$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa File: 8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa (raw, json) Hash identifier: Ug8Y5sRg4UvU2PJw/DuKUucYfBp4Rac50prttUVjQF8= Subject key identifier: 2B:63:07:C8:07:24:5F:F2:D7:3D:1B:6A:96:D0:F0:DF:47:F7:48:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CACF1CB56A5EAB05207173330 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 30036 IP address blocks: 2604:2e87:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:cb:56:a5:ea:b0:52:07:17:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=f4302ebb-89ed-4437-9146-3f702fb4d480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:5a:aa:12:e0:50:0b:57:f1:ed:b5:48:9a: af:e5:83:88:5e:7d:3f:b2:34:b8:c9:66:36:ec:94: ec:69:1f:20:2e:41:ad:76:75:bb:22:a2:aa:1f:e2: 49:50:79:10:01:4e:2d:41:d1:cf:44:3d:cd:c0:52: da:42:18:07:64:83:3c:16:9e:65:ed:e3:12:e8:75: 57:87:16:c8:33:83:c5:37:be:f2:47:f5:32:38:70: 4f:7b:ed:99:4b:10:cb:52:a3:7e:aa:bc:d0:db:49: 93:5f:be:f6:71:fd:5a:ce:f0:94:52:8d:21:9d:89: 99:e1:d6:9c:28:ea:34:3a:33:d4:93:f9:16:96:bc: a8:37:02:01:b7:75:8f:9f:bf:40:fc:53:57:d8:b8: 87:4b:29:17:51:64:53:f9:1e:e6:41:60:26:78:fb: 90:6e:ea:2c:20:40:7b:0f:ba:34:1c:0d:ae:be:65: 0d:cf:86:93:18:05:33:dd:4e:0a:3e:4c:58:56:c7: 4e:7e:5b:d4:07:01:67:5e:ac:9a:ad:50:31:28:d9: 0e:a4:9a:b0:4b:de:6c:cc:7f:95:cd:f9:97:d3:90: 89:dc:2b:06:b2:09:8d:6f:97:de:df:0c:81:99:b9: a5:eb:85:68:9c:63:1b:ac:c3:ca:79:8e:98:d3:c8: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:07:C8:07:24:5F:F2:D7:3D:1B:6A:96:D0:F0:DF:47:F7:48:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8520fc18-ab98-3b32-a7fd-c4bb5fedf323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:21:93:6b:26:e0:f1:d9:45:cf:db:21:80:d9:0b:87:e9:a7: 71:6f:56:64:6a:2f:41:f2:10:ac:c8:e3:ae:73:05:1e:ad:8a: 8e:f0:6a:49:2a:d7:a0:3e:3b:bb:fc:bf:68:a1:3d:ea:ff:a8: 2b:81:9c:70:46:69:2f:8a:57:5a:18:35:6a:a2:90:76:d7:30: db:fd:7e:a5:4d:73:0d:4c:e7:6d:52:5e:e1:e1:1b:f0:fa:ec: 4c:21:8c:54:8e:57:3c:72:c6:74:ec:08:03:06:5b:9a:f2:e1: c8:2e:81:c3:68:0c:9e:6d:5d:d9:64:8b:d9:d7:a5:a3:1b:d3: a3:92:52:d6:38:74:cc:5c:7e:87:54:5c:5d:7a:d9:cd:b0:01: b2:b9:99:73:18:0a:6c:cb:67:3a:0d:98:d5:df:f7:f8:69:a8: 12:bc:85:d5:93:53:d8:31:45:8a:2a:4b:75:cb:74:93:55:a6: 40:52:01:23:02:e8:6d:d3:32:f3:03:be:43:bf:3d:7c:da:8c: de:b6:42:d9:69:6f:fe:dd:0d:03:33:95:8b:7c:c6:cf:fc:ac: eb:a4:56:56:51:23:56:6b:85:b1:4d:60:ff:40:76:cc:01:24: 25:08:5e:3b:38:84:94:55:d3:54:a6:92:36:14:51:15:07:eb: 99:8a:82:52 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEys8ctWpeqwUgcXMzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZjQzMDJlYmItODllZC00NDM3LTkxNDYtM2Y3MDJmYjRkNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyFaqhLgUAtX8e21SJqv5YOIXn0/sjS4yWY2 7JTsaR8gLkGtdnW7IqKqH+JJUHkQAU4tQdHPRD3NwFLaQhgHZIM8Fp5l7eMS6HVX hxbIM4PFN77yR/UyOHBPe+2ZSxDLUqN+qrzQ20mTX772cf1azvCUUo0hnYmZ4dac KOo0OjPUk/kWlryoNwIBt3WPn79A/FNX2LiHSykXUWRT+R7mQWAmePuQbuosIEB7 D7o0HA2uvmUNz4aTGAUz3U4KPkxYVsdOflvUBwFnXqyarVAxKNkOpJqwS95szH+V zfmX05CJ3CsGsgmNb5fe3wyBmbml64VonGMbrMPKeY6Y08hWjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCtjB8gHJF/y1z0bapbQ8N9H90itMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODUyMGZjMTgtYWI5OC0z YjMyLWE3ZmQtYzRiYjVmZWRmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh7Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHiGTaybg8dlFz9shgNkLh+mncW9WZGovQfIQrMjjrnMFHq2KjvBq SSrXoD47u/y/aKE96v+oK4GccEZpL4pXWhg1aqKQdtcw2/1+pU1zDUznbVJe4eEb 8PrsTCGMVI5XPHLGdOwIAwZbmvLhyC6Bw2gMnm1d2WSL2deloxvTo5JS1jh0zFx+ h1RcXXrZzbABsrmZcxgKbMtnOg2Y1d/3+GmoEryF1ZNT2DFFiipLdct0k1WmQFIB IwLobdMy8wO+Q789fNqM3rZC2Wlv/t0NAzOVi3zGz/ys66RWVlEjVmuFsU1g/0B2 zAEkJQheOziElFXTVKaSNhRRFQfrmYqCUg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:37:52 2026 by rpki-client