$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa File: c37c3f8a-b3df-3062-8f89-06b362e16716.roa (raw, json) Hash identifier: l9R/MTin9aDjKyQ+XcLsXvUUOfj+MbhLOTonA2zT/RY= Subject key identifier: 6E:A5:97:43:C2:F2:92:E4:E6:AA:18:69:B9:F3:CF:62:15:03:2B:96 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C45A825A90E21A434B6E8DB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:25:a9:0e:21:a4:34:b6:e8:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=28412c10-7432-4e3d-8c0e-e9b1104c8629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:1c:11:e1:99:ab:2b:33:5e:a0:2f:35:8d: aa:2b:10:3d:36:4e:c2:5f:bb:47:8e:63:60:19:c7: d6:51:5c:00:5d:ed:23:76:4a:ab:d8:8f:de:b7:bc: e5:93:a4:1b:f3:58:20:2b:7a:3b:44:cf:5d:a2:b7: b9:7f:24:1c:bd:5c:7b:b8:e4:b1:57:6d:d8:05:24: ad:0e:30:55:af:79:67:10:aa:b2:4c:54:75:95:38: f3:81:e5:95:e5:09:a6:0e:14:02:7e:99:90:ce:6f: 18:08:78:2f:d2:2a:0b:a0:61:da:76:05:0b:d0:5e: 1a:0e:a7:b6:88:71:f2:71:f3:62:d1:4d:20:30:c5: 52:91:2f:92:9c:ae:f1:b0:cc:96:5e:69:dc:4d:8c: d6:ab:9d:85:69:d4:75:5e:cc:8b:ef:c8:51:3a:bd: 74:51:15:16:b0:d4:1f:40:55:83:95:e1:c1:2e:a0: f0:50:70:11:a8:47:c6:59:fd:0e:c3:81:f0:ff:97: 0f:cc:c3:a3:c0:f6:e1:0f:e6:a2:01:3d:4d:9c:fd: 01:c0:4c:53:7f:d5:f9:a4:cd:66:ad:d9:b7:f3:36: 1a:09:8b:e7:6b:67:6a:15:7a:45:a9:6a:ab:62:b9: df:b1:72:c9:37:13:ca:07:e9:11:86:76:42:98:1b: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A5:97:43:C2:F2:92:E4:E6:AA:18:69:B9:F3:CF:62:15:03:2B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c37c3f8a-b3df-3062-8f89-06b362e16716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4d:e0:5c:3a:59:9f:33:d9:e7:35:6e:42:9a:f2:41:2b:93: 16:3c:7a:0d:37:4c:8f:3a:24:ed:c3:aa:f9:37:d1:b5:e0:55: 85:98:c1:9e:9a:ab:6e:9d:d8:d2:ef:22:fd:4c:7a:74:20:08: f5:21:0e:7a:27:6d:a9:c3:f1:b8:1b:d2:2c:cd:d7:5b:82:0c: 6b:27:4c:93:52:9c:5f:19:2f:b8:c1:32:70:af:d8:4e:27:db: cd:53:23:9e:70:e7:c7:d0:5c:27:a4:6d:2b:bc:b4:ae:93:7e: 3d:79:8e:d6:eb:b8:7b:70:65:be:f7:5e:17:18:b1:c3:c7:7c: ef:12:d9:a6:00:71:f3:58:4a:7b:a0:37:75:d1:4a:14:9a:49: f8:a1:ef:50:e1:7a:65:7c:99:08:c0:5c:de:92:e7:07:6e:45: 2f:88:bb:8d:8c:dd:ae:ec:e1:b1:08:92:41:e4:b6:4b:21:2f: cc:ac:89:7b:42:01:d2:29:ac:c5:b1:33:eb:34:76:21:7f:2b: 4b:33:50:ba:30:46:16:29:37:79:fc:d0:00:e6:89:81:cf:51: 92:83:44:94:2f:3c:20:76:c4:ef:3e:42:ec:bb:2e:07:89:02: f1:14:6c:d4:a6:f0:cf:6f:dc:c6:59:ab:ae:78:ee:b8:32:5e: bf:1d:23:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExFqCWpDiGkNLbo2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Mjg0MTJjMTAtNzQzMi00ZTNkLThjMGUtZTliMTEwNGM4NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHMcEeGZqyszXqAvNY2qKxA9Nk7CX7tHjmNg GcfWUVwAXe0jdkqr2I/et7zlk6Qb81ggK3o7RM9dore5fyQcvVx7uOSxV23YBSSt DjBVr3lnEKqyTFR1lTjzgeWV5QmmDhQCfpmQzm8YCHgv0ioLoGHadgUL0F4aDqe2 iHHycfNi0U0gMMVSkS+SnK7xsMyWXmncTYzWq52FadR1XsyL78hROr10URUWsNQf QFWDleHBLqDwUHARqEfGWf0Ow4Hw/5cPzMOjwPbhD+aiAT1NnP0BwExTf9X5pM1m rdm38zYaCYvna2dqFXpFqWqrYrnfsXLJNxPKB+kRhnZCmBuo7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG6ll0PC8pLk5qoYabnzz2IVAyuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzM3YzNmOGEtYjNkZi0z MDYyLThmODktMDZiMzYyZTE2NzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujoAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAN03gXDpZnzPZ5zVuQpryQSuTFjx6DTdMjzok7cOq+TfRteBVhZjB npqrbp3Y0u8i/Ux6dCAI9SEOeidtqcPxuBvSLM3XW4IMaydMk1KcXxkvuMEycK/Y TifbzVMjnnDnx9BcJ6RtK7y0rpN+PXmO1uu4e3BlvvdeFxixw8d87xLZpgBx81hK e6A3ddFKFJpJ+KHvUOF6ZXyZCMBc3pLnB25FL4i7jYzdruzhsQiSQeS2SyEvzKyJ e0IB0imsxbEz6zR2IX8rSzNQujBGFik3efzQAOaJgc9RkoNElC88IHbE7z5C7Lsu B4kC8RRs1Kbwz2/cxlmrrnjuuDJevx0jTA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:44 2026 by rpki-client