$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa File: 11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa (raw, json) Hash identifier: 33fBY43CvTSQi/I9gQB9OLI4yg1kIZnLaMjO8Rqa3Fc= Subject key identifier: 89:C2:29:EB:72:71:E5:08:29:7A:D1:9C:D8:C1:98:8F:45:85:D5:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE5268A18BC99FD4E34700 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8e:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:52:68:a1:8b:c9:9f:d4:e3:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a69dfb35-c7be-4e5d-a910-31c9db2e52e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:31:1c:5b:99:9f:bb:bb:8a:f7:72:7d:0d: 25:dd:71:ce:f5:e7:dc:87:2b:a8:3b:ec:39:2c:ec: 0d:11:14:87:26:fe:50:a8:5e:19:fa:c2:63:c8:a0: 61:98:8b:cd:87:52:d9:d6:41:7c:e6:12:39:bd:70: 49:d6:22:ec:03:e6:31:7e:af:4f:44:8b:12:3e:56: 3c:42:d1:48:22:73:18:8a:47:49:2e:e3:14:a8:13: bb:45:6b:92:77:9e:e2:63:95:31:8f:81:6f:25:0e: 18:5b:13:1c:c3:37:8c:88:39:a9:27:72:ed:e8:6a: b1:32:fd:53:55:d5:2d:0a:2e:21:70:2c:c8:64:e0: 0c:73:c0:02:a4:5a:b6:ca:d9:dc:98:1f:b2:43:af: db:6e:dc:ef:95:3b:33:e7:e7:3c:41:fe:ce:ae:0f: 23:ce:b8:d1:f1:c9:76:cf:c5:7d:66:dc:53:a3:5a: 7e:59:d8:9d:bf:2b:fc:ce:0b:3e:45:9c:4a:96:13: 86:7e:e4:c6:2f:6c:52:ea:1c:de:cc:9b:c3:3c:e5: 46:62:a7:02:cf:42:e2:b9:1e:16:24:d0:43:c3:70: 40:88:28:7d:e8:c8:45:bc:1a:bd:ee:f7:e7:47:44: 60:c8:a1:0f:5d:dd:0e:3a:9c:9d:e9:70:3f:bc:f1: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C2:29:EB:72:71:E5:08:29:7A:D1:9C:D8:C1:98:8F:45:85:D5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11f3a5ba-88d1-3212-b2be-cc8b4d14e41c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:92:bf:55:30:d6:86:d6:3e:e3:86:17:40:5c:08:a3:3b:b4: f4:25:8b:fb:12:0c:8d:0d:14:cb:63:e5:4e:e5:82:b5:89:92: 00:60:85:54:b8:ef:69:39:7f:66:92:3d:42:b2:87:0f:08:40: 66:79:35:5d:b8:11:ae:18:8d:3a:dd:ef:91:33:cc:3c:09:ee: 33:9e:27:4b:33:f3:22:c1:17:78:7b:48:45:e6:74:7a:c9:2e: fc:63:f0:0c:02:ad:0c:b5:c9:eb:68:7e:0f:b7:e2:c0:69:63: 18:3f:e0:e2:00:7c:02:06:30:36:d2:6e:9d:51:e0:7c:72:08: b5:3d:77:d9:b2:23:6a:03:cb:71:eb:e6:11:65:d2:ca:9c:b5: 32:e4:ea:c9:b8:20:61:d3:45:89:8d:b1:46:12:ea:7a:b1:0e: f0:80:02:07:ce:9c:e5:ba:c0:35:61:bf:32:e2:df:32:de:5c: 96:dc:ee:a1:96:ab:8a:66:ef:b6:41:25:c3:ae:1b:0e:84:21: cb:f9:6a:0c:7b:93:0d:50:f5:4e:bc:19:c9:63:42:e0:e8:af: 8e:92:7b:b3:0c:72:b9:b2:40:a1:d9:5f:9e:c1:89:7d:f3:a2: eb:8c:5e:11:93:39:b2:e3:5e:79:b1:49:e0:da:de:c3:a1:68: 54:f4:76:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzlJooYvJn9TjRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTY5ZGZiMzUtYzdiZS00ZTVkLWE5MTAtMzFjOWRiMmU1MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi30xHFuZn7u7ivdyfQ0l3XHO9efchyuoO+w5 LOwNERSHJv5QqF4Z+sJjyKBhmIvNh1LZ1kF85hI5vXBJ1iLsA+Yxfq9PRIsSPlY8 QtFIInMYikdJLuMUqBO7RWuSd57iY5Uxj4FvJQ4YWxMcwzeMiDmpJ3Lt6GqxMv1T VdUtCi4hcCzIZOAMc8ACpFq2ytncmB+yQ6/bbtzvlTsz5+c8Qf7Org8jzrjR8cl2 z8V9ZtxTo1p+Wdidvyv8zgs+RZxKlhOGfuTGL2xS6hzezJvDPOVGYqcCz0LiuR4W JNBDw3BAiCh96MhFvBq97vfnR0RgyKEPXd0OOpyd6XA/vPG66wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFInCKetyceUIKXrRnNjBmI9FhdX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTFmM2E1YmEtODhkMS0z MjEyLWIyYmUtY2M4YjRkMTRlNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujnQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkpK/VTDWhtY+44YXQFwIozu09CWL+xIMjQ0Uy2PlTuWCtYmSAGCF VLjvaTl/ZpI9QrKHDwhAZnk1XbgRrhiNOt3vkTPMPAnuM54nSzPzIsEXeHtIReZ0 esku/GPwDAKtDLXJ62h+D7fiwGljGD/g4gB8AgYwNtJunVHgfHIItT132bIjagPL cevmEWXSypy1MuTqybggYdNFiY2xRhLqerEO8IACB86c5brANWG/MuLfMt5cltzu oZarimbvtkElw64bDoQhy/lqDHuTDVD1TrwZyWNC4OivjpJ7swxyubJAodlfnsGJ ffOi64xeEZM5suNeebFJ4Nrew6FoVPR2oQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:16:00 2025 by rpki-client