$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa File: 2658079f-2359-3943-897e-e95be9093009.roa (raw, json) Hash identifier: mFu8ucJ9MuPH2bEW4/94m32XIBhNnhfw7ZQR0nYmvwc= Subject key identifier: 1A:4B:AA:8E:82:B1:74:AD:70:D9:D5:DC:BF:C5:1E:B6:FA:76:C3:23 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B87B240E9C6927C301DA3DC80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 2604:2e87:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:40:e9:c6:92:7c:30:1d:a3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=dda73b2b-4550-40eb-9e27-79db5a8bf160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:2f:c8:91:f2:5d:bf:b4:78:f7:3f:23:b1: 3f:9a:6e:5b:61:b7:ce:d8:0c:5d:bf:ea:d2:ca:fb: 3e:d2:3c:c8:3a:01:78:a7:39:aa:11:5c:90:72:4b: 02:01:3c:69:a0:e6:0d:c9:f8:cc:9a:9a:92:f6:f4: 70:a7:a5:cc:58:3b:2a:ec:f7:a4:d5:79:3a:89:37: 43:45:4c:d6:30:da:7f:e6:5d:0a:3f:81:7f:1b:2a: 67:6c:94:03:c7:b9:c2:96:59:f0:39:e0:ec:39:19: c8:d2:bd:20:18:9f:85:b7:65:2d:30:14:9b:cc:26: 41:f1:72:d8:84:ed:08:05:fe:b7:00:f1:cd:18:f0: bf:06:26:89:f4:f6:ef:78:d5:52:38:7b:46:d0:42: 44:90:65:33:72:11:cc:69:5b:b7:04:2c:ec:3d:3a: 44:68:16:67:6c:c8:22:a9:9e:9a:34:d3:67:82:61: 2c:e8:28:69:4d:9f:17:f6:c7:ed:fe:df:dd:f0:c4: 30:28:f6:52:92:da:22:7e:46:73:ad:84:ec:0c:24: 9f:25:3f:b4:cc:8e:1e:77:86:fa:34:fe:f8:7d:7e: 35:81:0d:f0:ac:e1:7b:b1:3b:60:96:7c:f1:18:4b: 23:1d:06:fe:13:17:95:ee:96:e9:21:b8:18:b9:85: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4B:AA:8E:82:B1:74:AD:70:D9:D5:DC:BF:C5:1E:B6:FA:76:C3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2658079f-2359-3943-897e-e95be9093009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ce:40:98:66:57:3d:98:93:17:13:f8:fe:d0:7d:54:96:d4: 16:a0:81:47:ee:19:8e:71:4a:90:29:5f:ad:6d:2f:b2:79:c0: a8:51:86:00:cd:e2:7e:cd:6f:a5:8c:0a:9e:02:99:b0:04:af: 45:5f:83:4f:f8:55:c6:69:d4:c6:e7:c2:58:9f:98:19:4b:e2: ee:af:9d:6f:01:cd:68:2f:cb:01:41:1e:2f:65:bb:4f:26:b0: 61:59:bb:3a:e6:ce:6d:ae:3e:fe:1a:61:bb:42:c0:b4:06:28: e9:e0:df:e2:ba:5e:9d:ba:c7:5d:17:db:fb:e7:2f:97:f8:37: 72:1d:21:1e:64:d4:db:db:7c:b5:95:54:b2:61:5b:b5:fe:45: 3b:aa:80:e9:18:6e:67:b2:bb:11:ff:7b:58:18:b8:ef:a8:57: ed:17:c9:fa:a7:84:c0:a4:00:79:fc:86:09:1c:8b:f8:4b:05: 8b:57:d6:d9:a4:e4:83:86:d4:46:64:83:e3:62:76:12:75:fc: 21:5f:e8:2c:63:27:9d:ce:52:3f:d3:f9:7e:e9:73:64:0b:6d: b1:4e:fa:06:0b:97:b0:c5:68:df:30:ea:88:99:7c:56:32:8f: 6a:ff:5a:6e:f1:3d:d8:6e:94:56:af:8f:df:10:b7:a7:58:9e: bf:54:4c:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuHskDpxpJ8MB2j3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZGRhNzNiMmItNDU1MC00MGViLTllMjctNzlkYjVhOGJmMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtkvyJHyXb+0ePc/I7E/mm5bYbfO2Axdv+rS yvs+0jzIOgF4pzmqEVyQcksCATxpoOYNyfjMmpqS9vRwp6XMWDsq7Pek1Xk6iTdD RUzWMNp/5l0KP4F/GypnbJQDx7nCllnwOeDsORnI0r0gGJ+Ft2UtMBSbzCZB8XLY hO0IBf63APHNGPC/BiaJ9PbveNVSOHtG0EJEkGUzchHMaVu3BCzsPTpEaBZnbMgi qZ6aNNNngmEs6ChpTZ8X9sft/t/d8MQwKPZSktoifkZzrYTsDCSfJT+0zI4ed4b6 NP74fX41gQ3wrOF7sTtglnzxGEsjHQb+ExeV7pbpIbgYuYXoxQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBpLqo6CsXStcNnV3L/FHrb6dsMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjY1ODA3OWYtMjM1OS0z OTQzLTg5N2UtZTk1YmU5MDkzMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhxww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkM5AmGZXPZiTFxP4/tB9VJbUFqCBR+4ZjnFKkClfrW0vsnnAqFGG AM3ifs1vpYwKngKZsASvRV+DT/hVxmnUxufCWJ+YGUvi7q+dbwHNaC/LAUEeL2W7 TyawYVm7OubOba4+/hphu0LAtAYo6eDf4rpenbrHXRfb++cvl/g3ch0hHmTU29t8 tZVUsmFbtf5FO6qA6RhuZ7K7Ef97WBi476hX7RfJ+qeEwKQAefyGCRyL+EsFi1fW 2aTkg4bURmSD42J2EnX8IV/oLGMnnc5SP9P5fulzZAttsU76BguXsMVo3zDqiJl8 VjKPav9abvE92G6UVq+P3xC3p1iev1RMCA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:07 2025 by rpki-client