$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd3db5e-9e26-39bf-8db2-9267b7e2ece5.roa File: 1dd3db5e-9e26-39bf-8db2-9267b7e2ece5.roa (raw, json) Hash identifier: VCRQgdZejJEmwW5JlKunisuzrF9gUgFUwP2w+Ypkr40= Subject key identifier: F4:51:0B:0B:0A:5A:A6:6B:94:7A:AA:82:6E:90:86:0A:A9:DD:1A:40 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB45D431F522325FC8D5C4900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd3db5e-9e26-39bf-8db2-9267b7e2ece5.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8c:f800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:43:1f:52:23:25:fc:8d:5c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=8936e86c-d13b-47b8-9708-70ccf63e7a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:e9:bb:4e:0e:0b:f9:c8:ed:7d:d9:45:db: b5:75:21:76:f8:7d:92:3e:b0:d2:bb:7f:d6:49:db: 68:82:5d:69:b2:67:87:c8:1b:b1:fa:1e:a7:bc:46: dd:8f:6e:9c:53:d2:4e:0c:e3:7a:8f:1f:fc:3b:80: 08:9f:04:36:3d:d3:f7:dc:38:f2:03:34:3f:4f:8e: 5c:09:57:73:9a:7a:ba:21:2c:17:59:b2:be:4e:0e: 7a:ee:92:20:cc:d0:46:64:ef:f8:ce:02:09:4b:bf: 95:5a:d1:e9:bc:d3:4e:17:6d:7c:46:70:74:01:28: 2c:00:9f:2c:57:0a:9b:29:24:ea:62:dc:98:05:68: 5f:6d:62:43:ad:33:b9:c2:1e:59:03:e8:a3:dd:40: d0:1f:2a:a1:51:01:2a:33:49:eb:c9:58:92:d2:77: d5:23:ea:62:37:b6:a0:e0:98:ea:cb:fe:b3:a7:20: 37:64:9f:4e:99:2c:7d:f9:9e:7e:17:d0:5d:54:11: df:39:b5:56:93:1f:e9:ec:fd:51:ee:0d:d1:59:c8: b4:b9:f7:32:52:b1:42:e5:6f:e6:0b:51:ec:69:ed: f8:0d:2d:7e:17:9a:b2:0f:39:5d:e6:a2:ea:06:ee: 77:f2:38:ff:aa:9a:c1:5a:6c:7b:55:3b:9d:73:b3: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:51:0B:0B:0A:5A:A6:6B:94:7A:AA:82:6E:90:86:0A:A9:DD:1A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1dd3db5e-9e26-39bf-8db2-9267b7e2ece5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:f800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:4c:64:68:ec:9a:d5:a2:d6:21:51:b6:a1:84:3c:b3:a3: 2f:ec:2e:10:32:bc:94:b2:c8:d4:1a:a3:56:3c:45:05:1c:90: e6:e0:a2:d1:77:c2:6b:43:7f:9c:d7:2c:b6:61:58:31:45:ea: 88:94:5f:87:37:c1:85:c5:63:7d:7f:ff:25:63:72:83:b5:b7: 49:fc:8d:c5:e0:7e:ae:03:73:72:39:be:56:72:92:02:b4:04: b4:59:59:32:21:55:00:d2:da:1a:e1:52:f8:12:bd:53:00:28: f7:58:d0:72:ac:8d:d0:3a:ea:a7:82:22:0b:d9:31:37:a0:c0: 18:4b:11:16:60:60:19:38:95:ee:5f:53:ea:07:75:07:0d:0e: 0d:ca:da:20:88:3f:69:4d:a5:50:c2:5b:71:c2:c6:77:ca:62: 0d:02:11:5f:69:26:c5:b0:21:b6:94:31:e1:2d:02:52:4c:12: bf:31:34:75:d5:1e:d7:24:7c:65:54:0b:1d:1e:d4:cb:cf:8f: 20:a2:32:07:fc:7d:1f:ff:2f:aa:5f:f4:e6:ce:c2:1d:6a:4c: 4b:d4:53:d8:3c:27:47:d6:49:09:55:33:66:22:8b:5e:3d:03: 72:7d:4b:9d:bb:5b:a3:75:2c:d2:2a:7e:77:cd:77:be:97:54: 28:5b:f2:d2 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XUMfUiMl/I1cSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ODkzNmU4NmMtZDEzYi00N2I4LTk3MDgtNzBjY2Y2M2U3YTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpHpu04OC/nI7X3ZRdu1dSF2+H2SPrDSu3/W Sdtogl1psmeHyBux+h6nvEbdj26cU9JODON6jx/8O4AInwQ2PdP33DjyAzQ/T45c CVdzmnq6ISwXWbK+Tg567pIgzNBGZO/4zgIJS7+VWtHpvNNOF218RnB0ASgsAJ8s VwqbKSTqYtyYBWhfbWJDrTO5wh5ZA+ij3UDQHyqhUQEqM0nryViS0nfVI+piN7ag 4Jjqy/6zpyA3ZJ9OmSx9+Z5+F9BdVBHfObVWkx/p7P1R7g3RWci0ufcyUrFC5W/m C1Hsae34DS1+F5qyDzld5qLqBu538jj/qprBWmx7VTudc7N9VQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPRRCwsKWqZrlHqqgm6Qhgqp3RpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWRkM2RiNWUtOWUyNi0z OWJmLThkYjItOTI2N2I3ZTJlY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujPgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMppMZGjsmtWi1iFRtqGEPLOjL+wuEDK8lLLI1BqjVjxFBRyQ5uCi 0XfCa0N/nNcstmFYMUXqiJRfhzfBhcVjfX//JWNyg7W3SfyNxeB+rgNzcjm+VnKS ArQEtFlZMiFVANLaGuFS+BK9UwAo91jQcqyN0Drqp4IiC9kxN6DAGEsRFmBgGTiV 7l9T6gd1Bw0ODcraIIg/aU2lUMJbccLGd8piDQIRX2kmxbAhtpQx4S0CUkwSvzE0 ddUe1yR8ZVQLHR7Uy8+PIKIyB/x9H/8vql/05s7CHWpMS9RT2DwnR9ZJCVUzZiKL Xj0Dcn1Lnbtbo3Us0ip+d813vpdUKFvy0g== -----END CERTIFICATE-----Generated at Wed Nov 5 05:02:03 2025 by rpki-client