$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa File: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json) Hash identifier: vlnz2uQzhIgiLKyHcZ6C7ihKS5Eq2sEJVtbWd8zRlxo= Subject key identifier: B5:C9:5C:44:C1:36:37:16:CA:68:D8:F4:92:86:A8:13:0A:77:7B:35 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584CB2872A0D734C80A1A8E2D800 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 19528 IP address blocks: 2605:14c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2a:0d:73:4c:80:a1:a8:e2:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=929bebad-2a06-45b7-b5d0-dae26fd9150a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:49:7c:1f:07:85:8b:5a:e0:22:44:04:87:14: b2:ee:6c:3f:11:f0:ee:2a:24:62:66:4b:52:8d:77: 12:d8:e0:4e:9b:6b:03:07:e0:c5:6e:c1:ff:33:00: 0f:8d:5a:66:d9:73:f2:b1:4c:2d:5f:d4:19:ab:7d: e8:a4:88:c5:28:52:5e:19:be:89:5f:10:bc:58:15: bc:fd:6d:34:89:69:20:17:2b:68:82:63:8f:d8:7e: c2:02:75:0f:09:e2:95:aa:34:66:ca:11:4c:67:cd: 2d:25:97:22:a2:7a:36:42:0f:39:4f:75:d6:21:03: 42:c0:33:1e:c6:d5:e1:ff:0f:02:e1:6a:26:f3:58: 9c:0e:bf:3a:97:24:99:fb:a7:dd:82:0a:e6:3c:49: dd:96:6a:7e:1a:1c:3a:5d:ba:20:1b:71:d6:98:ae: 7d:e6:99:5a:c9:28:4e:ea:a4:66:93:7c:d6:35:d4: 28:67:a1:0f:21:da:a8:83:9b:db:0d:af:fd:95:25: f7:47:95:d6:6a:45:c6:a1:50:44:4f:1a:9a:2a:9b: 8b:98:d6:de:b8:af:9d:a8:41:db:01:43:d4:54:d6: f7:1f:cb:de:d7:5a:db:60:a5:66:77:05:87:96:88: 8e:99:dc:39:2c:6a:c9:7b:f0:06:d7:95:55:f4:63: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C9:5C:44:C1:36:37:16:CA:68:D8:F4:92:86:A8:13:0A:77:7B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv6: 2605:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f1:45:5e:6d:67:e5:31:82:a2:79:8d:e2:47:fe:83:8c:a3: a0:cd:e5:6d:6d:9f:19:6b:dc:1e:db:09:e7:37:e4:97:89:18: 43:08:ab:cf:26:bb:75:a4:09:37:74:8b:cf:eb:59:a2:85:83: 35:6d:75:a7:74:6b:64:53:38:c9:f3:29:5a:94:11:2c:c7:14: 7f:c7:dc:70:c5:96:29:94:a3:63:81:50:51:ec:81:38:9b:80: 7d:35:2e:2e:ca:a4:9d:a4:3f:66:cd:b4:20:a2:f4:50:57:04: 06:05:47:f7:78:9b:64:14:af:5d:a2:18:ce:f8:b8:33:c4:cd: 85:94:46:46:0e:7a:7c:c1:c8:64:eb:79:f4:d5:85:d5:49:00: ce:12:11:12:e1:83:5d:b1:88:21:0d:79:3d:ae:a3:33:94:cd: b8:40:5e:40:b7:87:5e:9d:d9:5e:39:a4:07:9c:55:2e:40:4e: cc:f0:cc:96:b2:10:e4:6b:95:6e:03:d5:4e:f9:5e:b0:50:4d: ea:35:82:92:15:ba:ed:85:d8:f9:18:9a:68:c3:2f:3b:d9:27: c5:89:41:fe:af:30:26:35:82:e5:85:b2:b1:3b:18:26:57:d8: 9a:28:6c:86:8a:00:9c:d9:50:79:b9:b4:b6:7a:19:9f:03:b6: 18:7c:dc:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyyhyoNc0yAoaji2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk OTI5YmViYWQtMmEwNi00NWI3LWI1ZDAtZGFlMjZmZDkxNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUl8HweFi1rgIkQEhxSy7mw/EfDuKiRiZktS jXcS2OBOm2sDB+DFbsH/MwAPjVpm2XPysUwtX9QZq33opIjFKFJeGb6JXxC8WBW8 /W00iWkgFytogmOP2H7CAnUPCeKVqjRmyhFMZ80tJZciono2Qg85T3XWIQNCwDMe xtXh/w8C4Wom81icDr86lySZ+6fdggrmPEndlmp+Ghw6XbogG3HWmK595playShO 6qRmk3zWNdQoZ6EPIdqog5vbDa/9lSX3R5XWakXGoVBETxqaKpuLmNbeuK+dqEHb AUPUVNb3H8ve11rbYKVmdwWHloiOmdw5LGrJe/AG15VV9GN9aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLXJXETBNjcWymjY9JKGqBMKd3s1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvM2EyZDcyNzQtNDIzNi0z MGJkLTk2NTQtZDlhYjlkZmQzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM8UVebWflMYKieY3iR/6DjKOgzeVtbZ8Za9we2wnnN+SXiRhDCKvP Jrt1pAk3dIvP61mihYM1bXWndGtkUzjJ8ylalBEsxxR/x9xwxZYplKNjgVBR7IE4 m4B9NS4uyqSdpD9mzbQgovRQVwQGBUf3eJtkFK9dohjO+LgzxM2FlEZGDnp8wchk 63n01YXVSQDOEhES4YNdsYghDXk9rqMzlM24QF5At4dendleOaQHnFUuQE7M8MyW shDka5VuA9VO+V6wUE3qNYKSFbrthdj5GJpowy872SfFiUH+rzAmNYLlhbKxOxgm V9iaKGyGigCc2VB5ubS2ehmfA7YYfNyj -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:24 2026 by rpki-client