XDr9YjLj4WFW0Xpwudn6UMOQ6cyky4D/ 8pSs5pRmTCt7rQSLRJ/Pic+mCyRGL/881rFG7yj7+F+mtgtdARpyagOB7+8dGKUJ NY92MuVMgy9yrCTkobv1e8WVLV0hBPehpU0/AGkbbdrqLEb+ltkrI5ztuefDGxIW RObAHNXxXrn5GRe4B7ajQxfT5lDo+sFvlBe57dwtkatC65zcGCmH1Z958MZ3k7hK H8JNZMMwAjElyafdtgE24WRxRIVdjhouR8wodnbGHPkUMoXxZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIw5xtx+Bsr6c4bvjm+7FNeBF2aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGVmZWUzNTUtNTg5Ni0z YzUxLTg0N2MtZTZmNmNhMjUyMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmi4AQsTjxpUtA78te9Vqk97NIQD00cdHgC7MhFJW0hmAMxwqKobO DWsjt3HLvNV/FWWFB2svKfHj5TPPdDfBGbFZfwNBlCzTJIrg7bC6h6/f/eQiRr1p D+61pZkIY8xOLJEdCtmMXBJVMn3m/BUz0fIxH7N3+1VMZL+4BF/mhrSwxJ/MW8uA AEIoQMRFWmdnjIF362JTVoFvC8K/PkaAd/3H5ko1TCRrrmUMCleCByF9RwUrjwlS 6gv+X6wsfQTMvYYapi/PmVGSZzRdYflHN2bLZdWrc55jjVZVHtdBmH6U5ietFkeR qO38gNcN9G+rqSvz95AcdstSU/u/tsa/sw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:34 2026 by rpki-client