$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a480b3b8-769a-38a6-9774-fda0cf3dd97e.roa File: a480b3b8-769a-38a6-9774-fda0cf3dd97e.roa (raw, json) Hash identifier: ZJfImSjgrhNiaojarjriVvNlz5+AumaYSg673j4YAOs= Subject key identifier: A9:58:AE:AD:7D:77:91:09:60:43:89:31:8E:26:4B:E0:28:4F:20:E6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D0647A6504E85451B553D5250 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a480b3b8-769a-38a6-9774-fda0cf3dd97e.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 2604:2e88:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a6:50:4e:85:45:1b:55:3d:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=9085ffc5-44c0-4440-9b8c-b79a20ebc6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2e:7e:8b:b8:e7:c1:27:9b:fa:7c:e3:f0:e8: 85:5d:7d:38:1a:8b:0b:48:da:bb:f4:eb:5a:4a:ac: ee:b4:85:45:86:2c:01:dc:49:28:84:56:2a:44:06: 4a:50:f8:b4:09:76:79:ef:d1:d4:66:34:99:5f:68: 67:27:7d:35:96:8a:fc:b5:7f:5c:ec:f7:70:2f:1e: bb:b9:88:f5:c8:88:ea:fa:7c:8a:2e:66:a6:ef:de: 54:cd:50:48:cb:00:a8:8f:da:4e:34:9e:3d:f9:05: e1:07:36:60:f6:d2:98:58:0e:04:88:1a:3f:c7:f1: c6:4f:71:f1:b6:41:e1:60:1c:cf:c3:35:a1:04:3b: c9:e7:4b:e8:e5:7f:d7:c2:d0:c7:0b:8a:f9:69:11: e8:1c:54:fe:e0:43:08:74:e1:fb:c9:a0:cd:6d:82: ef:32:be:f2:03:b0:c8:9c:25:1f:1b:8e:cc:56:91: 02:0a:9d:91:24:b2:f8:46:c1:ea:d2:0c:e5:63:e0: 60:e5:5e:ea:88:3f:ac:89:95:03:b5:ca:17:ff:d3: 9b:4a:45:4e:f5:51:78:91:ee:f4:18:fa:a1:18:83: de:92:29:38:f4:a1:ef:bd:ef:52:ec:13:a4:55:b9: db:a5:f4:de:3c:5e:0f:6a:f1:55:64:b3:1d:72:32: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:AE:AD:7D:77:91:09:60:43:89:31:8E:26:4B:E0:28:4F:20:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a480b3b8-769a-38a6-9774-fda0cf3dd97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a1:89:34:4b:11:83:d2:c5:54:da:d8:65:78:9b:f2:75:81: 08:94:44:62:fb:6a:35:b9:a0:81:51:d7:14:a2:c7:83:58:3f: e3:9e:6d:7d:a0:be:25:a9:43:1c:88:fe:18:96:de:cf:ba:b8: 14:94:e1:bb:55:19:b6:7c:3f:d9:47:17:84:46:8a:ad:73:38: b0:b1:07:18:a1:5f:3d:8e:95:1e:ba:11:ff:91:af:ea:1a:de: b7:98:ca:35:b6:58:1b:ab:6b:4b:5f:ef:34:1c:7d:b7:91:15: 84:f8:97:5e:86:3c:4c:8e:48:34:44:a6:49:9a:c8:8b:d6:c9: 2b:e6:e9:18:11:b0:40:5b:97:7e:3a:85:0c:7f:11:26:93:be: 65:65:24:7a:f7:5f:2e:30:c9:7e:98:e0:d6:aa:6c:e5:c1:83: 7a:60:50:55:06:51:8c:14:87:f0:aa:d1:48:5f:e3:d8:82:53: ad:52:76:df:32:14:f0:64:77:25:aa:5a:a1:92:93:fe:95:21: 70:5e:c7:33:cc:39:ac:74:37:ea:8a:8e:a1:7d:4b:de:e0:6e: f1:68:40:f2:c2:6c:32:73:e3:02:fb:85:e5:f2:28:3e:f8:24: 39:81:9e:4d:3c:76:8b:34:5d:d1:f3:ce:08:21:9a:55:40:89: e6:ba:e7:bd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0GR6ZQToVFG1U9UlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTA4NWZmYzUtNDRjMC00NDQwLTliOGMtYjc5YTIwZWJjNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C5+i7jnwSeb+nzj8OiFXX04GosLSNq79Ota SqzutIVFhiwB3EkohFYqRAZKUPi0CXZ579HUZjSZX2hnJ301lor8tX9c7PdwLx67 uYj1yIjq+nyKLmam795UzVBIywCoj9pONJ49+QXhBzZg9tKYWA4EiBo/x/HGT3Hx tkHhYBzPwzWhBDvJ50vo5X/XwtDHC4r5aRHoHFT+4EMIdOH7yaDNbYLvMr7yA7DI nCUfG47MVpECCp2RJLL4RsHq0gzlY+Bg5V7qiD+siZUDtcoX/9ObSkVO9VF4ke70 GPqhGIPekik49KHvve9S7BOkVbnbpfTePF4PavFVZLMdcjJihwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKlYrq19d5EJYEOJMY4mS+AoTyDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTQ4MGIzYjgtNzY5YS0z OGE2LTk3NzQtZmRhMGNmM2RkOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABqGJNEsRg9LFVNrYZXib8nWBCJREYvtqNbmggVHXFKLHg1g/455t faC+JalDHIj+GJbez7q4FJThu1UZtnw/2UcXhEaKrXM4sLEHGKFfPY6VHroR/5Gv 6hret5jKNbZYG6trS1/vNBx9t5EVhPiXXoY8TI5INESmSZrIi9bJK+bpGBGwQFuX fjqFDH8RJpO+ZWUkevdfLjDJfpjg1qps5cGDemBQVQZRjBSH8KrRSF/j2IJTrVJ2 3zIU8GR3JapaoZKT/pUhcF7HM8w5rHQ36oqOoX1L3uBu8WhA8sJsMnPjAvuF5fIo PvgkOYGeTTx2izRd0fPOCCGaVUCJ5rrnvQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:51 2026 by rpki-client