$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa File: 1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa (raw, json) Hash identifier: DtTMMFz/paahlEnS7XxIm+XQv5BN37k4M42OS+gpc8I= Subject key identifier: D9:52:8B:39:C5:97:0D:EC:85:BD:A4:32:5A:01:D0:E7:EA:CA:EE:FB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CAE5EBBC9C7236108DBA1BA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e87:c400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:bb:c9:c7:23:61:08:db:a1:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=80d54780-e7a3-4b64-8bf9-62e5b1f0feae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:78:ba:a0:4e:53:4a:e1:03:8b:04:76:04: da:cd:bb:a4:60:59:05:f7:02:1e:b3:db:a4:d6:e7: 21:ad:ec:26:da:76:ce:a2:16:84:65:55:2d:56:9e: 0a:f3:44:24:f0:8c:e3:89:80:f8:5b:dd:62:75:c6: 2b:ef:47:9f:ae:45:7d:b0:1b:ec:2e:8f:ce:3d:db: fc:02:05:b1:1d:38:b9:2c:ab:b9:c7:73:df:ea:b1: 5f:a7:4a:9b:43:62:20:40:fc:38:7d:ae:03:6a:13: a7:6f:3b:43:b8:02:d9:61:c6:a4:12:a0:9c:e7:77: ff:d1:85:e9:02:3e:96:f3:24:b2:ae:ac:99:cb:17: f3:8c:46:18:41:39:fe:ba:82:a6:39:5d:4d:90:84: f1:23:c0:74:92:72:3e:19:25:ce:22:b2:f7:06:fe: cd:60:6d:f2:d5:3b:83:f2:ea:84:76:60:f4:a6:ee: 05:ae:79:83:0e:56:80:ed:ee:dd:2b:ba:91:c7:43: 33:4e:02:9b:3b:7b:6c:bb:36:6e:0c:b6:66:aa:94: 0c:b9:71:04:49:34:d3:1e:0e:26:96:37:5b:6b:a8: f8:13:96:df:54:a4:9a:5e:3e:92:67:e6:60:fb:40: c6:f2:1f:56:59:64:79:87:c9:68:bb:64:e3:e0:31: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:8B:39:C5:97:0D:EC:85:BD:A4:32:5A:01:D0:E7:EA:CA:EE:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1fdf32e9-377b-3f1a-87d0-a2271a3ccdc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6a:42:8e:bf:b9:44:eb:17:42:ca:0b:1b:7d:3a:69:5b:27: e8:26:b0:8a:62:b2:61:87:ae:c7:8c:31:88:da:42:56:b8:5d: 30:b4:56:71:b4:dc:40:68:00:a7:37:b5:4e:ae:4b:10:18:4d: b1:b4:d1:7c:f1:11:7c:2b:9e:33:28:c8:a6:1f:fa:9e:12:1a: a8:67:b7:db:6d:5f:ad:c1:4a:46:18:0e:d5:1d:59:56:b1:ba: ff:6f:e1:e8:ef:10:46:04:cb:f1:34:6f:09:74:a4:e9:9b:0b: ac:f3:3e:d3:9d:51:1d:c4:f5:2f:e0:f9:d1:a0:93:e7:1e:a9: 11:0e:75:3a:63:87:e2:ee:03:9b:12:cc:33:78:39:f7:f9:c1: 08:bd:46:eb:14:5f:e7:da:77:2e:5f:e8:c5:33:73:77:3d:ec: 7a:88:84:12:34:d1:56:ed:b0:58:6a:0c:3e:06:cf:2a:8a:0f: e5:a8:7c:d0:25:9b:1c:7a:f6:d1:e9:43:bb:20:8f:f2:aa:57: 6d:55:3a:93:d0:09:60:57:66:09:92:ae:90:03:a3:34:05:a1: 93:92:5d:50:c1:54:86:d9:9e:1c:52:71:e3:81:37:14:48:f0: be:6f:48:0d:d6:aa:aa:63:d9:e3:aa:1c:50:fb:92:55:3b:01: 28:9c:26:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuXrvJxyNhCNuhukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODBkNTQ3ODAtZTdhMy00YjY0LThiZjktNjJlNWIxZjBmZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigF4uqBOU0rhA4sEdgTazbukYFkF9wIes9uk 1uchrewm2nbOohaEZVUtVp4K80Qk8IzjiYD4W91idcYr70efrkV9sBvsLo/OPdv8 AgWxHTi5LKu5x3Pf6rFfp0qbQ2IgQPw4fa4DahOnbztDuALZYcakEqCc53f/0YXp Aj6W8ySyrqyZyxfzjEYYQTn+uoKmOV1NkITxI8B0knI+GSXOIrL3Bv7NYG3y1TuD 8uqEdmD0pu4FrnmDDlaA7e7dK7qRx0MzTgKbO3tsuzZuDLZmqpQMuXEESTTTHg4m ljdba6j4E5bfVKSaXj6SZ+Zg+0DG8h9WWWR5h8lou2Tj4DHBYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNlSiznFlw3shb2kMloB0Ofqyu77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWZkZjMyZTktMzc3Yi0z ZjFhLTg3ZDAtYTIyNzFhM2NjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATmpCjr+5ROsXQsoLG306aVsn6CawimKyYYeux4wxiNpCVrhdMLRW cbTcQGgApze1Tq5LEBhNsbTRfPERfCueMyjIph/6nhIaqGe3221frcFKRhgO1R1Z VrG6/2/h6O8QRgTL8TRvCXSk6ZsLrPM+051RHcT1L+D50aCT5x6pEQ51OmOH4u4D mxLMM3g59/nBCL1G6xRf59p3Ll/oxTNzdz3seoiEEjTRVu2wWGoMPgbPKooP5ah8 0CWbHHr20elDuyCP8qpXbVU6k9AJYFdmCZKukAOjNAWhk5JdUMFUhtmeHFJx44E3 FEjwvm9IDdaqqmPZ46ocUPuSVTsBKJwmbA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:44:00 2026 by rpki-client