$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa File: 68d99f85-b937-338f-9406-78fc948e527c.roa (raw, json) Hash identifier: SB+j1+Rx5VwD+QluMAG4FpAvaOKXoXNZGdUuLKqhKWw= Subject key identifier: 42:3F:D8:AC:0F:85:E3:1A:E4:FE:9B:D1:A5:5E:65:99:EF:49:A6:B8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CACF1C819CC5561A541DFF840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 19905 IP address blocks: 2604:2e87:b000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c8:19:cc:55:61:a5:41:df:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=42f22124-34c4-4284-8353-a5918ef75288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:e1:c5:f7:10:17:b0:44:f2:f2:b7:1c:cb: c3:5f:14:89:a8:ba:de:0a:e0:f2:26:0a:b6:2b:1b: 4c:d4:48:77:55:38:96:2f:dd:50:4b:6e:0f:73:28: cb:60:c3:61:10:cf:6f:6a:4b:95:cb:66:f4:33:c0: 4f:e0:a7:af:00:8b:1a:4b:5f:ee:e5:8d:fa:18:05: cd:bb:3c:71:ac:3b:25:43:51:aa:71:c2:01:b1:8c: 69:9e:2b:26:a1:5e:fd:66:cb:19:a6:9a:40:b0:de: fc:5d:d9:a1:f5:c0:36:54:f4:1b:16:86:1f:20:e1: c0:bc:5b:c6:27:d4:a8:de:af:d6:8b:90:9e:a3:02: 7f:c7:8a:2c:70:e9:0d:cf:ea:67:4f:f4:ee:92:c0: 2e:3c:c7:c2:34:79:ec:d8:ce:8c:8e:ff:73:a7:67: ae:24:f8:15:07:1e:cc:6c:1c:59:5f:73:be:f1:d8: 28:55:b4:a3:d8:39:03:80:e0:77:68:6c:19:5a:db: 0e:3d:75:f7:55:90:05:6c:88:50:4e:16:1c:ef:0b: 6f:91:bf:58:1c:9b:61:82:27:07:bf:d0:ae:ed:9b: 85:a7:ba:c1:16:e9:58:7b:b8:f7:c6:56:dc:4a:e6: a6:b0:d1:24:95:38:0f:54:11:ec:7f:61:3f:5b:6d: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3F:D8:AC:0F:85:E3:1A:E4:FE:9B:D1:A5:5E:65:99:EF:49:A6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68d99f85-b937-338f-9406-78fc948e527c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e5:54:ec:18:22:ef:c6:03:ca:5c:2b:22:c8:9e:f3:3c:ff: b6:05:f1:49:07:37:2b:03:a8:b1:b7:0e:4a:5f:2a:dc:1c:b3: 64:71:51:ba:6b:0d:c7:c4:ff:47:e1:4c:0e:89:71:58:20:5b: 84:b5:04:bb:97:2d:85:77:0a:63:5b:fb:7e:81:7c:6d:d8:95: 8b:1b:62:3e:0f:33:2f:0f:ed:fd:bb:bc:78:72:d9:c1:5f:fc: 30:8f:7a:36:35:71:c4:a4:47:c6:57:d0:a5:d9:30:53:17:af: 34:db:cb:d4:4c:c0:2b:1a:7d:25:de:72:dd:21:b9:c1:ce:88: 40:0d:ae:cb:f7:e8:02:f3:5e:4d:34:eb:9f:7b:98:ba:33:61: e3:24:11:76:22:b1:77:9c:dc:ae:2f:ed:37:8a:ea:41:11:20: bd:49:58:00:a7:18:16:2f:0d:85:75:3d:76:2d:b4:00:d1:f4: d2:f9:1e:bf:5c:9a:57:3f:9b:e3:7b:e1:3a:db:c6:15:29:43: 22:d0:78:a0:f9:2c:0d:84:5f:83:1f:07:d2:b7:76:b5:f9:e7: a3:27:55:25:08:0d:ba:55:60:99:46:9a:03:71:c7:75:94:a4: 77:db:b4:6d:2f:e0:17:d1:b8:8f:a4:d3:9c:25:8b:9d:0d:6d: 0a:db:69:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEys8cgZzFVhpUHf+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NDJmMjIxMjQtMzRjNC00Mjg0LTgzNTMtYTU5MThlZjc1Mjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrPhxfcQF7BE8vK3HMvDXxSJqLreCuDyJgq2 KxtM1Eh3VTiWL91QS24PcyjLYMNhEM9vakuVy2b0M8BP4KevAIsaS1/u5Y36GAXN uzxxrDslQ1GqccIBsYxpnismoV79ZssZpppAsN78Xdmh9cA2VPQbFoYfIOHAvFvG J9So3q/Wi5CeowJ/x4oscOkNz+pnT/TuksAuPMfCNHns2M6Mjv9zp2euJPgVBx7M bBxZX3O+8dgoVbSj2DkDgOB3aGwZWtsOPXX3VZAFbIhQThYc7wtvkb9YHJthgicH v9Cu7ZuFp7rBFulYe7j3xlbcSuamsNEklTgPVBHsf2E/W22eOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEI/2KwPheMa5P6b0aVeZZnvSaa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhkOTlmODUtYjkzNy0z MzhmLTk0MDYtNzhmYzk0OGU1MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFuVU7Bgi78YDylwrIsie8zz/tgXxSQc3KwOosbcOSl8q3ByzZHFR umsNx8T/R+FMDolxWCBbhLUEu5cthXcKY1v7foF8bdiVixtiPg8zLw/t/bu8eHLZ wV/8MI96NjVxxKRHxlfQpdkwUxevNNvL1EzAKxp9Jd5y3SG5wc6IQA2uy/foAvNe TTTrn3uYujNh4yQRdiKxd5zcri/tN4rqQREgvUlYAKcYFi8NhXU9di20ANH00vke v1yaVz+b43vhOtvGFSlDItB4oPksDYRfgx8H0rd2tfnnoydVJQgNulVgmUaaA3HH dZSkd9u0bS/gF9G4j6TTnCWLnQ1tCttpTA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:27 2026 by rpki-client