$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa File: 386697e9-daff-344a-823d-ac4db132b4d8.roa (raw, json) Hash identifier: cDj4Q3q5VvUCFzlbsUEAo863ZuvZfi22ZbQYmEDQDT4= Subject key identifier: 9E:DD:34:E1:EA:5A:60:A8:92:20:52:F2:4A:68:B6:D5:BF:CB:6D:A3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CC7EA1F5AF9A4399456A40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8b:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:7e:a1:f5:af:9a:43:99:45:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5b52cc23-b5d7-4664-b16a-057e5851a966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:a7:33:d7:da:3f:79:79:bd:8d:b2:e6:45: 9b:5c:75:fd:01:9d:3a:e7:d8:cf:f2:b7:aa:46:ff: 54:6a:73:b4:a4:94:8a:bd:b5:21:42:3e:41:33:57: 93:b5:cf:f7:21:d7:b6:e9:bf:3a:4c:fa:07:b4:d3: c2:46:c5:23:38:10:1b:44:9e:ed:71:8d:f2:c3:d7: ba:47:63:db:17:4a:bc:de:e4:00:ad:46:19:74:87: 05:c7:7c:45:e8:de:68:80:b1:a7:47:4c:4f:26:b3: c6:63:81:76:a0:a9:54:88:b8:ed:c2:f7:54:db:26: 73:30:82:b3:b0:22:7e:d4:ad:18:61:34:eb:6e:ef: 99:b9:b0:ab:91:35:14:11:d0:cb:4d:a4:c3:a5:9b: 6b:ac:f2:49:86:ec:9b:fe:84:ea:20:0f:e4:d0:f2: 3d:09:d8:ee:20:00:cc:ce:79:29:e7:77:fa:6d:82: 95:89:70:1f:47:80:68:5d:b6:5d:79:f8:db:c2:a2: 28:44:3e:27:06:7b:14:ff:59:fc:7f:0d:d0:cd:fb: d1:2a:c3:18:94:4c:20:2a:f1:3e:72:d3:67:d7:00: 45:7c:3a:10:18:7e:af:59:b8:67:da:c6:46:60:82: ab:d0:a7:a7:c4:80:ec:be:3c:68:42:42:8d:9c:50: 4f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DD:34:E1:EA:5A:60:A8:92:20:52:F2:4A:68:B6:D5:BF:CB:6D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/386697e9-daff-344a-823d-ac4db132b4d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:19:e7:43:b7:f1:17:d8:5f:08:09:61:de:e8:b3:87:42:a1: 50:3b:fd:51:76:ff:f2:e7:4a:1e:51:ed:6d:51:ed:b6:bc:b9: 6c:ed:22:ac:5c:d8:e9:96:dd:15:ce:f4:e1:75:13:82:41:89: f2:e8:75:05:94:de:bd:67:f4:d9:e9:02:09:8d:78:63:7e:fd: fb:bb:2e:2b:1b:d5:43:d0:90:0f:ec:90:e0:38:0c:9d:62:10: 48:a3:d4:80:d9:5f:e8:5d:68:f2:01:c1:ed:a9:87:d7:9a:b1: 18:d2:f2:1f:8f:4a:54:5a:af:7b:fd:a1:0b:ed:55:34:04:4e: bb:4d:46:57:1f:89:f7:11:bf:d2:47:a8:c1:8d:c9:04:d5:80: f7:5e:08:02:69:e1:74:f6:02:1f:4b:b9:59:09:be:db:ce:62: 2d:bc:2e:df:3b:fe:62:11:b8:3f:b3:39:db:e6:0a:3b:04:cb: d1:71:5b:8a:d9:ec:4f:52:a9:2d:f7:0d:f0:44:97:7f:22:93: 8d:fb:45:b7:d3:d1:14:79:12:64:c8:0d:24:1d:81:00:d1:e9: ca:1d:71:20:d8:1f:6d:64:46:fc:e4:d2:fe:5c:02:3f:4b:97: ab:66:a8:2d:1f:24:28:27:bd:05:8b:71:d7:99:6e:cd:1d:92: bc:d1:40:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzH6h9a+aQ5lFakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWI1MmNjMjMtYjVkNy00NjY0LWIxNmEtMDU3ZTU4NTFhOTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS6nM9faP3l5vY2y5kWbXHX9AZ0659jP8req Rv9UanO0pJSKvbUhQj5BM1eTtc/3Ide26b86TPoHtNPCRsUjOBAbRJ7tcY3yw9e6 R2PbF0q83uQArUYZdIcFx3xF6N5ogLGnR0xPJrPGY4F2oKlUiLjtwvdU2yZzMIKz sCJ+1K0YYTTrbu+ZubCrkTUUEdDLTaTDpZtrrPJJhuyb/oTqIA/k0PI9CdjuIADM znkp53f6bYKViXAfR4BoXbZdefjbwqIoRD4nBnsU/1n8fw3QzfvRKsMYlEwgKvE+ ctNn1wBFfDoQGH6vWbhn2sZGYIKr0KenxIDsvjxoQkKNnFBP8QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ7dNOHqWmCokiBS8kpottW/y22jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzg2Njk3ZTktZGFmZi0z NDRhLTgyM2QtYWM0ZGIxMzJiNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui5Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAhnnQ7fxF9hfCAlh3uizh0KhUDv9UXb/8udKHlHtbVHttry5bO0i rFzY6ZbdFc704XUTgkGJ8uh1BZTevWf02ekCCY14Y379+7suKxvVQ9CQD+yQ4DgM nWIQSKPUgNlf6F1o8gHB7amH15qxGNLyH49KVFqve/2hC+1VNAROu01GVx+J9xG/ 0keowY3JBNWA914IAmnhdPYCH0u5WQm+285iLbwu3zv+YhG4P7M52+YKOwTL0XFb itnsT1KpLfcN8ESXfyKTjftFt9PRFHkSZMgNJB2BANHpyh1xINgfbWRG/OTS/lwC P0uXq2aoLR8kKCe9BYtx15luzR2SvNFA+Q== -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:03 2025 by rpki-client