$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa File: e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa (raw, json) Hash identifier: SUQWziJxoRd8XwgvGzchBIR3oJ0FjcuriaiSyNRH7DA= Subject key identifier: 59:1A:D9:40:22:F3:D3:51:D9:1E:16:D1:46:AD:C9:C0:C9:65:B3:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D75D52200F87267F014D22680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8c:6c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:22:00:f8:72:67:f0:14:d2:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=37887007-a288-45f7-a741-d7ebd89278ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:d6:94:c7:30:c4:65:2f:f6:41:78:e5:08: 3d:af:6e:dd:0f:54:61:bf:67:a5:74:d1:9a:50:d7: 44:15:7a:8c:23:0d:67:6c:a2:c9:e3:54:eb:f9:7f: ad:9a:3b:20:b3:68:d1:09:ff:3a:91:fe:32:7b:07: 04:eb:5b:1b:54:af:10:36:47:8c:e6:82:5e:d2:47: 2f:93:e4:98:6f:3a:e3:cc:12:34:fa:a4:54:25:74: 48:6d:ff:f0:82:dc:52:4b:45:10:42:73:ae:71:cc: 09:6b:36:9f:c9:b5:3f:24:25:bc:4f:bb:25:84:24: 21:89:c5:40:3f:0b:5c:8e:ba:30:9c:7c:46:3a:51: e4:62:2b:d0:07:e5:95:08:b4:d1:cc:c0:58:91:9d: ee:7c:f6:0c:6a:05:32:8b:72:bc:ec:a1:c2:8a:eb: a2:6c:49:c7:ec:c1:e4:bd:b2:41:df:8b:c9:a7:1e: 2d:a6:f8:27:f3:70:76:a7:f6:3f:40:95:0b:6b:cc: 4b:71:f6:61:59:06:b5:73:e6:2d:a9:3b:33:c5:f4: 21:d2:11:8a:78:6a:c2:b2:79:78:c2:e0:8d:9d:0d: 3f:ba:eb:07:5a:fe:e4:9c:fd:45:39:f0:aa:46:21: 16:e1:44:31:fc:1d:97:1c:85:00:17:e4:9c:e2:34: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1A:D9:40:22:F3:D3:51:D9:1E:16:D1:46:AD:C9:C0:C9:65:B3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e021a8c1-a2f2-3405-8a35-c820fe596b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:6c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c0:20:bd:6f:bd:b4:8f:c4:fd:a8:08:b2:2e:32:97:ee:ee: a1:f4:13:e0:19:b1:99:c5:0a:60:09:78:91:49:14:6e:40:f8: cc:ff:90:ad:dd:a0:8e:f1:9f:51:8f:83:bb:7d:ad:81:b7:06: 29:48:cc:5e:bb:7b:df:59:c0:a0:fc:1e:57:90:f9:ea:93:fe: e7:f8:5c:62:07:eb:fd:ae:4b:87:4b:78:74:cc:20:1d:df:b8: ec:25:62:35:7a:7b:71:0c:9f:17:61:e8:49:dc:f1:e0:66:c6: ef:54:e0:43:29:fc:97:60:3c:3a:10:6c:0d:19:b4:81:06:e6: d6:ed:b4:83:cb:2c:3c:b9:96:d7:9d:e9:8b:e5:74:ca:77:21: b5:92:2b:dc:e1:71:17:6f:bd:a9:50:9f:78:a9:45:7e:3c:78: 41:a5:ee:c1:5f:6d:ff:ab:a7:ad:fb:51:5d:f4:28:9e:e3:75: 29:b6:41:21:fe:0c:68:13:c9:27:4a:41:f6:bb:14:17:30:f1: ee:b5:21:ab:47:b4:05:2b:f8:55:4f:2c:c6:77:78:18:9e:5b: b9:0f:57:00:73:91:fa:0d:62:99:e1:5d:49:ea:64:39:51:aa: b8:71:d8:fe:78:e3:70:92:d5:d9:64:c7:7e:26:dc:c5:35:ab: be:74:66:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE111SIA+HJn8BTSJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk Mzc4ODcwMDctYTI4OC00NWY3LWE3NDEtZDdlYmQ4OTI3OGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H3WlMcwxGUv9kF45Qg9r27dD1Rhv2eldNGa UNdEFXqMIw1nbKLJ41Tr+X+tmjsgs2jRCf86kf4yewcE61sbVK8QNkeM5oJe0kcv k+SYbzrjzBI0+qRUJXRIbf/wgtxSS0UQQnOuccwJazafybU/JCW8T7slhCQhicVA PwtcjrownHxGOlHkYivQB+WVCLTRzMBYkZ3ufPYMagUyi3K87KHCiuuibEnH7MHk vbJB34vJpx4tpvgn83B2p/Y/QJULa8xLcfZhWQa1c+YtqTszxfQh0hGKeGrCsnl4 wuCNnQ0/uusHWv7knP1FOfCqRiEW4UQx/B2XHIUAF+Sc4jTjyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFka2UAi89NR2R4W0UatycDJZbMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTAyMWE4YzEtYTJmMi0z NDA1LThhMzUtYzgyMGZlNTk2YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujGww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAosAgvW+9tI/E/agIsi4yl+7uofQT4BmxmcUKYAl4kUkUbkD4zP+Q rd2gjvGfUY+Du32tgbcGKUjMXrt731nAoPweV5D56pP+5/hcYgfr/a5Lh0t4dMwg Hd+47CViNXp7cQyfF2HoSdzx4GbG71TgQyn8l2A8OhBsDRm0gQbm1u20g8ssPLmW 153pi+V0ynchtZIr3OFxF2+9qVCfeKlFfjx4QaXuwV9t/6unrftRXfQonuN1KbZB If4MaBPJJ0pB9rsUFzDx7rUhq0e0BSv4VU8sxnd4GJ5buQ9XAHOR+g1imeFdSepk OVGquHHY/njjcJLV2WTHfibcxTWrvnRm0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:10 2026 by rpki-client