$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa File: 97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa (raw, json) Hash identifier: 4XAjFJJ++e7NVIkCC6V5ro/+t1j63rlHYaynpUvvSoA= Subject key identifier: C8:D4:D4:97:77:E7:35:CC:1A:9B:48:D2:7F:7E:22:02:D4:B4:85:50 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E0435DD9B286D54A9FB421800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 2604:2e8b:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:dd:9b:28:6d:54:a9:fb:42:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=b935dfd0-726d-4967-a9fb-f80cf6de139b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:c1:1e:6c:d8:0b:fe:61:36:df:2b:9a:06: 9a:cf:6b:65:65:13:33:0d:79:e7:5d:f1:97:00:31: c5:56:61:f9:72:ef:e5:21:db:d8:ed:be:e4:ca:3b: c1:2d:8f:b2:27:df:2b:de:0f:7c:03:24:12:27:02: f6:1b:bc:b0:8a:31:d9:e8:56:f6:b7:56:dd:40:f0: 09:2a:ec:2e:08:06:fd:d7:ec:13:4f:26:3b:a4:7f: f4:2f:31:88:e3:1d:48:86:88:77:7d:70:c7:b6:08: ed:57:4a:9f:0c:56:55:42:f9:0a:84:62:34:30:15: e2:61:2a:1b:fb:fe:85:df:71:2b:55:97:e5:14:fd: 5f:ac:4b:c6:4c:f9:b7:ec:07:95:39:f0:b4:36:8d: bd:f8:60:a8:76:f4:18:c3:55:f4:a3:ca:a9:0f:50: 63:ee:89:d7:81:fd:33:33:e3:e6:50:c5:84:4c:10: 1c:2b:17:7d:bf:db:7b:79:be:ab:d7:bf:8c:1c:2f: f5:67:f7:be:49:d0:0b:bc:16:ca:30:e0:63:7e:d1: ff:0b:1a:bd:c4:d6:a8:c3:fe:8a:67:36:d3:cd:7a: d9:7f:31:4b:b0:30:1f:dc:d1:f3:7b:40:b2:f4:39: aa:80:89:b5:18:78:4c:2d:d4:2f:88:01:f4:f6:24: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:D4:97:77:E7:35:CC:1A:9B:48:D2:7F:7E:22:02:D4:B4:85:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/97517270-d78e-37f5-a3d6-80e6fd30c3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cb:a3:4f:2d:a3:68:bf:f5:e1:a4:07:dc:25:97:57:89:29: 75:83:c3:03:bd:d6:2d:93:44:47:b3:bd:2f:7e:fa:e1:49:b1: 17:35:2c:38:9c:72:67:d7:31:32:ca:2e:42:3a:82:50:e9:b4: 91:cf:14:0a:da:58:7c:bc:8b:f3:ff:36:e8:e9:01:c3:5c:5b: 69:cf:fc:0c:72:43:e8:14:2d:c8:78:b6:89:ce:4d:60:c9:c2: 55:be:1a:38:48:35:e0:28:25:4f:e7:e6:98:e4:4b:86:6a:ed: ce:c4:d9:9b:f6:57:8e:9a:68:e5:97:f2:f1:e8:49:a0:28:5c: 45:9c:0e:18:61:52:3f:98:4c:6f:a0:f4:51:5e:3b:7a:ea:2b: 15:31:42:2c:83:ba:79:c5:48:ed:06:4d:be:12:23:d9:49:70: 8a:cb:25:43:84:63:64:2b:96:61:cf:df:2f:6d:ee:90:e6:de: da:87:1b:e9:27:fb:bf:cf:82:0c:79:ae:0d:dd:a7:fe:7c:3c: 77:64:6f:04:3f:14:b2:f8:6e:20:a3:26:f3:4a:e7:2e:6a:f3: 81:0e:03:3b:5f:9a:a8:85:85:c0:21:e1:1f:c5:e9:59:db:1e: 3b:b5:29:e5:ca:24:b5:0d:62:52:ae:6b:dc:a6:c1:49:f3:ba: 9e:32:d7:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4ENd2bKG1UqftCGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YjkzNWRmZDAtNzI2ZC00OTY3LWE5ZmItZjgwY2Y2ZGUxMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9zBHmzYC/5hNt8rmgaaz2tlZRMzDXnnXfGX ADHFVmH5cu/lIdvY7b7kyjvBLY+yJ98r3g98AyQSJwL2G7ywijHZ6Fb2t1bdQPAJ KuwuCAb91+wTTyY7pH/0LzGI4x1Ihoh3fXDHtgjtV0qfDFZVQvkKhGI0MBXiYSob +/6F33ErVZflFP1frEvGTPm37AeVOfC0No29+GCodvQYw1X0o8qpD1Bj7onXgf0z M+PmUMWETBAcKxd9v9t7eb6r17+MHC/1Z/e+SdALvBbKMOBjftH/Cxq9xNaow/6K ZzbTzXrZfzFLsDAf3NHze0Cy9DmqgIm1GHhMLdQviAH09iQWLwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMjU1Jd35zXMGptI0n9+IgLUtIVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTc1MTcyNzAtZDc4ZS0z N2Y1LWEzZDYtODBlNmZkMzBjM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcMujTy2jaL/14aQH3CWXV4kpdYPDA73WLZNER7O9L3764UmxFzUs OJxyZ9cxMsouQjqCUOm0kc8UCtpYfLyL8/826OkBw1xbac/8DHJD6BQtyHi2ic5N YMnCVb4aOEg14CglT+fmmORLhmrtzsTZm/ZXjppo5Zfy8ehJoChcRZwOGGFSP5hM b6D0UV47euorFTFCLIO6ecVI7QZNvhIj2UlwisslQ4RjZCuWYc/fL23ukObe2ocb 6Sf7v8+CDHmuDd2n/nw8d2RvBD8UsvhuIKMm80rnLmrzgQ4DO1+aqIWFwCHhH8Xp WdseO7Up5coktQ1iUq5r3KbBSfO6njLXEA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:32:10 2026 by rpki-client