$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa File: 12658047-0b5e-3f8d-82da-f5c069fb24d8.roa (raw, json) Hash identifier: 0zZDyBW5V6KF0bK0gqDCeqbkvjU0nYW4odHPYFn3Ju8= Subject key identifier: 3B:BA:4C:74:99:83:12:A2:DF:4B:C3:A8:79:41:1A:24:69:30:85:A3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB45D4229C158E5C0FDC3FF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:4c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:42:29:c1:58:e5:c0:fd:c3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=a138e1f9-70de-4fb8-8151-9f63333d3dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:46:21:27:33:75:69:d2:8c:4b:9e:28:28: c3:b2:25:e0:39:51:33:74:0e:99:02:2c:90:99:6e: 80:6e:8d:cf:2f:51:41:bb:4d:d6:5b:73:3d:de:20: d5:3a:17:c4:d4:3f:47:26:0f:ef:b2:d2:5c:9e:3c: 52:10:39:60:9a:b1:6a:9f:c4:0d:07:31:6a:e2:d4: 05:bc:20:39:3f:97:41:c0:b2:b9:b8:14:ba:6b:de: 61:5c:6f:30:74:2b:2a:37:2a:be:57:1a:a0:56:a2: ba:b1:81:1b:c8:19:3f:d9:75:ae:43:ad:d8:b1:21: 0e:bd:97:f1:30:c9:3e:33:31:c5:d4:e1:18:9f:40: 89:2e:c1:ca:0d:ba:fe:01:dc:98:f6:ba:c4:68:f5: fb:06:8c:0a:3d:72:93:28:39:f3:b3:77:bb:c3:be: ee:ce:48:5c:b2:84:fb:ff:da:93:f8:2b:b3:fa:f4: a8:7e:d3:43:92:58:3b:c4:43:54:28:84:92:00:fd: 92:c4:e2:65:e1:d5:c8:95:e2:bf:da:5c:b0:aa:18: c7:30:6e:7b:8f:8d:d5:88:87:57:01:36:c5:7d:55: e5:1b:5d:0c:69:0b:3a:77:b3:05:06:7d:ec:4f:89: e0:40:c2:02:2b:25:2f:09:fb:10:5f:9b:1a:5a:09: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BA:4C:74:99:83:12:A2:DF:4B:C3:A8:79:41:1A:24:69:30:85:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/12658047-0b5e-3f8d-82da-f5c069fb24d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:4c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:37:fe:84:ea:fd:ae:05:19:32:a7:51:02:5c:45:0e:5a:11: dd:3b:2f:95:be:9e:1e:a1:ae:0f:70:c0:1a:9b:94:a8:9d:08: 44:af:4e:ab:54:7a:e7:63:1e:e9:9c:23:f7:55:55:14:b2:35: 24:d1:8d:5c:1b:10:1b:a0:9b:66:2c:cc:35:5d:e2:1f:68:f6: b9:a4:40:a0:8e:d3:9c:88:d0:a9:ca:3e:aa:41:eb:b0:f6:be: b4:8c:75:db:64:5b:4f:4e:f7:f0:a7:ab:33:fc:5b:de:31:eb: e0:a0:d1:0d:4e:02:e3:28:87:7a:71:8c:9c:90:60:0b:96:f4: a7:af:88:0c:13:76:b8:3e:4e:6a:18:ec:69:55:91:a2:9f:66: 83:49:64:ef:1b:5b:12:d2:95:99:97:e3:94:26:43:3b:76:6e: 91:b4:25:b6:09:9d:be:38:f4:bf:f4:ea:18:5c:72:1a:94:ac: de:63:b2:16:5b:9a:bf:54:7c:96:09:2b:f3:d3:a5:10:d8:29: 47:2c:b0:27:01:cb:86:2c:98:05:1a:0d:10:3d:8d:63:8c:1f: 37:9f:6f:d8:3a:7a:8c:ad:e5:92:2a:36:80:cf:94:d9:41:3d: 1b:56:d2:95:cb:53:ff:42:ae:1f:90:33:f0:c7:89:35:30:a3: c1:e9:25:44 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XUIpwVjlwP3D/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YTEzOGUxZjktNzBkZS00ZmI4LTgxNTEtOWY2MzMzM2QzZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGtGISczdWnSjEueKCjDsiXgOVEzdA6ZAiyQ mW6Abo3PL1FBu03WW3M93iDVOhfE1D9HJg/vstJcnjxSEDlgmrFqn8QNBzFq4tQF vCA5P5dBwLK5uBS6a95hXG8wdCsqNyq+VxqgVqK6sYEbyBk/2XWuQ63YsSEOvZfx MMk+MzHF1OEYn0CJLsHKDbr+AdyY9rrEaPX7BowKPXKTKDnzs3e7w77uzkhcsoT7 /9qT+Cuz+vSoftNDklg7xENUKISSAP2SxOJl4dXIleK/2lywqhjHMG57j43ViIdX ATbFfVXlG10MaQs6d7MFBn3sT4ngQMICKyUvCfsQX5saWglVdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDu6THSZgxKi30vDqHlBGiRpMIWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTI2NTgwNDctMGI1ZS0z ZjhkLTgyZGEtZjVjMDY5ZmIyNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujkww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKDf+hOr9rgUZMqdRAlxFDloR3Tsvlb6eHqGuD3DAGpuUqJ0IRK9O q1R652Me6Zwj91VVFLI1JNGNXBsQG6CbZizMNV3iH2j2uaRAoI7TnIjQqco+qkHr sPa+tIx122RbT0738KerM/xb3jHr4KDRDU4C4yiHenGMnJBgC5b0p6+IDBN2uD5O ahjsaVWRop9mg0lk7xtbEtKVmZfjlCZDO3ZukbQltgmdvjj0v/TqGFxyGpSs3mOy Fluav1R8lgkr89OlENgpRyywJwHLhiyYBRoNED2NY4wfN59v2Dp6jK3lkio2gM+U 2UE9G1bSlctT/0KuH5Az8MeJNTCjweklRA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:01 2025 by rpki-client