$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/159239f8-030e-3bcc-932f-d9389c6689a7.roa File: 159239f8-030e-3bcc-932f-d9389c6689a7.roa (raw, json) Hash identifier: MQdA+PLrWrf2krXulArQ3ePXW9iPwIWUP2MXBMMuPOs= Subject key identifier: 2D:19:10:3E:ED:75:E2:BE:4C:70:AA:33:F7:15:18:D4:25:07:75:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CC347374616C3A6CEE0841280 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/159239f8-030e-3bcc-932f-d9389c6689a7.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 19905 IP address blocks: 2604:2e89:7c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:37:46:16:c3:a6:ce:e0:84:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=fd1c5431-52ee-483c-855c-0a66d15e3a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:db:1b:34:39:dd:31:c2:01:80:50:32:c4: eb:09:55:65:f4:2c:a5:f5:41:86:db:0b:87:55:89: 6b:ee:5a:b8:66:7f:2b:90:b4:18:8d:54:6d:33:52: 32:4c:11:cd:32:4d:8f:00:7f:4f:4d:15:43:bb:43: 78:ed:cf:05:c6:c4:9a:a7:fe:42:8a:59:b2:d8:cf: 1b:28:92:f4:6a:22:86:31:fe:49:09:24:03:90:d0: b0:26:4f:b0:6f:75:c6:83:98:ab:11:e1:e0:82:7a: f7:aa:d7:1b:ab:05:a2:03:6e:d6:12:d6:d6:50:04: 69:86:b8:92:b0:83:c0:29:92:25:17:f1:37:1a:a1: 48:74:1c:07:d8:2b:85:78:89:bb:a9:da:21:e9:b9: a6:3b:0f:08:c2:bb:ce:c8:b8:16:51:30:cf:8d:f5: 17:2e:a5:4a:ee:cb:29:30:ea:b3:61:8c:c4:fa:ba: db:86:4b:92:d8:6e:cf:31:9e:e6:eb:87:94:e9:5a: 9a:10:fd:f9:cd:b4:99:ed:63:6a:90:d0:16:e4:53: 30:fc:fe:79:4a:a4:30:83:82:d5:12:ed:50:59:ec: 14:81:0b:5a:ec:08:81:02:d8:89:3d:4a:a2:f6:5e: d7:b6:7d:05:25:06:07:11:54:fb:c7:f9:68:6d:c2: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:10:3E:ED:75:E2:BE:4C:70:AA:33:F7:15:18:D4:25:07:75:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/159239f8-030e-3bcc-932f-d9389c6689a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:7c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0c:e0:7b:d4:4e:40:ef:25:b0:04:f0:98:a5:9e:90:cd:0a: 98:bf:68:6b:f4:d9:d4:3c:c2:cc:99:f2:4c:6d:27:b5:f8:f3: 75:06:22:91:22:ed:ec:e5:5e:1d:1c:aa:0f:e3:41:71:e1:41: e1:c3:2e:c2:02:f1:50:fc:aa:7e:f4:df:14:f8:42:32:95:51: d5:37:cd:bb:2b:80:48:64:6f:0d:3f:d5:13:62:a1:e7:93:cc: 0d:95:ec:99:25:52:77:4d:e6:67:fa:39:f4:c4:a0:62:68:44: 02:7d:40:a2:a3:22:80:b8:a8:d1:ae:22:37:df:b3:2c:5a:a8: 38:20:ff:9b:41:8b:fd:68:fa:86:cc:81:dc:fb:eb:4b:ae:05: d5:14:13:ff:c9:3a:a9:00:8e:9a:a4:59:fd:10:9a:a5:3b:30: 66:be:4c:2d:17:47:51:7b:db:c6:97:f9:5b:b0:40:6d:b1:36: bc:c3:7b:b0:79:c2:ca:f6:56:06:29:ac:f2:b5:6a:85:a4:d1: d0:58:9c:81:68:94:08:b5:2e:78:64:88:d2:76:f4:b0:a5:a2: 29:de:e7:0d:2b:09:67:63:0e:69:77:4e:0f:04:10:9b:87:30: ab:1d:4d:6d:e4:c2:ad:9f:9c:80:8c:43:77:1c:b2:71:d3:b3: eb:3a:e3:24 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzDRzdGFsOmzuCEEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZmQxYzU0MzEtNTJlZS00ODNjLTg1NWMtMGE2NmQxNWUzYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi3bGzQ53THCAYBQMsTrCVVl9Cyl9UGG2wuH VYlr7lq4Zn8rkLQYjVRtM1IyTBHNMk2PAH9PTRVDu0N47c8FxsSap/5Cilmy2M8b KJL0aiKGMf5JCSQDkNCwJk+wb3XGg5irEeHggnr3qtcbqwWiA27WEtbWUARphriS sIPAKZIlF/E3GqFIdBwH2CuFeIm7qdoh6bmmOw8IwrvOyLgWUTDPjfUXLqVK7ssp MOqzYYzE+rrbhkuS2G7PMZ7m64eU6VqaEP35zbSZ7WNqkNAW5FMw/P55SqQwg4LV Eu1QWewUgQta7AiBAtiJPUqi9l7Xtn0FJQYHEVT7x/lobcLypQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC0ZED7tdeK+THCqM/cVGNQlB3VVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTU5MjM5ZjgtMDMwZS0z YmNjLTkzMmYtZDkzODljNjY4OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiXww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACAzge9ROQO8lsATwmKWekM0KmL9oa/TZ1DzCzJnyTG0ntfjzdQYi kSLt7OVeHRyqD+NBceFB4cMuwgLxUPyqfvTfFPhCMpVR1TfNuyuASGRvDT/VE2Kh 55PMDZXsmSVSd03mZ/o59MSgYmhEAn1AoqMigLio0a4iN9+zLFqoOCD/m0GL/Wj6 hsyB3PvrS64F1RQT/8k6qQCOmqRZ/RCapTswZr5MLRdHUXvbxpf5W7BAbbE2vMN7 sHnCyvZWBims8rVqhaTR0FicgWiUCLUueGSI0nb0sKWiKd7nDSsJZ2MOaXdODwQQ m4cwqx1NbeTCrZ+cgIxDdxyycdOz6zrjJA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:08 2026 by rpki-client