$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1852d533-3f12-38cc-932c-d15f20b9ac5f.roa File: 1852d533-3f12-38cc-932c-d15f20b9ac5f.roa (raw, json) Hash identifier: 3o1JGkbqm9L9wBwPfBvXFjDB1JeSJFZ7lpaPU0W4cHg= Subject key identifier: 5A:E7:24:11:BA:87:8B:8A:E9:BC:60:80:DA:99:58:C8:6B:07:D8:99 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6797329F360DE4D21E0A4C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1852d533-3f12-38cc-932c-d15f20b9ac5f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e8b:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:32:9f:36:0d:e4:d2:1e:0a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dc6a1d1b-1d15-4fa4-aa87-4a4347545f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:e5:45:34:d8:a1:95:a8:79:a8:b7:7f:a9: 7d:01:b0:a2:d0:78:9e:c5:b2:30:a7:46:41:07:40: 49:64:cb:79:73:f3:d3:da:18:dc:93:d1:69:10:94: c9:f4:cd:7b:9a:28:0c:bd:33:23:cd:93:3b:16:6f: 19:cc:51:78:70:8f:53:5e:21:1e:95:a9:af:e2:57: c8:30:fb:f7:45:9b:93:44:0c:f1:62:5a:31:d0:ed: 35:21:54:61:46:27:aa:85:60:34:71:ff:73:27:45: c7:96:a3:bc:2b:20:c5:f7:ee:27:2a:53:0c:74:2e: be:10:4f:24:19:42:5a:26:c7:a5:ad:6f:e0:ef:b5: c8:f5:e7:d4:5d:ec:eb:57:21:55:4d:35:09:c9:d6: 89:b1:82:66:ee:14:f4:a7:ea:f1:68:62:29:2c:e2: 72:10:6e:9d:34:97:95:75:f2:6b:4f:f2:04:3d:9b: f9:45:3e:c2:f0:06:0b:43:65:9e:aa:51:ba:26:80: 62:35:8b:27:12:e3:ea:26:95:e0:69:99:88:cc:2a: 4c:c6:53:40:5e:3c:b5:c3:11:40:3b:38:0c:41:22: e9:57:42:cc:41:a3:07:97:66:36:13:e6:85:d8:43: c6:72:27:68:fa:a8:6d:eb:38:d4:63:b4:a1:ec:60: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E7:24:11:BA:87:8B:8A:E9:BC:60:80:DA:99:58:C8:6B:07:D8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1852d533-3f12-38cc-932c-d15f20b9ac5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1d:6c:dd:b1:0b:40:10:38:c9:ca:54:8a:52:85:97:92:e4: 1e:74:96:05:c3:70:5e:03:bd:95:71:d2:2b:eb:d8:05:21:a0: 7f:7f:82:d1:fa:6f:6e:e2:35:17:32:6a:dd:5c:96:2a:53:65: e5:5d:e3:71:a3:ae:84:77:57:13:d0:72:f6:a8:60:2e:10:53: de:a4:95:30:7e:66:4e:17:2d:40:e0:f3:57:d3:82:8b:97:9a: c4:a4:48:e9:09:93:85:46:f5:d0:a3:f1:66:ca:cc:06:47:c9: cd:da:fa:0d:8f:eb:2e:e1:2c:5d:72:c2:38:44:df:20:17:76: 0f:99:f0:c1:76:43:26:87:46:a6:5d:65:b7:8c:6e:00:27:fc: d2:45:30:12:3e:9b:a4:2b:74:e1:a5:e4:7e:71:0a:11:e6:7b: 48:4f:ba:8a:c5:46:16:e2:47:75:8b:8c:af:bb:eb:7d:96:76: 26:e3:19:74:14:48:20:8e:e5:fc:92:fb:44:0e:aa:1e:10:78: c2:d2:6c:6d:73:3a:2c:d4:4c:eb:30:bd:88:44:7c:0a:42:ef: 7c:71:90:07:9a:38:92:43:26:c2:47:82:3a:5c:bb:31:2c:4d: e2:1d:b4:02:24:bf:96:b4:3e:85:1e:1d:04:76:cc:8e:d7:cf: c1:c2:14:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtnlzKfNg3k0h4KTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGM2YTFkMWItMWQxNS00ZmE0LWFhODctNGE0MzQ3NTQ1ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyflRTTYoZWoeai3f6l9AbCi0HiexbIwp0ZB B0BJZMt5c/PT2hjck9FpEJTJ9M17migMvTMjzZM7Fm8ZzFF4cI9TXiEelamv4lfI MPv3RZuTRAzxYlox0O01IVRhRieqhWA0cf9zJ0XHlqO8KyDF9+4nKlMMdC6+EE8k GUJaJselrW/g77XI9efUXezrVyFVTTUJydaJsYJm7hT0p+rxaGIpLOJyEG6dNJeV dfJrT/IEPZv5RT7C8AYLQ2WeqlG6JoBiNYsnEuPqJpXgaZmIzCpMxlNAXjy1wxFA OzgMQSLpV0LMQaMHl2Y2E+aF2EPGcido+qht6zjUY7Sh7GC8jwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFrnJBG6h4uK6bxggNqZWMhrB9iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTg1MmQ1MzMtM2YxMi0z OGNjLTkzMmMtZDE1ZjIwYjlhYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuixQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYx1s3bELQBA4ycpUilKFl5LkHnSWBcNwXgO9lXHSK+vYBSGgf3+C 0fpvbuI1FzJq3VyWKlNl5V3jcaOuhHdXE9By9qhgLhBT3qSVMH5mThctQODzV9OC i5eaxKRI6QmThUb10KPxZsrMBkfJzdr6DY/rLuEsXXLCOETfIBd2D5nwwXZDJodG pl1lt4xuACf80kUwEj6bpCt04aXkfnEKEeZ7SE+6isVGFuJHdYuMr7vrfZZ2JuMZ dBRIII7l/JL7RA6qHhB4wtJsbXM6LNRM6zC9iER8CkLvfHGQB5o4kkMmwkeCOly7 MSxN4h20AiS/lrQ+hR4dBHbMjtfPwcIU1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:09 2025 by rpki-client