$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa File: 23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa (raw, json) Hash identifier: AKbTYbgZJtgMfJ7WSrSLC8X1uFzs3CynnpaZQYlsoq0= Subject key identifier: 3B:F2:4B:E4:F4:81:30:14:B0:DF:90:8C:4F:C2:8E:6B:AD:AE:54:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9536E2B5831F7975F3FA39C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 30036 IP address blocks: 2604:2e8d:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:e2:b5:83:1f:79:75:f3:fa:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=ca3b95cc-340c-4cac-803e-d6424422b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:98:f1:73:29:ff:e5:6e:e0:5c:f2:be:03: 48:8b:ac:60:73:78:b9:3a:c3:8a:e7:25:1d:5f:67: e8:60:dd:22:65:fd:da:bd:73:44:11:61:01:bd:e1: 00:ee:d0:9f:92:73:55:b4:05:3d:c3:c0:8f:f2:c7: d3:ea:8f:4b:fc:69:6a:cc:a8:df:01:a1:2f:11:47: 46:3c:7a:cf:93:40:00:39:51:4c:fe:d1:92:bc:8f: 81:42:25:ba:5e:cb:00:d3:15:2a:26:2c:ae:ff:67: 91:ea:aa:22:eb:96:37:1f:cd:7f:99:f4:ea:83:69: ca:8c:27:3c:7f:6e:6a:e2:64:59:62:9f:48:9f:7e: 25:7d:4c:57:cd:44:66:30:89:2e:b8:e1:fb:28:0a: ad:01:f9:92:a3:a9:f1:44:37:75:94:08:af:8c:fc: 18:49:7b:7e:0c:e9:5c:bc:f8:15:1f:6b:31:d3:2b: 64:14:14:c3:da:a9:cc:a1:70:1f:03:07:bc:6f:70: e0:96:73:5d:1f:7d:d8:51:01:f8:9c:2a:a5:cf:ff: c4:09:f7:9a:7d:90:51:85:25:2b:05:e1:60:f0:9b: e5:8c:d1:2b:98:41:6e:5e:84:18:55:ef:de:26:4d: 6b:1e:ca:ef:39:74:00:20:33:50:62:87:00:60:f7: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F2:4B:E4:F4:81:30:14:B0:DF:90:8C:4F:C2:8E:6B:AD:AE:54:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/23b91f5f-e9f4-38d3-8eac-03f2ab20216b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:82:c4:9f:38:dc:26:71:5d:5f:b3:53:63:fe:ce:2a:98:5a: 90:35:4e:55:4b:34:1e:95:d6:2b:fc:2e:08:6b:55:1b:3e:e5: 65:68:0e:38:fa:42:a7:1e:43:e4:88:28:28:e4:82:6f:0f:19: e0:21:d2:fd:86:69:0d:a8:df:ba:1b:ef:f7:66:3d:59:ca:77: 9f:4c:dd:d5:51:c6:de:27:57:06:71:47:e7:53:69:b6:65:30: 0c:43:21:c3:30:0c:c0:a2:f2:b8:a4:0b:94:69:35:0f:4c:6f: 62:58:bc:4a:ee:ef:46:86:3d:14:f0:93:75:9f:c6:84:45:b3: e3:09:17:01:81:f0:70:a0:31:17:cb:26:da:e4:1a:f5:dc:c7: a4:37:9b:b6:91:8f:44:11:a4:ee:cf:ef:41:34:e1:a8:ba:9a: 45:e3:a3:76:cd:1b:ee:0c:dd:e7:20:5d:96:f2:36:c6:b9:8b: 49:dd:03:13:4b:7e:14:6c:f7:7d:c4:7e:d7:90:0e:60:84:b0: b1:96:c7:5b:4c:9a:9a:b9:05:fc:77:d2:ac:50:34:99:d1:24: a4:82:8c:7a:fb:16:f9:98:5a:82:98:86:05:34:b4:41:b0:a6: 37:61:c6:ee:82:1c:d2:16:f1:cc:8f:3d:07:8b:ef:9e:3c:ad: 82:8b:41:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyVNuK1gx95dfP6OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk Y2EzYjk1Y2MtMzQwYy00Y2FjLTgwM2UtZDY0MjQ0MjJiNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrGY8XMp/+Vu4FzyvgNIi6xgc3i5OsOK5yUd X2foYN0iZf3avXNEEWEBveEA7tCfknNVtAU9w8CP8sfT6o9L/GlqzKjfAaEvEUdG PHrPk0AAOVFM/tGSvI+BQiW6XssA0xUqJiyu/2eR6qoi65Y3H81/mfTqg2nKjCc8 f25q4mRZYp9In34lfUxXzURmMIkuuOH7KAqtAfmSo6nxRDd1lAivjPwYSXt+DOlc vPgVH2sx0ytkFBTD2qnMoXAfAwe8b3DglnNdH33YUQH4nCqlz//ECfeafZBRhSUr BeFg8JvljNErmEFuXoQYVe/eJk1rHsrvOXQAIDNQYocAYPelsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDvyS+T0gTAUsN+QjE/CjmutrlSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjNiOTFmNWYtZTlmNC0z OGQzLThlYWMtMDNmMmFiMjAyMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujQww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABoLEnzjcJnFdX7NTY/7OKphakDVOVUs0HpXWK/wuCGtVGz7lZWgO OPpCpx5D5IgoKOSCbw8Z4CHS/YZpDajfuhvv92Y9Wcp3n0zd1VHG3idXBnFH51Np tmUwDEMhwzAMwKLyuKQLlGk1D0xvYli8Su7vRoY9FPCTdZ/GhEWz4wkXAYHwcKAx F8sm2uQa9dzHpDebtpGPRBGk7s/vQTThqLqaReOjds0b7gzd5yBdlvI2xrmLSd0D E0t+FGz3fcR+15AOYISwsZbHW0yamrkF/HfSrFA0mdEkpIKMevsW+ZhagpiGBTS0 QbCmN2HG7oIc0hbxzI89B4vvnjytgotBrQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:16 2026 by rpki-client