$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa File: a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa (raw, json) Hash identifier: Jx0EyvMOSEIy/kkbWbfLbeUhzeySP8E+jAdO6cZr1W8= Subject key identifier: 2E:65:24:A7:6F:8E:9C:13:21:82:55:AC:E4:E4:6C:53:BE:86:D4:05 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584DE6E5D42FE4EF2CA09CFEA580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa Signing time: Thu 21 May 2026 01:00:25 +0000 ROA not before: Thu 21 May 2026 01:00:25 +0000 ROA not after: Wed 19 Aug 2026 01:00:25 +0000 asID: 19905 IP address blocks: 2604:2e8e:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:e5:d4:2f:e4:ef:2c:a0:9c:fe:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 21 01:00:25 2026 GMT Not After : Aug 19 01:00:25 2026 GMT Subject: CN=90edf8cf-91b8-4445-a24a-70add82e75b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:64:d7:b5:c0:6e:fe:04:53:a0:43:b6:49: b9:ff:0c:d2:2c:9b:37:99:bd:f2:54:ff:62:82:66: 7e:a1:2d:bc:52:15:8a:81:52:ca:dc:04:30:61:bd: 90:9f:26:7a:87:d5:8e:97:fe:c4:b5:79:ec:f9:1b: 83:d8:45:3e:e5:58:95:a7:ed:79:f5:ae:f8:4b:2b: 03:71:c7:bc:12:71:29:68:2a:28:6c:d1:65:9e:fe: a6:36:c9:c2:e3:47:dc:e3:17:20:cd:3e:e5:23:74: c3:1d:1c:e2:06:c6:30:1b:7a:0b:5f:3a:5d:5b:d5: ff:85:bd:d5:47:ae:37:c6:23:e7:ea:e5:d9:c2:d3: 7f:e5:99:9f:01:9f:7d:5c:80:88:8b:62:79:cb:37: c6:eb:c4:2a:db:2a:39:e2:c2:b9:f9:5f:6b:3b:79: 0b:15:4f:96:d0:ac:69:82:dd:3a:60:16:06:b9:1b: b6:fa:b3:ef:63:7e:93:b5:7e:99:1e:cd:0b:95:1d: 59:8a:65:1c:c0:43:e5:58:28:14:0d:2d:e3:20:89: 56:c7:a5:3e:b3:e1:c2:a6:8e:71:37:6f:58:10:d8: e2:66:30:a7:00:ed:76:03:56:38:ac:24:77:37:34: 14:89:83:ff:1a:ff:01:38:c9:ea:5a:42:43:c1:9a: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:65:24:A7:6F:8E:9C:13:21:82:55:AC:E4:E4:6C:53:BE:86:D4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2e987fb-99fd-342d-909a-ccc32e8e9fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:f800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c9:1d:25:da:65:92:d9:73:a6:a9:04:91:99:34:34:f6:f9: 1d:ac:8a:04:35:f0:96:1a:48:e4:ac:42:39:77:2d:81:eb:1e: 7a:71:47:ac:47:42:ba:4b:e4:54:c5:46:37:2a:6a:2c:b2:8b: f5:2c:71:a6:85:f4:5b:0e:6b:f4:64:f1:c4:40:6c:88:8c:a4: d7:4f:70:e6:06:a8:dc:10:ff:ce:12:5d:a4:0d:30:cc:f0:4c: d2:10:69:b7:be:dc:9f:59:db:c7:f6:cf:82:93:08:1f:54:9b: 55:cf:11:64:c0:e6:ba:fd:eb:0f:54:b3:d3:90:6d:a2:80:cc: 11:d8:77:af:c9:23:e0:f9:88:e9:f4:ab:97:b1:30:b1:99:85: 15:ab:17:98:73:87:38:4e:20:0f:0b:51:f5:18:1d:dd:80:25: 13:23:f7:e0:53:5a:90:6b:3d:f4:a4:7d:5d:d4:dc:f7:99:49: cf:2a:2d:fd:92:8c:e0:f8:3c:21:07:67:18:b4:cf:17:a8:79: 7d:24:30:cd:11:1b:27:54:0c:17:cf:f3:01:57:9b:59:11:5b: db:03:a3:c5:b7:34:67:60:c7:96:72:00:73:a9:0a:b4:c8:ec: 7c:01:39:40:09:c8:c3:6d:19:74:05:51:3e:c2:4c:0d:f0:0c: 54:ee:ae:00 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3m5dQv5O8soJz+pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk OTBlZGY4Y2YtOTFiOC00NDQ1LWEyNGEtNzBhZGQ4MmU3NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1k17XAbv4EU6BDtkm5/wzSLJs3mb3yVP9i gmZ+oS28UhWKgVLK3AQwYb2QnyZ6h9WOl/7EtXns+RuD2EU+5ViVp+159a74SysD cce8EnEpaCoobNFlnv6mNsnC40fc4xcgzT7lI3TDHRziBsYwG3oLXzpdW9X/hb3V R643xiPn6uXZwtN/5ZmfAZ99XICIi2J5yzfG68Qq2yo54sK5+V9rO3kLFU+W0Kxp gt06YBYGuRu2+rPvY36TtX6ZHs0LlR1ZimUcwEPlWCgUDS3jIIlWx6U+s+HCpo5x N29YENjiZjCnAO12A1Y4rCR3NzQUiYP/Gv8BOMnqWkJDwZo0XwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC5lJKdvjpwTIYJVrOTkbFO+htQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJlOTg3ZmItOTlmZC0z NDJkLTkwOWEtY2NjMzJlOGU5ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC8kdJdplktlzpqkEkZk0NPb5HayKBDXwlhpI5KxCOXctgeseenFH rEdCukvkVMVGNypqLLKL9SxxpoX0Ww5r9GTxxEBsiIyk109w5gao3BD/zhJdpA0w zPBM0hBpt77cn1nbx/bPgpMIH1SbVc8RZMDmuv3rD1Sz05BtooDMEdh3r8kj4PmI 6fSrl7EwsZmFFasXmHOHOE4gDwtR9Rgd3YAlEyP34FNakGs99KR9XdTc95lJzyot /ZKM4Pg8IQdnGLTPF6h5fSQwzREbJ1QMF8/zAVebWRFb2wOjxbc0Z2DHlnIAc6kK tMjsfAE5QAnIw20ZdAVRPsJMDfAMVO6uAA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:54:13 2026 by rpki-client