$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa File: 3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa (raw, json) Hash identifier: LQW2M2+d8iSEseXKVI7n8cpQWaTOB/NxxBg8pWPABkk= Subject key identifier: 65:66:1C:82:0D:80:41:32:9A:50:A2:75:8F:A2:C8:7A:A9:65:50:E8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D624A505071E4ECC5CE594D40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 30036 IP address blocks: 2604:2e8d:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:50:50:71:e4:ec:c5:ce:59:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=af845404-0624-41ad-8fbb-a61cbbc2fb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:75:07:66:ec:f9:f5:51:a0:eb:db:fb:a2: de:f6:08:a6:c5:e5:be:06:fc:27:8e:d2:39:c8:cd: ec:c8:d6:23:64:85:8a:c9:51:c4:cf:2d:ae:0c:47: c5:5f:5e:5c:ea:65:e8:4c:8d:e9:5f:e3:14:ad:72: 25:55:00:60:e2:16:04:54:3c:f5:73:fd:90:5d:cf: 22:e4:da:66:68:7b:22:a8:98:b3:fc:5a:96:e9:e0: 66:ef:62:56:37:b9:41:43:9e:de:5b:b2:80:65:35: d2:65:ea:1d:d9:20:53:e1:98:48:f9:81:4d:07:05: eb:16:69:20:6c:dc:8a:9e:07:8c:4a:f1:b9:ec:88: 76:d8:a9:e4:2b:30:d2:3d:16:de:02:62:ec:7c:4f: a2:10:29:95:d5:2e:a0:c4:96:37:2c:e5:b2:44:c1: 6c:98:f0:0b:57:22:0e:f9:38:ed:20:16:e8:5a:ea: e2:f8:c2:57:f9:b6:3d:df:f7:11:bd:8f:90:e1:5e: 2d:70:56:bd:6d:54:29:64:58:88:cb:bf:21:0f:d3: 09:d6:84:fc:f6:e9:3e:f8:ef:1a:1e:aa:27:fa:70: c8:cb:e0:bc:6d:e9:fb:39:0d:20:68:06:00:5e:0c: a4:08:6e:7b:43:33:a8:dd:2a:57:9f:e4:ad:a2:12: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:1C:82:0D:80:41:32:9A:50:A2:75:8F:A2:C8:7A:A9:65:50:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3a0cda59-96c5-3074-afdf-1543a11a0c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:88:55:19:ed:cb:e4:33:04:cc:ab:b8:cb:bc:7f:e1:8a: 6e:a9:57:b0:e7:0e:4d:0d:95:f8:41:c2:7b:7a:82:a2:59:d9: 7c:01:75:43:ac:a8:d9:df:87:4c:60:80:0b:19:04:a0:3b:cc: e7:11:9e:b3:f8:31:3f:81:0c:16:e2:d1:df:ce:93:97:c6:ad: c4:60:9b:b3:f0:74:f9:54:94:41:31:9c:67:7a:9c:2c:6e:d9: 48:aa:23:87:2e:35:28:f6:16:58:c9:b1:eb:b7:4f:5b:b8:f3: 02:f9:0d:e1:73:72:4d:f5:9d:4f:7c:85:f3:3a:ef:8b:b2:b4: 8b:46:7a:98:b9:cc:8b:21:85:00:ea:85:0e:3c:7c:63:a9:65: 6f:3a:99:e7:f1:67:40:25:91:f8:20:fd:2d:0c:ab:9a:15:4b: 95:59:5e:26:0c:51:c1:ae:71:08:9e:69:f2:06:25:f5:09:f6: a6:87:2b:b0:59:d1:71:d0:cd:1a:ab:64:0f:e7:2a:8b:03:53: 83:f8:ec:84:56:d0:b2:6e:81:50:06:6a:f1:09:e3:c4:f0:08: 50:44:88:07:f3:71:15:f7:c5:34:86:87:81:49:1b:00:e1:e6: 47:f9:6c:1b:7a:c8:4d:b0:3d:02:26:0b:d4:ce:00:f4:53:0e: 0a:3d:6f:85 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1iSlBQceTsxc5ZTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk YWY4NDU0MDQtMDYyNC00MWFkLThmYmItYTYxY2JiYzJmYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlF1B2bs+fVRoOvb+6Le9gimxeW+BvwnjtI5 yM3syNYjZIWKyVHEzy2uDEfFX15c6mXoTI3pX+MUrXIlVQBg4hYEVDz1c/2QXc8i 5NpmaHsiqJiz/FqW6eBm72JWN7lBQ57eW7KAZTXSZeod2SBT4ZhI+YFNBwXrFmkg bNyKngeMSvG57Ih22KnkKzDSPRbeAmLsfE+iECmV1S6gxJY3LOWyRMFsmPALVyIO +TjtIBboWuri+MJX+bY93/cRvY+Q4V4tcFa9bVQpZFiIy78hD9MJ1oT89uk++O8a Hqon+nDIy+C8ben7OQ0gaAYAXgykCG57QzOo3SpXn+StohLH+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGVmHIINgEEymlCidY+iyHqpZVDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2EwY2RhNTktOTZjNS0z MDc0LWFmZGYtMTU0M2ExMWEwYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujdgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG3CIVRnty+QzBMyruMu8f+GKbqlXsOcOTQ2V+EHCe3qColnZfAF1 Q6yo2d+HTGCACxkEoDvM5xGes/gxP4EMFuLR386Tl8atxGCbs/B0+VSUQTGcZ3qc LG7ZSKojhy41KPYWWMmx67dPW7jzAvkN4XNyTfWdT3yF8zrvi7K0i0Z6mLnMiyGF AOqFDjx8Y6llbzqZ5/FnQCWR+CD9LQyrmhVLlVleJgxRwa5xCJ5p8gYl9Qn2pocr sFnRcdDNGqtkD+cqiwNTg/jshFbQsm6BUAZq8QnjxPAIUESIB/NxFffFNIaHgUkb AOHmR/lsG3rITbA9AiYL1M4A9FMOCj1vhQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:35 2026 by rpki-client