$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa File: 40858107-a5e4-3faa-809e-d446ece78c34.roa (raw, json) Hash identifier: dPffRjvkhRRXvzxh3s34+D98+fMc9DNs5sQ2duzWVnI= Subject key identifier: 18:30:02:BD:34:F1:70:CD:A1:93:21:8E:33:9A:15:AB:94:7C:A1:85 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A6764B3F5B05D6D3B004C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:76:4b:3f:5b:05:d6:d3:b0:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=dc0cf82e-d5b7-4e48-85cd-b6eb6dbf89c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:5f:90:a3:22:e5:30:e8:d3:d1:85:e9:9c: 8d:4f:bb:68:df:2c:73:0d:ee:1b:8d:73:71:96:07: 60:b4:25:55:e9:5c:fd:5b:cd:5d:7c:c0:0c:40:a1: 9a:5a:7d:f7:70:6c:42:44:43:12:fd:4c:2a:07:74: 49:c0:c9:a8:e8:61:75:48:36:08:f3:9c:e1:ee:c4: 0d:df:6c:d9:6d:4f:8c:09:7f:d3:66:b9:ac:db:28: d1:35:6a:dd:d4:b3:75:59:a4:f6:07:15:cd:f1:ce: 68:c1:2d:93:56:9a:d3:e9:79:1d:8f:06:0a:88:e5: d0:64:85:f4:c0:a3:15:f3:82:da:28:55:b1:4e:db: 24:50:3c:27:d8:0a:4e:40:2d:88:18:07:94:17:0b: 9b:c7:a9:ca:98:19:1f:13:81:b1:ed:51:9c:b3:6f: 91:40:a1:36:61:df:d5:c1:1b:1e:5a:02:4a:7c:64: 0a:5b:2b:88:be:b7:15:74:3d:6b:c7:61:a3:43:13: f3:68:aa:3c:08:50:c8:16:7a:65:ab:0e:66:ab:5c: 05:7e:69:5e:17:9e:49:b2:26:2f:00:10:d0:5e:c2: e3:9f:0e:11:39:d0:ce:e2:33:dd:d2:32:91:c1:f6: 7c:d0:fe:f3:62:9e:4d:c6:4e:59:37:1d:17:ab:81: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:02:BD:34:F1:70:CD:A1:93:21:8E:33:9A:15:AB:94:7C:A1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40858107-a5e4-3faa-809e-d446ece78c34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3b:f6:ba:28:8b:58:25:b6:d2:4c:f9:7a:fc:d2:1c:4c:1e: 38:ed:77:cc:9a:26:99:21:70:d0:35:f6:74:89:e3:7b:65:f9: 20:ad:d6:e4:11:e2:66:0f:ad:e1:c5:bb:1f:84:b9:2d:ba:83: 90:c8:60:7e:94:05:ea:11:09:48:a7:cd:72:06:08:63:26:aa: 56:f8:1b:95:c8:e7:cf:c7:7d:f8:5d:6b:57:71:52:24:4e:b6: 39:10:d7:74:57:02:84:8a:1e:a2:a1:f9:ab:fc:bf:ec:5e:0f: af:3b:55:ad:49:9b:86:81:d6:45:55:66:6f:8d:7a:be:ed:6e: 4b:2f:b6:4e:ae:98:8a:98:46:2a:2b:1f:5e:23:89:ce:1c:af: ab:4b:36:f8:65:5c:54:75:65:85:4d:76:7c:b3:c3:8a:cb:88: 42:4a:78:b5:92:9e:86:bd:4c:75:0c:40:f1:dd:f2:33:d9:41: 86:53:35:f3:e7:22:bb:e4:4e:ca:a9:43:f9:05:3c:c2:4c:dc: ef:28:91:da:10:a4:f7:26:d2:bb:07:d1:c9:2f:25:b4:e4:8e: c6:42:da:9d:2e:6c:5f:b0:9b:b3:8a:15:78:a6:ad:7b:a2:b0: 33:f2:97:86:6b:8e:30:76:c7:0f:8e:9c:cb:86:87:91:40:05: de:87:7a:8f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFpnZLP1sF1tOwBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGMwY2Y4MmUtZDViNy00ZTQ4LTg1Y2QtYjZlYjZkYmY4OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZxfkKMi5TDo09GF6ZyNT7to3yxzDe4bjXNx lgdgtCVV6Vz9W81dfMAMQKGaWn33cGxCREMS/UwqB3RJwMmo6GF1SDYI85zh7sQN 32zZbU+MCX/TZrms2yjRNWrd1LN1WaT2BxXN8c5owS2TVprT6XkdjwYKiOXQZIX0 wKMV84LaKFWxTtskUDwn2ApOQC2IGAeUFwubx6nKmBkfE4Gx7VGcs2+RQKE2Yd/V wRseWgJKfGQKWyuIvrcVdD1rx2GjQxPzaKo8CFDIFnplqw5mq1wFfmleF55JsiYv ABDQXsLjnw4ROdDO4jPd0jKRwfZ80P7zYp5Nxk5ZNx0Xq4EIxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBgwAr008XDNoZMhjjOaFauUfKGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDA4NTgxMDctYTVlNC0z ZmFhLTgwOWUtZDQ0NmVjZTc4YzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujlAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANjv2uiiLWCW20kz5evzSHEweOO13zJommSFw0DX2dInje2X5IK3W 5BHiZg+t4cW7H4S5LbqDkMhgfpQF6hEJSKfNcgYIYyaqVvgblcjnz8d9+F1rV3FS JE62ORDXdFcChIoeoqH5q/y/7F4PrztVrUmbhoHWRVVmb416vu1uSy+2Tq6YiphG KisfXiOJzhyvq0s2+GVcVHVlhU12fLPDisuIQkp4tZKehr1MdQxA8d3yM9lBhlM1 8+ciu+ROyqlD+QU8wkzc7yiR2hCk9ybSuwfRyS8ltOSOxkLanS5sX7Cbs4oVeKat e6KwM/KXhmuOMHbHD46cy4aHkUAF3od6jw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:21 2026 by rpki-client