$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa File: 1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa (raw, json) Hash identifier: vnYAW00qJg+EMi/Bekqkmgk0mNHD9p8D1ZNbD+pi9eg= Subject key identifier: CB:98:32:A0:70:B4:64:67:BC:5B:FE:EF:53:F8:E9:8A:67:95:F8:1C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A466760A8BAB5404D4480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 19905 IP address blocks: 2604:2e87:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:46:67:60:a8:ba:b5:40:4d:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=6e9d5d4c-6c18-4c0e-8484-249c2ea2614c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:b1:f1:0d:7a:3f:77:ea:fb:a8:39:9a:19: b9:ee:83:f2:1a:0b:3f:43:d8:a1:3e:aa:82:51:50: ea:43:50:b3:9f:3e:11:2b:8e:ac:e7:3e:f8:1f:50: 42:c7:88:5b:88:e2:db:64:01:9e:4d:b3:f0:16:89: 28:45:25:84:c6:03:fa:ac:d6:1e:40:c5:f9:09:09: 83:f8:55:09:62:75:3a:44:3d:03:e1:9f:3b:44:35: f2:30:68:b1:30:f7:45:93:58:f6:2c:2f:12:ef:f8: d1:3d:9c:da:8f:35:e0:b2:9e:02:61:09:f0:c3:84: 24:9d:43:9b:55:22:26:f5:2c:83:45:9f:2b:8a:18: dd:69:8b:e4:0b:2a:54:8a:b5:a8:fa:55:a5:03:21: 94:80:48:d9:bc:df:ce:56:36:10:98:1b:c4:76:bb: 0b:4e:c8:33:a0:9b:fe:b2:04:df:12:af:16:80:5f: 3b:56:50:7a:b2:cf:d9:3c:eb:34:00:d0:a7:0d:97: 81:30:16:08:5a:4d:52:2a:cb:6d:b5:ce:91:e0:c3: 4f:2e:73:cf:6a:84:ab:ab:aa:0d:9f:7e:8c:3f:89: 5e:3b:bb:80:30:e7:e4:28:48:24:2f:f3:65:a7:f7: c1:76:15:a5:da:d9:38:ce:e3:77:ab:20:ed:9d:99: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:32:A0:70:B4:64:67:BC:5B:FE:EF:53:F8:E9:8A:67:95:F8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f1:c6:59:32:a5:0f:26:3b:58:e3:bc:24:f2:b2:9c:9f:8a: a7:4f:a7:87:67:53:3b:09:4b:3f:5c:8d:a9:fe:d0:74:ec:09: b8:dd:0b:7d:65:6b:71:3e:0a:00:b3:47:2d:4d:21:bc:5a:20: b2:b7:d9:2e:0b:00:53:9f:a6:84:83:0c:50:ca:0a:5f:ea:37: b0:cf:98:6d:bc:31:85:95:c9:15:3c:7d:b2:d4:2d:cf:a9:70: c4:46:19:27:f0:38:4d:1f:6c:aa:8d:1c:be:1a:1c:4e:aa:d2: ec:fd:a0:38:df:b7:4f:79:42:05:8a:3f:ec:b1:64:9d:e2:ea: 51:da:9c:ca:6d:a4:1c:9d:01:f2:69:b8:56:56:f2:69:81:4f: ed:ad:02:9c:65:06:85:43:2c:ca:1a:03:be:53:11:f4:89:16: dc:8a:4d:3a:f7:d5:c1:5f:ec:fa:45:ff:eb:2a:f5:1e:ff:3a: c3:a2:29:a8:d6:ec:64:51:23:08:3e:78:71:69:fa:1c:7f:06: 54:05:a4:da:ca:3f:cf:95:5b:6d:42:94:3c:13:a1:c5:10:8a: 89:e3:48:f2:3d:75:50:ff:61:6e:bf:be:3b:aa:8d:db:e4:8a: df:a5:29:e7:37:9f:b2:c4:1a:e3:2c:27:6e:fe:79:da:46:c9: 5d:26:ad:29 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1eGkZnYKi6tUBNRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmU5ZDVkNGMtNmMxOC00YzBlLTg0ODQtMjQ5YzJlYTI2MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc6x8Q16P3fq+6g5mhm57oPyGgs/Q9ihPqqC UVDqQ1Cznz4RK46s5z74H1BCx4hbiOLbZAGeTbPwFokoRSWExgP6rNYeQMX5CQmD +FUJYnU6RD0D4Z87RDXyMGixMPdFk1j2LC8S7/jRPZzajzXgsp4CYQnww4QknUOb VSIm9SyDRZ8rihjdaYvkCypUirWo+lWlAyGUgEjZvN/OVjYQmBvEdrsLTsgzoJv+ sgTfEq8WgF87VlB6ss/ZPOs0ANCnDZeBMBYIWk1SKstttc6R4MNPLnPPaoSrq6oN n36MP4leO7uAMOfkKEgkL/Nlp/fBdhWl2tk4zuN3qyDtnZnmZwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMuYMqBwtGRnvFv+71P46YpnlfgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWQzN2RiNmEtYmMyNC0z Mzg2LWE3YWEtM2YxOTNiMzgzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhyww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPvHGWTKlDyY7WOO8JPKynJ+Kp0+nh2dTOwlLP1yNqf7QdOwJuN0L fWVrcT4KALNHLU0hvFogsrfZLgsAU5+mhIMMUMoKX+o3sM+YbbwxhZXJFTx9stQt z6lwxEYZJ/A4TR9sqo0cvhocTqrS7P2gON+3T3lCBYo/7LFkneLqUdqcym2kHJ0B 8mm4VlbyaYFP7a0CnGUGhUMsyhoDvlMR9IkW3IpNOvfVwV/s+kX/6yr1Hv86w6Ip qNbsZFEjCD54cWn6HH8GVAWk2so/z5VbbUKUPBOhxRCKieNI8j11UP9hbr++O6qN 2+SK36Up5zefssQa4ywnbv552kbJXSatKQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:03:47 2026 by rpki-client