$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa File: 1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa (raw, json) Hash identifier: 8DyRI2R3AMJVnIESnwET8pbebb5gul5zZgOKxmUBjcw= Subject key identifier: CA:86:94:2C:A4:BB:6B:A3:93:0E:FA:B0:CE:DF:CC:10:28:0F:E3:47 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E0793637AC92E5109D9FC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 2604:2e87:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:93:63:7a:c9:2e:51:09:d9:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=835e473d-97f8-4bcb-a1b4-449cdde1eaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:ed:c4:60:90:94:fa:62:02:18:0b:8f:01: 33:20:d8:fd:4e:7d:c9:f1:88:93:6c:59:ce:01:06: a4:f3:e0:cd:0b:bf:ad:35:5a:dc:f8:6e:01:4e:b1: cc:54:cd:45:42:ca:0b:98:7d:08:c0:17:7a:b1:61: 60:d1:2e:5e:1a:6b:29:c8:8a:12:a3:77:b5:0a:32: 91:05:e7:b6:0c:9a:0b:30:8c:2e:36:67:09:25:55: f2:a3:4d:4e:24:44:39:3c:49:51:ab:6d:5c:f9:7d: 1a:d2:a7:dc:3f:fe:53:8f:73:89:7a:9b:15:d0:9f: 29:c0:93:71:09:88:a1:02:11:cc:7f:32:88:84:09: 76:a8:e6:d1:a4:dc:3c:45:7a:7e:ef:c5:72:09:c0: 5a:17:5e:df:91:8d:23:20:22:6d:98:e7:f8:58:db: 90:03:0b:66:20:47:b8:0c:1e:9b:45:5f:a7:82:07: d3:9b:21:5c:4b:f0:ef:f6:74:82:fb:2e:88:4b:ea: fe:82:9a:2a:1f:1b:82:ca:6c:b2:aa:b4:a1:ba:a9: 84:32:e1:96:cd:9e:71:00:54:67:87:f8:55:4d:52: b8:39:01:8d:ca:6c:de:eb:18:f6:6c:92:5c:be:82: b0:c2:b9:ec:53:b3:99:9f:28:72:14:e1:cf:ff:36: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:94:2C:A4:BB:6B:A3:93:0E:FA:B0:CE:DF:CC:10:28:0F:E3:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1d37db6a-bc24-3386-a7aa-3f193b383e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:61:8b:b1:0c:0a:ba:db:f8:d3:3d:50:86:0d:2a:55:ad:c2: bb:ac:9c:e9:de:e1:6d:55:cb:31:79:c6:82:0e:b6:32:44:11: b4:37:3b:cc:73:e4:45:d4:2e:43:9c:c3:ed:8b:7b:1a:dd:b6: d8:52:19:50:c2:c4:e2:0d:fc:48:20:8e:a8:e9:f1:e8:ef:df: 3b:e7:5d:63:34:22:66:cb:8e:7c:68:4e:eb:76:6a:18:f9:87: ed:a1:8f:44:69:8d:19:89:20:c4:a3:9e:95:b1:78:9d:43:ee: 23:06:8c:2d:5e:62:00:b6:3e:e8:da:9f:8f:18:c9:9e:ad:61: eb:43:55:09:53:ce:3f:ba:e4:e8:09:c5:79:81:91:68:8b:ef: a6:93:74:b3:a8:01:5f:1a:67:51:1d:35:e1:e4:84:c2:de:03: 41:19:ea:ca:df:96:9c:7a:c6:19:83:dc:e9:57:4e:7c:14:2d: 9c:60:ab:cb:58:c0:3a:51:70:c6:5d:f7:72:30:bb:b5:85:72: 1e:3f:a9:41:53:9a:6e:9c:d0:61:93:c8:9b:b1:6c:78:32:dc: c4:6a:99:22:dc:ab:a4:f4:09:66:33:9d:16:90:ba:1b:e2:bb: 9d:6a:22:e6:a5:19:10:17:79:ba:3d:eb:b2:67:1d:0a:0e:db: f7:55:2f:39 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEueB5NjeskuUQnZ/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODM1ZTQ3M2QtOTdmOC00YmNiLWExYjQtNDQ5Y2RkZTFlYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZntxGCQlPpiAhgLjwEzINj9Tn3J8YiTbFnO AQak8+DNC7+tNVrc+G4BTrHMVM1FQsoLmH0IwBd6sWFg0S5eGmspyIoSo3e1CjKR Bee2DJoLMIwuNmcJJVXyo01OJEQ5PElRq21c+X0a0qfcP/5Tj3OJepsV0J8pwJNx CYihAhHMfzKIhAl2qObRpNw8RXp+78VyCcBaF17fkY0jICJtmOf4WNuQAwtmIEe4 DB6bRV+nggfTmyFcS/Dv9nSC+y6IS+r+gpoqHxuCymyyqrShuqmEMuGWzZ5xAFRn h/hVTVK4OQGNymze6xj2bJJcvoKwwrnsU7OZnyhyFOHP/zYfSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMqGlCyku2ujkw76sM7fzBAoD+NHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWQzN2RiNmEtYmMyNC0z Mzg2LWE3YWEtM2YxOTNiMzgzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhyww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAI2GLsQwKutv40z1Qhg0qVa3Cu6yc6d7hbVXLMXnGgg62MkQRtDc7 zHPkRdQuQ5zD7Yt7Gt222FIZUMLE4g38SCCOqOnx6O/fO+ddYzQiZsuOfGhO63Zq GPmH7aGPRGmNGYkgxKOelbF4nUPuIwaMLV5iALY+6NqfjxjJnq1h60NVCVPOP7rk 6AnFeYGRaIvvppN0s6gBXxpnUR014eSEwt4DQRnqyt+WnHrGGYPc6VdOfBQtnGCr y1jAOlFwxl33cjC7tYVyHj+pQVOabpzQYZPIm7FseDLcxGqZItyrpPQJZjOdFpC6 G+K7nWoi5qUZEBd5uj3rsmcdCg7b91UvOQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:21 2025 by rpki-client