$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa File: 525a8858-0ad9-37d9-901c-8c74bef96b29.roa (raw, json) Hash identifier: nNh02JoGuLmwChw1oyzqp8FJagVn6qMq8ndcmqfYEEI= Subject key identifier: C2:63:AC:DE:9E:68:3C:54:47:81:A5:02:F7:32:17:60:73:50:DC:F5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9C31975943EDEC9040AA9B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 30036 IP address blocks: 2604:2e8d:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:97:59:43:ed:ec:90:40:aa:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=fcfa3e98-e009-4f19-b755-b8efe32fae2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:ce:ff:cd:de:64:85:9d:03:b7:a4:13:77: cb:25:7a:7c:05:69:a0:2d:ff:11:f7:a1:01:1c:73: f0:74:3e:2d:1e:c4:d2:0c:e3:04:b3:d0:df:41:07: 3b:99:57:c0:b4:0d:55:11:e6:91:55:91:9d:b9:63: fa:28:b5:64:9b:04:81:8f:25:66:de:7a:fa:3c:78: 94:b5:57:25:47:1d:db:99:76:04:1a:27:00:e6:2b: 2c:b8:70:ef:76:4e:0d:66:5a:42:34:f9:10:6b:70: c0:96:19:3e:ed:b8:07:7e:82:59:27:10:c7:f7:2e: ae:df:8c:b3:24:19:ab:b3:6c:9c:bf:00:a0:c6:dd: 6a:45:07:09:40:e3:c1:03:9b:1d:97:2e:29:4d:a4: 39:dd:1d:c5:cd:d6:5f:b5:bd:38:0e:59:df:80:3a: ae:d4:a0:56:93:c3:c6:d5:b7:dd:9e:91:53:0d:0a: db:87:ce:b2:8c:e6:2c:20:a4:f6:1b:21:4f:54:30: 7a:35:bc:cc:45:50:52:14:c2:47:d7:69:8e:25:7c: e3:a4:71:5f:3f:0d:7e:cb:34:e8:db:e0:9f:17:af: b4:3d:3f:df:44:5f:80:bf:62:2b:38:9b:b4:a2:8c: 9c:f8:1b:e4:47:5c:5f:87:05:40:a2:5a:22:92:7e: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:63:AC:DE:9E:68:3C:54:47:81:A5:02:F7:32:17:60:73:50:DC:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:7800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c6:57:cf:69:43:8b:fc:da:9e:87:13:a8:5f:71:66:51:79: 47:57:75:59:c8:08:c0:6e:5f:32:1b:b5:f6:b6:41:24:9f:ee: e8:9e:ee:52:fb:cf:02:aa:11:07:0f:fb:a2:be:4a:1d:09:46: 30:a4:32:32:4c:4a:20:07:dc:db:52:8f:09:ac:b6:75:b7:f5: f9:bd:f0:48:97:48:b4:27:e3:e0:5f:8c:56:f4:02:59:e0:76: b9:0b:cb:ff:22:97:36:36:ac:d5:c8:7c:1a:ab:2e:7b:50:45: f6:65:12:d5:00:46:0c:52:e4:a6:e2:65:2e:4e:fa:ac:19:0f: 60:63:56:32:d5:30:c0:a4:16:41:73:b9:1b:e1:af:f5:c9:ab: 45:db:68:fe:ca:22:ec:f0:37:f9:ec:45:46:b8:6f:1c:c7:2c: 32:3e:a5:31:b7:1e:f5:0d:4c:5d:7c:88:8a:b2:1b:b2:13:ac: c7:4e:e8:2b:73:6b:4b:8d:5d:cc:c9:85:8d:83:be:6b:da:49: e9:c3:5b:74:62:f4:f7:a5:98:2f:17:eb:d2:d8:73:1f:fd:47: 85:69:cb:36:18:6b:28:4f:ef:9d:5f:6f:e8:12:97:27:03:a1: ff:39:94:15:06:1d:a1:0c:f2:c3:a7:57:c1:7c:43:4c:2f:e7: f9:5a:85:b2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEycMZdZQ+3skECqmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk ZmNmYTNlOTgtZTAwOS00ZjE5LWI3NTUtYjhlZmUzMmZhZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp3O/83eZIWdA7ekE3fLJXp8BWmgLf8R96EB HHPwdD4tHsTSDOMEs9DfQQc7mVfAtA1VEeaRVZGduWP6KLVkmwSBjyVm3nr6PHiU tVclRx3bmXYEGicA5issuHDvdk4NZlpCNPkQa3DAlhk+7bgHfoJZJxDH9y6u34yz JBmrs2ycvwCgxt1qRQcJQOPBA5sdly4pTaQ53R3FzdZftb04DlnfgDqu1KBWk8PG 1bfdnpFTDQrbh86yjOYsIKT2GyFPVDB6NbzMRVBSFMJH12mOJXzjpHFfPw1+yzTo 2+CfF6+0PT/fRF+Av2IrOJu0ooyc+BvkR1xfhwVAoloikn6XuwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMJjrN6eaDxUR4GlAvcyF2BzUNz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTI1YTg4NTgtMGFkOS0z N2Q5LTkwMWMtOGM3NGJlZjk2YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfMZXz2lDi/zanocTqF9xZlF5R1d1WcgIwG5fMhu19rZBJJ/u6J7u UvvPAqoRBw/7or5KHQlGMKQyMkxKIAfc21KPCay2dbf1+b3wSJdItCfj4F+MVvQC WeB2uQvL/yKXNjas1ch8Gqsue1BF9mUS1QBGDFLkpuJlLk76rBkPYGNWMtUwwKQW QXO5G+Gv9cmrRdto/soi7PA3+exFRrhvHMcsMj6lMbce9Q1MXXyIirIbshOsx07o K3NrS41dzMmFjYO+a9pJ6cNbdGL096WYLxfr0thzH/1HhWnLNhhrKE/vnV9v6BKX JwOh/zmUFQYdoQzyw6dXwXxDTC/n+VqFsg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:05:51 2026 by rpki-client