$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa File: fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa (raw, json) Hash identifier: M+o4mp5uv3Gigu9Z2jAjT4BhXcnD4ZhTKKv1wtNbpTc= Subject key identifier: 21:E3:0E:D1:E9:E1:36:36:EF:23:06:37:88:4D:E9:D6:57:E2:A4:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C9536D1E0E256B8028A1F1E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 30036 IP address blocks: 2604:2e8d:5c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:d1:e0:e2:56:b8:02:8a:1f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=628870fb-eaa1-4eeb-87f1-815cbc8a71c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:12:86:8b:11:b5:bf:2d:d1:27:0c:08:d4: 4f:3f:8b:98:a1:07:9f:a6:f4:64:96:6a:fc:c3:d5: f1:e0:91:f4:f5:a8:84:3a:19:dd:cf:aa:6d:9f:1c: 12:bc:cc:5d:5c:f6:f2:ba:bf:64:94:ae:46:31:45: 63:7b:1c:dc:05:79:d8:a6:a3:7a:c4:0f:da:0a:92: fb:73:14:4e:69:9c:ef:5a:12:1a:c5:12:91:00:c2: 65:d4:7d:1c:99:dd:58:32:09:f9:29:34:d7:6a:e1: e3:ce:40:ac:a8:23:7b:72:93:b0:e3:bb:af:f1:d8: 3d:7e:c7:f3:cb:89:f5:4d:4b:78:d3:bc:96:15:87: cf:14:41:1b:8d:9d:9e:85:d7:7b:cf:07:9c:32:2c: a0:ac:4f:32:15:c1:93:ef:87:db:07:55:4c:43:2b: 4e:e1:d2:6a:65:b3:5b:7c:b7:a5:a2:d9:c5:1d:ac: 91:e5:6f:44:5e:9c:ac:96:da:cc:67:47:b8:f3:ae: 0a:37:a9:24:46:b9:eb:ce:02:44:a5:81:09:25:ba: 1d:11:cc:52:16:b5:00:d1:84:3e:3d:34:8c:d3:4f: 68:63:35:34:77:f4:10:24:71:01:38:0d:a0:d0:d0: 6c:05:f2:09:30:7a:fd:0e:00:48:11:3e:62:1c:a3: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E3:0E:D1:E9:E1:36:36:EF:23:06:37:88:4D:E9:D6:57:E2:A4:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fc3505c0-c0de-3986-bcf9-0c7042d5af9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:5c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:11:95:00:00:c0:c7:0c:10:ad:97:e2:f1:48:c7:b0:b3:52: 41:95:a1:ed:e5:85:5c:b8:a3:6b:ad:44:6f:1c:5d:af:96:52: 8e:56:9c:b5:bd:62:59:d8:35:cc:c3:c1:a0:46:da:86:9c:24: c3:dc:1a:10:b5:e6:af:d0:63:27:0b:ed:f9:ce:72:08:06:45: 96:b6:94:96:81:ce:f7:73:23:d3:12:f0:fc:83:73:78:22:c3: 7f:62:64:22:fc:88:33:72:e3:ad:08:e7:e0:77:c1:39:98:79: 34:3e:e3:31:b5:31:47:50:f2:3e:3b:70:85:58:9e:80:c6:7b: df:db:de:7f:c0:bd:58:94:1a:67:61:21:85:66:16:1d:cd:05: f8:4b:93:b9:ae:e8:76:22:43:7f:f8:dd:86:8e:9c:8d:98:3f: f3:93:0a:3d:2c:ba:f2:b9:4f:94:ed:fe:2f:5c:da:00:95:29: 67:e3:7c:cc:34:f7:5a:54:9d:af:a0:34:06:67:73:e3:5b:5c: 2a:e8:38:d5:7b:5d:19:07:a4:36:6c:86:8a:2c:11:f7:30:bd: e7:33:c7:fe:e7:68:15:73:bc:3b:1b:4d:bf:af:88:38:c8:d0: 29:3c:64:d9:07:7a:a4:68:2e:bf:1e:53:87:07:e4:7e:f0:9a: c1:63:b5:81 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyVNtHg4la4AoofHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk NjI4ODcwZmItZWFhMS00ZWViLTg3ZjEtODE1Y2JjOGE3MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPUShosRtb8t0ScMCNRPP4uYoQefpvRklmr8 w9Xx4JH09aiEOhndz6ptnxwSvMxdXPbyur9klK5GMUVjexzcBXnYpqN6xA/aCpL7 cxROaZzvWhIaxRKRAMJl1H0cmd1YMgn5KTTXauHjzkCsqCN7cpOw47uv8dg9fsfz y4n1TUt407yWFYfPFEEbjZ2ehdd7zwecMiygrE8yFcGT74fbB1VMQytO4dJqZbNb fLelotnFHayR5W9EXpysltrMZ0e4864KN6kkRrnrzgJEpYEJJbodEcxSFrUA0YQ+ PTSM009oYzU0d/QQJHEBOA2g0NBsBfIJMHr9DgBIET5iHKM1EQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCHjDtHp4TY27yMGN4hN6dZX4qQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmMzNTA1YzAtYzBkZS0z OTg2LWJjZjktMGM3MDQyZDVhZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujVww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcRGVAADAxwwQrZfi8UjHsLNSQZWh7eWFXLija61Ebxxdr5ZSjlac tb1iWdg1zMPBoEbahpwkw9waELXmr9BjJwvt+c5yCAZFlraUloHO93Mj0xLw/INz eCLDf2JkIvyIM3LjrQjn4HfBOZh5ND7jMbUxR1DyPjtwhViegMZ739vef8C9WJQa Z2EhhWYWHc0F+EuTua7odiJDf/jdho6cjZg/85MKPSy68rlPlO3+L1zaAJUpZ+N8 zDT3WlSdr6A0Bmdz41tcKug41XtdGQekNmyGiiwR9zC95zPH/udoFXO8OxtNv6+I OMjQKTxk2Qd6pGguvx5ThwfkfvCawWO1gQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:58 2026 by rpki-client