$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa File: 1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa (raw, json) Hash identifier: KWDoQU3uLuBSKfFGwXEjgIUSvR1ZL7fPuhSVjFVy9IA= Subject key identifier: 49:30:84:AA:5A:D4:FE:9F:1C:5D:F8:95:BD:81:E4:D2:FD:50:5A:C6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C91070A4EBD1AEB234D767E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8f:8000::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:07:0a:4e:bd:1a:eb:23:4d:76:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=df65bc1d-f55b-4eae-ba5b-fdf6443f0bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:b3:15:78:c5:65:ef:dc:ff:e8:84:cd:9c: f2:d0:82:17:ae:90:63:9e:70:4f:e4:13:ba:e9:d8: c1:f4:c4:81:1a:a6:89:cc:fb:cf:9d:23:97:43:4d: 8f:17:ae:53:dc:e1:3a:a7:4a:50:43:83:c9:31:29: b7:6c:03:e8:4c:cb:33:fc:66:74:1a:f2:3d:82:94: 4c:d9:e9:2f:11:ca:80:6c:b5:66:90:35:ad:af:0a: c3:a6:38:50:ba:3f:8e:52:49:4c:a3:31:b6:d9:3d: 6b:a6:7a:a2:7c:b3:53:91:f7:44:81:82:d0:f1:74: 11:dc:0c:e8:0b:38:8e:ee:7f:ec:23:4e:25:4c:29: 99:81:b0:43:f0:91:b3:71:b8:7b:f5:f1:87:ad:c5: 71:bb:ad:1c:cf:b1:81:63:f9:46:81:3a:05:f6:54: 3e:7f:06:68:ef:9b:c1:19:a7:34:76:1a:40:6e:25: 0d:9a:d1:71:6b:90:f9:77:e1:01:f2:0b:ed:53:06: cb:af:10:96:f1:12:48:c6:cb:e6:45:24:9f:52:d5: 57:12:6e:6e:0d:3d:84:e6:e0:76:41:f5:d1:17:b5: 6c:b3:d2:b2:b8:25:41:20:34:cc:b7:7b:91:9e:68: f4:86:31:43:e6:84:a5:1b:62:f3:b5:4e:e6:f9:e8: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:84:AA:5A:D4:FE:9F:1C:5D:F8:95:BD:81:E4:D2:FD:50:5A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1e0e852b-ec4a-3bc1-9994-c73ba607ad66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:8000::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:77:57:48:dd:20:34:71:fc:05:cc:66:8f:57:44:31:27:cd: e3:34:53:0a:6d:85:0d:63:68:ce:b8:d4:07:c1:5a:24:d2:af: b9:dd:24:13:b9:dd:32:1a:69:f9:41:3b:d0:8b:e7:8a:3d:c1: 0b:b8:e6:f5:20:84:8c:1d:68:0f:84:d0:c8:de:8e:36:6d:53: 29:35:26:06:de:d8:35:01:11:09:49:c7:9a:5b:67:ac:bd:18: 62:15:ab:30:2a:61:0b:dd:e7:76:4a:18:dc:e0:b2:84:c6:88: b5:ad:37:1e:a1:57:b0:bb:e3:6b:d1:96:cd:b7:34:73:cc:64: d4:e9:dd:8f:97:41:ba:9e:ff:ab:6e:2d:8b:fb:36:74:df:03: 11:ae:81:90:c3:61:c7:ce:fb:bf:7f:44:54:95:3d:be:df:a6: 03:33:50:73:00:c1:fb:10:63:4f:cb:1d:97:6f:30:a0:ec:97: 8e:b2:34:12:66:41:52:52:96:d5:ef:af:a0:27:41:c5:cd:c7: b0:4a:2d:e6:c1:ea:a8:a6:f3:70:91:1a:b9:3b:81:90:df:09: 0e:d9:b7:c7:34:25:59:e0:0e:a4:1b:bb:2a:46:13:d1:ba:49: 63:21:4b:9d:66:0a:28:13:2b:fc:4d:8b:c4:12:97:5f:f5:97: d1:29:23:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyRBwpOvRrrI012fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk ZGY2NWJjMWQtZjU1Yi00ZWFlLWJhNWItZmRmNjQ0M2YwYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwuzFXjFZe/c/+iEzZzy0IIXrpBjnnBP5BO6 6djB9MSBGqaJzPvPnSOXQ02PF65T3OE6p0pQQ4PJMSm3bAPoTMsz/GZ0GvI9gpRM 2ekvEcqAbLVmkDWtrwrDpjhQuj+OUklMozG22T1rpnqifLNTkfdEgYLQ8XQR3Azo CziO7n/sI04lTCmZgbBD8JGzcbh79fGHrcVxu60cz7GBY/lGgToF9lQ+fwZo75vB Gac0dhpAbiUNmtFxa5D5d+EB8gvtUwbLrxCW8RJIxsvmRSSfUtVXEm5uDT2E5uB2 QfXRF7Vss9KyuCVBIDTMt3uRnmj0hjFD5oSlG2LztU7m+ejQiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEkwhKpa1P6fHF34lb2B5NL9UFrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWUwZTg1MmItZWM0YS0z YmMxLTk5OTQtYzczYmE2MDdhZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQuj4AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB93V0jdIDRx/AXMZo9XRDEnzeM0UwpthQ1jaM641AfBWiTSr7nd JBO53TIaaflBO9CL54o9wQu45vUghIwdaA+E0MjejjZtUyk1Jgbe2DUBEQlJx5pb Z6y9GGIVqzAqYQvd53ZKGNzgsoTGiLWtNx6hV7C742vRls23NHPMZNTp3Y+XQbqe /6tuLYv7NnTfAxGugZDDYcfO+79/RFSVPb7fpgMzUHMAwfsQY0/LHZdvMKDsl46y NBJmQVJSltXvr6AnQcXNx7BKLebB6qim83CRGrk7gZDfCQ7Zt8c0JVngDqQbuypG E9G6SWMhS51mCigTK/xNi8QSl1/1l9EpI7A= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:27 2026 by rpki-client