$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa File: 2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa (raw, json) Hash identifier: wAcAG33gy2swReBAUt+VbwLkgrJEJqOlLZ2s6m96Tzc= Subject key identifier: 41:97:4B:FE:0F:0A:49:D1:97:D3:5C:F1:31:95:A6:AF:47:4E:D8:FA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CC07C88D641A5FF5E8DFFB200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:88:d6:41:a5:ff:5e:8d:ff:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=ce00d9b0-9027-4528-a553-8213f0f2e873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:d8:01:5f:75:a4:a5:1c:eb:a4:c8:59:40: eb:6a:03:a7:73:71:2a:a4:d3:23:62:1e:34:8b:7b: f1:0b:35:c2:64:47:c1:f6:55:d3:d6:23:f2:aa:94: ff:94:4e:4d:40:ce:66:1a:35:fd:5b:73:9a:d7:89: ee:67:4a:f5:bd:22:21:85:fd:8c:f1:47:b9:77:e5: ba:2a:d2:85:de:94:94:41:68:22:57:a3:f0:4a:ec: 00:c4:f0:b5:ce:da:cc:61:60:55:e5:52:e4:6c:ce: 72:e2:7c:92:45:40:c9:f9:68:58:33:ca:85:7d:16: 65:ed:80:05:c3:ed:b8:6b:d2:55:be:9e:c3:52:86: a1:d7:37:21:b6:90:62:44:14:f0:c6:24:39:79:f4: 92:29:a2:0c:45:4f:3b:2f:c1:d8:98:61:a8:f2:f3: dc:88:44:3b:34:f1:8f:1b:ca:26:28:f5:01:31:48: 04:b6:45:0b:57:3a:48:b1:c2:11:eb:90:34:0c:61: 60:74:9d:35:8f:02:f1:01:4d:9a:77:45:fe:29:51: 6c:fd:4d:75:c8:04:b0:bb:fb:f8:8c:61:d5:db:d5: a4:7a:ab:85:aa:a2:d2:93:95:36:d6:4e:3a:1c:34: 38:55:2b:86:78:03:36:e6:74:3f:7c:86:af:95:ef: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:4B:FE:0F:0A:49:D1:97:D3:5C:F1:31:95:A6:AF:47:4E:D8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2faa2a2c-bc24-39e5-a1db-5d137ff009a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7a:4f:8a:41:23:77:1c:55:02:12:16:77:7f:93:68:ca:b7: 16:6b:91:10:17:75:39:c6:20:9d:c1:c7:bd:fa:cc:13:33:ce: d4:be:6d:17:02:14:25:d1:83:b8:58:71:ed:48:27:ec:06:8f: 0f:a8:e1:8c:6c:f5:27:84:35:37:77:56:38:dd:2a:01:5c:52: ea:46:d3:cb:ea:10:87:15:67:a2:27:e7:da:9e:ac:3d:14:04: 51:3b:06:0e:e4:ff:c4:11:fd:f3:87:45:0d:44:96:ba:a7:07: 4e:03:ef:c2:0f:50:72:eb:40:34:a4:49:3b:3c:91:e5:67:cb: d2:74:61:b0:eb:e9:43:f1:72:5e:a2:48:b0:4c:8d:8b:6a:6f: 94:57:c9:dc:43:44:eb:3c:0a:43:15:1a:f0:3e:7d:95:3b:53: 96:0d:85:cd:b9:e1:a1:26:98:6f:df:1a:a1:6e:a0:54:9a:ff: e6:19:fd:13:cb:5e:f6:eb:d7:8a:b2:13:72:5e:37:fc:2d:06: a4:1a:4e:d8:85:0f:32:8d:44:1f:b8:5b:dd:eb:1a:52:0c:32: 7b:97:ab:66:6e:54:25:90:5b:05:87:77:a4:15:80:40:19:0d: 44:4e:d8:e9:56:24:8f:dd:2c:74:fc:72:fb:73:9a:df:9d:76: 1b:42:ad:2a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzAfIjWQaX/Xo3/sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk Y2UwMGQ5YjAtOTAyNy00NTI4LWE1NTMtODIxM2YwZjJlODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiADYAV91pKUc66TIWUDragOnc3EqpNMjYh40 i3vxCzXCZEfB9lXT1iPyqpT/lE5NQM5mGjX9W3Oa14nuZ0r1vSIhhf2M8Ue5d+W6 KtKF3pSUQWgiV6PwSuwAxPC1ztrMYWBV5VLkbM5y4nySRUDJ+WhYM8qFfRZl7YAF w+24a9JVvp7DUoah1zchtpBiRBTwxiQ5efSSKaIMRU87L8HYmGGo8vPciEQ7NPGP G8omKPUBMUgEtkULVzpIscIR65A0DGFgdJ01jwLxAU2ad0X+KVFs/U11yASwu/v4 jGHV29WkequFqqLSk5U21k46HDQ4VSuGeAM25nQ/fIavle/MBwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEGXS/4PCknRl9Nc8TGVpq9HTtj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZhYTJhMmMtYmMyNC0z OWU1LWExZGItNWQxMzdmZjAwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOXpPikEjdxxVAhIWd3+TaMq3FmuREBd1OcYgncHHvfrMEzPO1L5t FwIUJdGDuFhx7Ugn7AaPD6jhjGz1J4Q1N3dWON0qAVxS6kbTy+oQhxVnoifn2p6s PRQEUTsGDuT/xBH984dFDUSWuqcHTgPvwg9QcutANKRJOzyR5WfL0nRhsOvpQ/Fy XqJIsEyNi2pvlFfJ3ENE6zwKQxUa8D59lTtTlg2FzbnhoSaYb98aoW6gVJr/5hn9 E8te9uvXirITcl43/C0GpBpO2IUPMo1EH7hb3esaUgwye5erZm5UJZBbBYd3pBWA QBkNRE7Y6VYkj90sdPxy+3Oa3512G0KtKg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:15 2026 by rpki-client