$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json) Hash identifier: 9qDimLxdaQO9fLv5FEgQTs0onGoXHiIPPKrYsbYN6RY= Subject key identifier: C7:F1:97:4B:A8:5F:69:5F:11:13:25:48:E7:91:84:97:8B:7B:E2:78 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E059C61C749C6880D81CCA380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 2604:2e8a:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:61:c7:49:c6:88:0d:81:cc:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=03196357-5396-4e77-a02a-06adbdd81dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:d6:ba:95:fe:4d:4f:8d:fa:8d:87:76:e5: ad:1e:ca:6e:df:22:6c:c0:d9:9e:c5:22:92:36:61: f3:72:36:56:53:92:02:81:b7:51:1a:2a:fc:72:dd: bb:b0:2d:98:4d:4c:81:53:86:ce:71:86:9f:cf:b3: 00:3a:3e:a3:97:c2:54:10:ed:53:99:08:3c:c1:a5: 6d:78:3e:e3:a6:51:22:28:78:9b:60:cf:97:ad:30: 47:08:a1:21:cb:a4:18:0d:4e:37:ac:64:b3:78:27: df:39:0f:d5:61:56:01:b2:55:e6:ff:07:3e:5d:44: 0b:3c:a2:93:31:84:2b:2d:61:0a:59:51:b5:3e:20: 77:69:6f:39:95:56:b8:55:b4:97:b3:6e:b6:7a:4c: d9:83:b4:9e:3b:53:46:34:ee:36:ed:50:23:bd:ab: 1f:e3:9d:4f:49:05:f7:62:e7:a1:7d:a2:9d:4a:f1: e2:35:0d:5a:34:5e:5c:12:ca:08:3a:ee:1a:85:c8: 8a:56:1e:45:09:c4:72:f7:94:e4:c5:80:21:2c:8b: b3:70:67:f8:81:00:93:82:67:76:c7:ff:ae:0b:9d: 2d:73:f7:64:ea:d4:77:b8:0b:ef:15:5a:0c:99:6c: 1b:7f:0c:5d:31:59:39:0d:85:74:32:31:2c:ae:05: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:97:4B:A8:5F:69:5F:11:13:25:48:E7:91:84:97:8B:7B:E2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:74:22:fe:db:b0:99:37:42:cc:3e:18:48:e6:30:b8:3f:7c: 15:ba:bc:c3:de:ed:6a:d3:dd:c3:a0:25:2f:eb:9c:c5:d1:70: 8d:fa:03:ee:7a:43:17:84:c1:29:b4:aa:94:ec:6f:4b:00:cd: af:dd:74:98:f0:30:be:1d:07:35:3d:1d:95:b2:69:28:4a:f4: ed:47:02:2b:63:8b:8c:f8:36:8f:bb:d6:b1:5c:38:fc:a3:52: 3d:eb:f2:88:1b:41:a5:de:09:2a:34:88:0f:b7:0b:61:64:2f: 0a:6e:0a:c1:12:19:99:28:9a:36:8e:68:a7:d1:34:56:29:85: 64:d8:48:c6:82:40:86:9d:32:8b:16:ac:e4:90:b9:41:df:af: 4a:59:74:91:e1:ae:50:42:07:d1:09:cf:fc:46:f7:f9:59:1a: a2:ed:75:b3:86:61:63:f4:47:55:e5:fe:f7:76:6d:f8:1d:38: 65:20:0e:d6:17:bf:ab:8c:c8:ec:3a:ed:07:24:ae:eb:c8:83: cc:18:c0:ef:9a:8c:53:3f:26:30:78:bf:64:08:da:a5:55:4b: 13:cf:12:ed:50:43:16:db:b6:6d:cc:0f:d5:4b:1b:c6:7a:63: 31:96:01:cd:79:ac:ca:f7:7c:5c:6d:21:67:98:b2:5c:8a:0b: 35:04:b7:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4FnGHHScaIDYHMo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDMxOTYzNTctNTM5Ni00ZTc3LWEwMmEtMDZhZGJkZDgxZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2jWupX+TU+N+o2HduWtHspu3yJswNmexSKS NmHzcjZWU5ICgbdRGir8ct27sC2YTUyBU4bOcYafz7MAOj6jl8JUEO1TmQg8waVt eD7jplEiKHibYM+XrTBHCKEhy6QYDU43rGSzeCffOQ/VYVYBslXm/wc+XUQLPKKT MYQrLWEKWVG1PiB3aW85lVa4VbSXs262ekzZg7SeO1NGNO427VAjvasf451PSQX3 YuehfaKdSvHiNQ1aNF5cEsoIOu4ahciKVh5FCcRy95TkxYAhLIuzcGf4gQCTgmd2 x/+uC50tc/dk6tR3uAvvFVoMmWwbfwxdMVk5DYV0MjEsrgXBpQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMfxl0uoX2lfERMlSOeRhJeLe+J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZjU0MzEtNWZjZS0z NmQwLTg0YTgtMGExOWY3YTAzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABHQi/tuwmTdCzD4YSOYwuD98Fbq8w97tatPdw6AlL+ucxdFwjfoD 7npDF4TBKbSqlOxvSwDNr910mPAwvh0HNT0dlbJpKEr07UcCK2OLjPg2j7vWsVw4 /KNSPevyiBtBpd4JKjSID7cLYWQvCm4KwRIZmSiaNo5op9E0VimFZNhIxoJAhp0y ixas5JC5Qd+vSll0keGuUEIH0QnP/Eb3+Vkaou11s4ZhY/RHVeX+93Zt+B04ZSAO 1he/q4zI7DrtBySu68iDzBjA75qMUz8mMHi/ZAjapVVLE88S7VBDFtu2bcwP1Usb xnpjMZYBzXmsyvd8XG0hZ5iyXIoLNQS3nA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:35:21 2026 by rpki-client