$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa File: 8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa (raw, json) Hash identifier: K+0Od+vI4NLtJZXwL+bFOFPLbRz4cEAeQ26sXzoO/d8= Subject key identifier: CD:EC:28:20:1D:EB:50:CB:59:7F:AD:06:10:0A:22:E1:57:B8:26:96 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D773A84B245DD1C2331DC8380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 2604:2e88:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:84:b2:45:dd:1c:23:31:dc:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=cac6b067-d314-4232-b737-e5301fc34e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:8c:40:f1:0e:25:ad:4b:73:d9:a0:e6:8e: b5:c0:ea:29:07:18:82:31:35:68:d2:a2:4a:23:bf: d4:5f:9b:0d:7b:5e:df:a6:85:cd:4c:a7:49:bd:f9: b6:ca:b1:04:69:0e:a4:c0:86:8c:08:24:60:4a:5e: 2b:55:a9:18:4c:2c:83:de:17:fb:ad:43:6c:e0:76: a7:92:a4:c5:86:4d:bb:bc:93:39:26:91:8c:db:f7: 20:1d:b5:ef:13:4b:e0:d8:fe:6e:cc:66:fb:af:d1: 88:2f:cf:ba:11:fa:15:3e:9c:5e:21:77:39:cf:05: d5:6f:1c:5e:c6:74:05:78:79:82:d9:63:06:f9:da: 5b:ea:30:f1:bf:2b:e1:38:a6:0d:e7:e6:79:70:8c: e3:23:57:e4:76:23:60:5f:e5:d5:3f:61:63:b8:db: cf:c5:ed:81:34:85:c0:19:3e:6e:2f:6e:27:ff:af: 95:64:cf:9d:02:db:85:32:5a:38:5e:55:9a:9d:88: c1:59:01:25:88:96:87:a6:b8:e0:78:91:63:04:62: 9f:e2:1c:fb:9c:2b:c2:e0:b0:3e:fc:60:9e:c7:e8: cd:16:cf:41:1d:32:e3:db:99:66:73:08:02:02:17: ec:09:d4:fe:a6:dc:25:3f:17:09:87:a9:84:ee:54: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EC:28:20:1D:EB:50:CB:59:7F:AD:06:10:0A:22:E1:57:B8:26:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d2f1ef3-a933-3879-9ba7-016a45a24a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:88:ce:60:3e:cd:46:c6:01:5d:f6:39:ac:16:cc:35:ad:fd: 66:49:33:af:b4:b9:6e:6f:3b:d2:e7:40:e7:6d:0f:e9:01:05: cf:f7:34:4b:0c:28:2e:9d:ed:30:94:94:13:ad:50:fd:9d:81: 9c:0b:8d:94:34:a4:28:db:f1:96:29:fe:46:ad:48:ba:4c:55: 3f:ab:d4:58:bb:ab:4a:f9:f8:9a:cf:30:ee:c8:3e:ed:95:d5: a1:ad:68:11:f2:a8:53:7d:26:f5:07:29:44:74:e3:db:48:3e: 2c:0f:8b:eb:25:02:55:fa:43:ae:f4:11:92:b5:30:6b:9e:92: 75:fe:ec:8b:20:eb:1c:84:0d:be:34:e1:e0:d8:9c:b3:35:ed: 2e:58:c5:1b:ab:da:6e:4f:6e:0a:60:c5:b5:b6:70:72:13:45: 6f:a5:27:80:e7:28:f9:b7:a7:fe:83:f2:6d:59:39:c0:21:d9: 07:0b:10:84:e9:7f:b7:cf:b4:46:cc:ee:9c:4b:27:f6:14:c3: 7e:70:ba:08:7c:ba:fe:5f:3e:8b:50:51:a7:75:77:d8:97:76: db:9e:2b:16:1c:fd:d3:39:d4:89:1f:71:a2:37:10:a3:f0:cf: d6:4d:2f:3a:0d:5b:f0:88:5f:c8:ba:5b:72:9a:67:26:0b:43: 33:d5:5c:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE13OoSyRd0cIzHcg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2FjNmIwNjctZDMxNC00MjMyLWI3MzctZTUzMDFmYzM0ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslGMQPEOJa1Lc9mg5o61wOopBxiCMTVo0qJK I7/UX5sNe17fpoXNTKdJvfm2yrEEaQ6kwIaMCCRgSl4rVakYTCyD3hf7rUNs4Han kqTFhk27vJM5JpGM2/cgHbXvE0vg2P5uzGb7r9GIL8+6EfoVPpxeIXc5zwXVbxxe xnQFeHmC2WMG+dpb6jDxvyvhOKYN5+Z5cIzjI1fkdiNgX+XVP2FjuNvPxe2BNIXA GT5uL24n/6+VZM+dAtuFMlo4XlWanYjBWQEliJaHprjgeJFjBGKf4hz7nCvC4LA+ /GCex+jNFs9BHTLj25lmcwgCAhfsCdT+ptwlPxcJh6mE7lSSLwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM3sKCAd61DLWX+tBhAKIuFXuCaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGQyZjFlZjMtYTkzMy0z ODc5LTliYTctMDE2YTQ1YTI0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMYjOYD7NRsYBXfY5rBbMNa39Zkkzr7S5bm870udA520P6QEFz/c0 SwwoLp3tMJSUE61Q/Z2BnAuNlDSkKNvxlin+Rq1IukxVP6vUWLurSvn4ms8w7sg+ 7ZXVoa1oEfKoU30m9QcpRHTj20g+LA+L6yUCVfpDrvQRkrUwa56Sdf7siyDrHIQN vjTh4NicszXtLljFG6vabk9uCmDFtbZwchNFb6UngOco+ben/oPybVk5wCHZBwsQ hOl/t8+0RszunEsn9hTDfnC6CHy6/l8+i1BRp3V32Jd2254rFhz90znUiR9xojcQ o/DP1k0vOg1b8IhfyLpbcppnJgtDM9Vc6w== -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:18 2026 by rpki-client