$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa File: 9217c218-c43e-3e60-b0d1-ebf5a015639c.roa (raw, json) Hash identifier: fpYfd/m/qo3AXabuD8s3qjmlVzcItymghl0HYpERLqo= Subject key identifier: 2D:64:5D:ED:C2:67:0F:6A:80:74:43:DF:ED:7A:88:DB:6D:09:EF:B4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D6515399F3E363BF89A249E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 2604:2e80:809::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:39:9f:3e:36:3b:f8:9a:24:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=a5b72cd3-1bb4-4c6e-b240-7badd7840bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:15:bf:12:39:a2:29:82:56:45:c7:5a:d5: 64:c3:7c:73:94:c8:ca:f2:14:8a:2b:d0:fe:cc:33: 14:06:a7:8e:59:a4:d3:df:e6:dc:6e:a9:c2:10:5b: a4:11:c4:d7:88:c4:cf:8c:63:e5:6e:77:16:d6:d3: 2c:2d:df:bf:49:3d:b3:19:65:b3:cb:e4:bb:fc:2e: 83:fa:31:79:08:49:ed:bb:3b:48:6d:5b:57:d4:49: d9:4b:a6:7f:39:4b:77:11:9c:77:2c:05:9d:04:95: 6e:26:69:cd:ca:a8:1d:b1:3d:1c:6c:e6:b5:72:ea: 20:8f:41:a3:29:eb:2a:a0:c3:6e:71:e5:ff:2b:d6: 60:b9:e3:a1:83:c9:06:f2:01:76:ee:7f:60:6f:98: 93:ac:88:12:ed:72:67:20:0f:05:cc:12:27:72:be: 08:50:ff:6b:5e:6c:36:69:6c:3e:f6:df:bf:af:87: c3:41:02:da:bd:8e:ce:5e:b3:57:82:3c:b1:43:ab: 9e:17:f3:27:b1:4a:67:9c:34:92:ce:80:4f:9e:7a: 31:20:27:d4:72:e4:42:5d:d8:64:38:1b:30:42:c3: 22:70:71:22:4e:7d:ca:c4:74:bd:66:90:7f:fd:e5: 37:24:46:b6:90:5b:27:0b:32:8f:29:d5:87:f6:b7: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:5D:ED:C2:67:0F:6A:80:74:43:DF:ED:7A:88:DB:6D:09:EF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9217c218-c43e-3e60-b0d1-ebf5a015639c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80:809::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:dc:29:f7:8d:f8:c5:a9:ac:83:a1:68:8e:89:6d:9b:df:a8: 8b:2b:b2:26:dc:4b:f2:68:6e:3c:93:e7:be:a3:be:31:ef:b3: d6:f3:a1:1e:16:da:7f:8c:4e:e0:ed:e7:15:f2:19:ec:30:60: 01:0e:9c:66:3d:2f:62:28:bc:17:23:12:a6:db:87:f0:c5:8d: 71:bd:23:5a:c3:14:53:17:fa:04:ab:b9:3a:03:6c:34:68:c9: 20:e4:ad:60:b4:e7:ee:54:aa:82:e8:2c:0e:c8:42:64:e8:82: b3:c1:58:45:99:28:a5:30:8e:a6:f4:7c:cb:21:1f:14:e4:b4: 04:4d:db:b6:5d:72:fd:a2:88:b2:c5:b4:c1:1f:5f:38:b8:3d: 01:bf:c6:80:b5:04:8f:aa:e8:07:1b:09:d1:43:85:77:6d:01: c8:21:50:2d:80:b9:42:75:14:32:b9:f6:cf:91:01:03:8c:a1: f2:2e:6b:de:82:2c:22:62:27:64:62:bd:ef:8b:23:05:70:75: 03:d2:a3:65:49:fb:40:87:b2:25:42:1b:b2:4a:1d:ec:1b:43: a3:a6:66:13:fa:05:4e:c8:d1:4d:e0:65:22:87:62:0a:34:a9: 8e:a2:26:25:aa:97:b1:c6:55:e7:39:c0:0f:32:2b:4c:f9:82: 72:86:ef:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFTmfPjY7+JoknoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YTViNzJjZDMtMWJiNC00YzZlLWIyNDAtN2JhZGQ3ODQwYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigkVvxI5oimCVkXHWtVkw3xzlMjK8hSKK9D+ zDMUBqeOWaTT3+bcbqnCEFukEcTXiMTPjGPlbncW1tMsLd+/ST2zGWWzy+S7/C6D +jF5CEntuztIbVtX1EnZS6Z/OUt3EZx3LAWdBJVuJmnNyqgdsT0cbOa1cuogj0Gj KesqoMNuceX/K9ZgueOhg8kG8gF27n9gb5iTrIgS7XJnIA8FzBIncr4IUP9rXmw2 aWw+9t+/r4fDQQLavY7OXrNXgjyxQ6ueF/MnsUpnnDSSzoBPnnoxICfUcuRCXdhk OBswQsMicHEiTn3KxHS9ZpB//eU3JEa2kFsnCzKPKdWH9rd1uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC1kXe3CZw9qgHRD3+16iNttCe+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTIxN2MyMTgtYzQzZS0z ZTYwLWIwZDEtZWJmNWEwMTU2MzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAgJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGncKfeN+MWprIOhaI6JbZvfqIsrsibcS/JobjyT576jvjHvs9bz oR4W2n+MTuDt5xXyGewwYAEOnGY9L2IovBcjEqbbh/DFjXG9I1rDFFMX+gSruToD bDRoySDkrWC05+5UqoLoLA7IQmTogrPBWEWZKKUwjqb0fMshHxTktARN27Zdcv2i iLLFtMEfXzi4PQG/xoC1BI+q6AcbCdFDhXdtAcghUC2AuUJ1FDK59s+RAQOMofIu a96CLCJiJ2Rive+LIwVwdQPSo2VJ+0CHsiVCG7JKHewbQ6OmZhP6BU7I0U3gZSKH Ygo0qY6iJiWql7HGVec5wA8yK0z5gnKG76Q= -----END CERTIFICATE-----Generated at Fri Apr 17 13:22:50 2026 by rpki-client