$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa File: bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa (raw, json) Hash identifier: g3ZxvVFyRP7f2mL/naEBYMoC5UCF19xmmPJhDXgMi+E= Subject key identifier: 4B:F6:7A:85:5E:1A:C8:AD:25:C5:96:74:11:5B:04:89:29:48:DE:12 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C95370852575762ABB5CBDC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 30036 IP address blocks: 2604:2e8e:a800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:37:08:52:57:57:62:ab:b5:cb:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=bb26b685-1088-4a1b-b3d3-432b99e751ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:61:9e:4f:e4:ae:ce:79:44:9c:02:cb:07: b7:c0:00:4f:a6:f5:df:ff:68:cd:aa:54:c0:21:a5: f4:a5:e8:81:a8:58:16:42:cc:e6:56:1e:4d:7c:d7: 62:4c:ba:10:44:81:7a:ec:8e:0d:ae:27:5e:88:9d: 83:9d:c4:c7:31:00:69:a7:c6:0d:c7:32:6c:a6:ad: 11:8f:24:d2:e4:a5:05:30:eb:bd:b2:33:f2:11:83: ae:8e:74:c3:f3:fd:82:57:05:c4:b0:d8:47:ce:0c: 96:d2:c7:e6:e1:0c:bf:bb:ed:d6:db:84:b8:cc:5b: bd:06:b3:a6:c8:3e:fc:d6:eb:a2:46:b5:ff:c9:a5: f5:d0:b4:2a:ec:b9:68:e9:88:e1:23:04:26:82:73: d7:9b:62:77:79:d0:7a:b2:b5:b4:7a:1a:eb:ce:99: 66:03:20:3f:7f:1e:2c:a1:5b:78:0b:05:27:9a:d8: 66:53:a2:83:ca:a0:95:89:8c:38:5e:bf:5b:7b:ac: 22:82:fb:1e:4b:53:ea:16:64:f4:5a:55:6a:0e:cd: c6:a7:d1:fb:06:c1:41:1b:7d:90:06:d1:05:c1:d1: 9d:63:2e:d9:ed:4c:09:e1:df:1e:fc:24:11:7f:8c: 2c:cc:7d:f4:a6:17:7b:c4:8a:d4:d4:b1:09:fe:1a: df:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F6:7A:85:5E:1A:C8:AD:25:C5:96:74:11:5B:04:89:29:48:DE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:a800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:45:15:5f:3e:e7:24:dc:23:18:da:39:01:2d:82:19:6c:6e: d7:fd:6d:10:87:b5:c6:b5:32:29:8d:ba:b2:ff:ad:7c:fd:29: df:d3:d6:27:28:b0:22:e7:67:4d:8a:e8:52:7b:f2:d0:31:30: 8b:99:b7:02:5e:10:e6:7c:f9:46:46:b5:9f:42:58:89:7c:a2: 83:0c:8b:b5:6d:3b:18:18:4c:d6:65:45:5f:a2:f6:5a:5d:1c: 8a:4d:23:e7:91:1c:0d:d9:53:31:d7:7b:a7:9a:e1:e5:c9:a0: 40:20:1c:3e:cb:1b:b4:d2:cc:69:88:0a:78:1c:ef:68:d9:bf: 9e:ee:29:5c:39:3a:9e:23:d3:f4:65:93:be:a2:23:8d:7a:8a: d7:a9:d7:e9:dd:65:76:0f:5e:4e:d8:36:50:16:7d:9a:68:64: 65:59:56:bc:76:4a:c7:c2:af:44:52:eb:f6:bc:41:b8:31:36: fb:73:40:35:23:5f:53:99:df:ad:11:87:4e:0d:b8:04:a0:b9: e9:1e:99:5f:2a:46:fa:26:0a:e2:d2:c9:90:05:05:2e:f9:2c: 48:9a:78:fe:39:8c:d4:41:91:eb:e9:4b:69:a6:e5:d1:4f:de: 75:bb:62:08:ed:69:b8:18:fd:7b:d8:7c:04:b3:83:ec:2f:b2: fc:82:0b:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyVNwhSV1diq7XL3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk YmIyNmI2ODUtMTA4OC00YTFiLWIzZDMtNDMyYjk5ZTc1MWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfZhnk/krs55RJwCywe3wABPpvXf/2jNqlTA IaX0peiBqFgWQszmVh5NfNdiTLoQRIF67I4NrideiJ2DncTHMQBpp8YNxzJspq0R jyTS5KUFMOu9sjPyEYOujnTD8/2CVwXEsNhHzgyW0sfm4Qy/u+3W24S4zFu9BrOm yD781uuiRrX/yaX10LQq7Llo6YjhIwQmgnPXm2J3edB6srW0ehrrzplmAyA/fx4s oVt4CwUnmthmU6KDyqCViYw4Xr9be6wigvseS1PqFmT0WlVqDs3Gp9H7BsFBG32Q BtEFwdGdYy7Z7UwJ4d8e/CQRf4wszH30phd7xIrU1LEJ/hrfnwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEv2eoVeGsitJcWWdBFbBIkpSN4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2OGY0YzYtOGI3Ni0z NzQ0LTk5YmYtYTBjNWI0YjM4ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujqgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUUUVXz7nJNwjGNo5AS2CGWxu1/1tEIe1xrUyKY26sv+tfP0p39PW JyiwIudnTYroUnvy0DEwi5m3Al4Q5nz5Rka1n0JYiXyigwyLtW07GBhM1mVFX6L2 Wl0cik0j55EcDdlTMdd7p5rh5cmgQCAcPssbtNLMaYgKeBzvaNm/nu4pXDk6niPT 9GWTvqIjjXqK16nX6d1ldg9eTtg2UBZ9mmhkZVlWvHZKx8KvRFLr9rxBuDE2+3NA NSNfU5nfrRGHTg24BKC56R6ZXypG+iYK4tLJkAUFLvksSJp4/jmM1EGR6+lLaabl 0U/edbtiCO1puBj9e9h8BLOD7C+y/IILGA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:01 2026 by rpki-client