$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0abb4de3-0ab4-35ef-a483-a139b9dfa39e.roa File: 0abb4de3-0ab4-35ef-a483-a139b9dfa39e.roa (raw, json) Hash identifier: 5G1JE9a/OSSg7gzEozpgGg/zYAk9PiN0giO6JRKrh38= Subject key identifier: 34:5B:3D:93:03:DD:D2:F0:EA:A8:70:80:31:87:1E:AB:1D:23:3F:86 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BAF3E25265FA2F172BC547CE0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0abb4de3-0ab4-35ef-a483-a139b9dfa39e.roa Signing time: Wed 29 Oct 2025 16:59:23 +0000 ROA not before: Wed 29 Oct 2025 16:59:23 +0000 ROA not after: Tue 27 Jan 2026 17:59:23 +0000 asID: 19905 IP address blocks: 2604:2e8f:a000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:3e:25:26:5f:a2:f1:72:bc:54:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 29 16:59:23 2025 GMT Not After : Jan 27 17:59:23 2026 GMT Subject: CN=ea0aa1ee-af45-451d-92a8-23c94c951e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:0d:28:30:ef:bc:90:40:c3:2c:63:a0:ec: 86:b1:11:93:98:75:55:c4:b3:ec:4f:49:bb:58:dc: b0:df:5e:77:07:c6:bd:b3:b8:89:c5:39:bf:df:48: aa:fc:7e:a9:e5:fc:a3:35:f7:da:60:c7:73:67:c1: 9b:9d:af:ed:00:40:2a:50:00:6c:00:63:9a:81:e1: 8b:fc:a3:bd:a9:69:f4:cd:ac:4a:09:d3:74:31:24: 41:6c:8e:11:1c:5d:09:b2:d9:df:fa:6f:60:b9:61: 7c:0d:ee:dd:03:21:5b:8e:2a:d0:b4:12:eb:72:4a: 48:88:79:55:93:13:97:3b:bf:a8:e6:4d:97:31:6e: d4:e6:c3:f2:01:3e:73:17:dc:5d:4c:7b:f7:a8:13: 84:b7:2e:08:18:53:c6:f5:42:88:82:d1:0f:b7:b6: 83:e4:6b:55:54:0b:7d:51:1c:f7:63:c7:69:6e:8d: 5f:e2:e5:ce:fe:2a:e1:19:6d:99:fa:66:83:c0:e6: 4c:26:36:b1:34:96:ef:37:0b:d8:c8:29:7e:b3:7d: 67:cf:67:2b:7d:03:dc:d5:b6:89:b4:7a:83:d4:af: 84:c3:ae:48:70:9a:4c:13:40:cf:82:31:21:42:c5: 89:dc:89:db:88:42:93:16:88:1c:b7:3f:4b:7a:3a: 5b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:3D:93:03:DD:D2:F0:EA:A8:70:80:31:87:1E:AB:1D:23:3F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0abb4de3-0ab4-35ef-a483-a139b9dfa39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:a000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:57:1f:4a:b2:d2:33:3c:d3:e9:78:d2:b1:01:da:6c:5b:bc: 5b:07:53:f5:3d:6f:1b:c3:12:36:5d:5b:f9:9e:09:f0:32:51: e5:7f:e9:9c:d4:bf:9d:f5:a0:34:ff:e8:30:e9:f8:bf:66:53: 6f:7b:4f:6b:49:a3:49:6f:71:2a:5e:f0:9b:0e:ca:75:ec:15: 2d:87:f9:6a:27:cf:db:ee:28:f1:20:1d:46:34:db:94:84:ca: 7c:f3:17:ea:c1:c7:1f:bf:6d:20:89:4e:d1:18:ac:97:db:1c: a5:78:cd:1a:7d:16:d6:28:af:a3:cf:28:0f:5b:52:19:5c:ea: c8:52:d0:b6:87:9e:4a:51:51:5b:49:e8:0d:7b:f9:61:ce:f4: b0:c2:98:61:4a:d9:8a:45:91:74:f0:79:6f:68:ac:a2:8f:8d: 40:71:58:80:cf:5b:69:8c:4f:1c:bf:ab:04:ae:a4:30:56:49: 94:3a:53:12:7b:c6:d3:1b:75:61:79:51:09:df:03:a7:11:5e: 83:11:6a:40:2f:6d:9c:6c:14:af:e4:e3:bd:98:40:3b:e5:cc: b5:92:87:2b:68:a6:1f:44:e2:7e:73:3b:56:09:7f:61:f3:a8: 30:1c:e6:99:7f:55:a7:f5:fd:f1:4e:65:aa:7a:06:9c:93:00: 18:6d:cf:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuvPiUmX6LxcrxUfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyOTE2NTkyM1oXDTI2MDEyNzE3NTkyM1owLzEtMCsGA1UEAxMk ZWEwYWExZWUtYWY0NS00NTFkLTkyYTgtMjNjOTRjOTUxZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinINKDDvvJBAwyxjoOyGsRGTmHVVxLPsT0m7 WNyw3153B8a9s7iJxTm/30iq/H6p5fyjNffaYMdzZ8Gbna/tAEAqUABsAGOageGL /KO9qWn0zaxKCdN0MSRBbI4RHF0Jstnf+m9guWF8De7dAyFbjirQtBLrckpIiHlV kxOXO7+o5k2XMW7U5sPyAT5zF9xdTHv3qBOEty4IGFPG9UKIgtEPt7aD5GtVVAt9 URz3Y8dpbo1f4uXO/irhGW2Z+maDwOZMJjaxNJbvNwvYyCl+s31nz2crfQPc1baJ tHqD1K+Ew65IcJpME0DPgjEhQsWJ3InbiEKTFogctz9LejpbPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDRbPZMD3dLw6qhwgDGHHqsdIz+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGFiYjRkZTMtMGFiNC0z NWVmLWE0ODMtYTEzOWI5ZGZhMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj6Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVVcfSrLSMzzT6XjSsQHabFu8WwdT9T1vG8MSNl1b+Z4J8DJR5X/p nNS/nfWgNP/oMOn4v2ZTb3tPa0mjSW9xKl7wmw7KdewVLYf5aifP2+4o8SAdRjTb lITKfPMX6sHHH79tIIlO0Risl9scpXjNGn0W1iivo88oD1tSGVzqyFLQtoeeSlFR W0noDXv5Yc70sMKYYUrZikWRdPB5b2isoo+NQHFYgM9baYxPHL+rBK6kMFZJlDpT EnvG0xt1YXlRCd8DpxFegxFqQC9tnGwUr+TjvZhAO+XMtZKHK2imH0TifnM7Vgl/ YfOoMBzmmX9Vp/X98U5lqnoGnJMAGG3Pug== -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:25 2025 by rpki-client