$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa File: d5af3607-fb29-3174-a269-a00e5d3a69cc.roa (raw, json) Hash identifier: ct5PxdpauR0FQGvxrWI5dOq5MhIQE8JGQu/pxR6xoME= Subject key identifier: 4A:A9:53:4D:5F:1C:F8:A5:EF:43:37:7A:72:3A:78:1B:02:6A:75:E7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584CB3EC6442D5FDE3ACC4713040 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 19905 IP address blocks: 2604:2e8f:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:64:42:d5:fd:e3:ac:c4:71:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=bf62fa2e-7428-477e-b032-1013b989349e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:27:4e:f9:e8:d6:94:6c:55:c5:e4:40:de: 6e:05:1f:7a:64:b6:d7:91:34:30:b4:ff:79:ac:fa: bd:9c:3f:5c:17:bc:97:2e:1b:a8:06:97:ee:08:38: d5:85:f4:78:2d:06:d4:18:c5:c6:b5:2b:d5:2b:72: 9d:23:97:0e:88:26:96:bf:1f:db:b0:5e:ca:60:a1: 0b:f5:d0:f7:dc:d9:23:26:03:f9:60:e4:17:23:52: 75:24:84:de:18:72:98:c4:b6:6e:63:f7:97:bd:e6: 4c:f0:36:4c:02:e7:39:e7:d7:0d:1c:0a:e0:0d:fb: da:58:33:b6:a6:43:15:49:3b:ce:ac:58:8a:2c:96: 8c:4f:7f:a5:7c:9b:9b:7e:cb:e2:ed:37:74:18:f9: 8a:7c:56:01:67:f9:bc:07:5b:8c:93:d9:3d:2f:e9: 41:be:20:97:9d:e3:f2:83:11:b6:f5:57:c6:37:e6: 34:17:05:86:f1:4e:3e:76:fa:a0:ea:96:f7:7b:fb: 9d:45:89:5d:e5:bc:61:7a:6c:b9:86:e4:85:a2:fb: 96:de:d8:0d:8d:c6:e1:c6:7b:c4:20:bd:54:f3:fe: d2:61:e1:8d:d6:99:94:39:fc:c5:1d:0d:18:a2:e6: 42:9e:15:ad:91:58:0f:b2:cd:12:b5:0b:9e:40:9a: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:53:4D:5F:1C:F8:A5:EF:43:37:7A:72:3A:78:1B:02:6A:75:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5af3607-fb29-3174-a269-a00e5d3a69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:99:9d:de:16:6b:33:bb:cd:b2:34:84:e2:8a:8a:7c:0f:4d: 4e:a2:e5:ae:6d:4a:d9:b1:8b:a6:e7:3c:92:58:8b:8e:15:1f: 22:23:18:73:1b:d6:dc:12:d1:64:f7:16:61:fc:12:74:1e:9f: 13:ec:09:a4:18:47:6d:aa:cd:ae:2f:6a:67:8e:d1:c7:70:2a: 67:a8:8f:22:09:1a:ab:6a:19:31:c5:2b:df:aa:65:0e:83:85: 78:14:07:6a:d3:a8:6b:42:b0:75:04:ff:24:1a:cd:ea:aa:c6: 93:86:8a:4f:ed:ad:58:61:71:d7:98:48:86:5e:22:9a:b7:90: e1:ef:81:d3:47:5d:ec:56:50:19:81:73:e4:f0:1b:55:aa:5c: 8c:f0:7a:30:7a:2b:d1:b9:47:39:a0:c9:73:f3:38:31:07:2a: d9:9c:e6:3b:58:28:a1:50:e3:49:2d:27:55:da:8d:69:c2:71: 5b:96:50:67:0e:ee:06:69:4e:b6:ef:3d:9d:11:97:68:ab:ff: 49:19:c4:bf:ee:3b:0d:51:9d:47:b8:1e:61:c5:6a:96:ab:b5: ec:0a:91:0f:7a:ea:c6:02:22:9e:df:5d:60:39:b1:51:66:a4: ef:7f:1d:e7:2a:1e:7d:ef:40:8f:9e:26:bd:27:8b:1f:cd:5c: 32:82:b5:fb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyz7GRC1f3jrMRxMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk YmY2MmZhMmUtNzQyOC00NzdlLWIwMzItMTAxM2I5ODkzNDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugAnTvno1pRsVcXkQN5uBR96ZLbXkTQwtP95 rPq9nD9cF7yXLhuoBpfuCDjVhfR4LQbUGMXGtSvVK3KdI5cOiCaWvx/bsF7KYKEL 9dD33NkjJgP5YOQXI1J1JITeGHKYxLZuY/eXveZM8DZMAuc559cNHArgDfvaWDO2 pkMVSTvOrFiKLJaMT3+lfJubfsvi7Td0GPmKfFYBZ/m8B1uMk9k9L+lBviCXnePy gxG29VfGN+Y0FwWG8U4+dvqg6pb3e/udRYld5bxhemy5huSFovuW3tgNjcbhxnvE IL1U8/7SYeGN1pmUOfzFHQ0YouZCnhWtkVgPss0StQueQJpn3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEqpU01fHPil70M3enI6eBsCanXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDVhZjM2MDctZmIyOS0z MTc0LWEyNjktYTAwZTVkM2E2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj8gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAL5md3hZrM7vNsjSE4oqKfA9NTqLlrm1K2bGLpuc8kliLjhUfIiMY cxvW3BLRZPcWYfwSdB6fE+wJpBhHbarNri9qZ47Rx3AqZ6iPIgkaq2oZMcUr36pl DoOFeBQHatOoa0KwdQT/JBrN6qrGk4aKT+2tWGFx15hIhl4imreQ4e+B00dd7FZQ GYFz5PAbVapcjPB6MHor0blHOaDJc/M4MQcq2ZzmO1gooVDjSS0nVdqNacJxW5ZQ Zw7uBmlOtu89nRGXaKv/SRnEv+47DVGdR7geYcVqlqu17AqRD3rqxgIint9dYDmx UWak738d5yoefe9Aj54mvSeLH81cMoK1+w== -----END CERTIFICATE-----Generated at Mon Mar 2 04:59:47 2026 by rpki-client