$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38ce5774-8cc2-3955-92b9-de4c921f066e.roa File: 38ce5774-8cc2-3955-92b9-de4c921f066e.roa (raw, json) Hash identifier: Qj73h7x19n4Gy0SiInmgy1vOuf/PLADe3N8RBbDqBbs= Subject key identifier: 23:22:6D:D9:8F:53:DD:6B:0D:6D:20:F0:8A:FA:09:CC:C5:65:05:39 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A8410F205D036270278BCBB80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38ce5774-8cc2-3955-92b9-de4c921f066e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e89:d000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f2:05:d0:36:27:02:78:bc:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2f563b22-f277-4c07-b7fa-f7ac392e33d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:93:33:f5:aa:dc:75:e2:72:38:6c:43:2a: 0b:37:44:00:b7:d9:62:64:7d:4c:02:56:42:de:d2: 16:84:07:c6:09:50:8e:90:8d:a4:a1:1f:4e:08:71: 2e:18:a5:ba:e0:7c:85:ee:2c:0b:04:39:0c:8d:dc: 90:8e:c0:d2:c6:11:60:ff:60:89:31:44:32:b9:1c: 96:cb:55:f0:5d:76:3b:bf:74:89:4e:90:13:a9:f2: 40:3e:1e:23:0b:fd:a0:18:a1:a3:1c:5f:2d:97:17: 34:ac:03:28:35:75:93:c0:42:f4:14:ab:32:e0:09: b9:4f:6d:02:db:5e:84:78:23:7b:1d:73:ad:6f:b7: df:48:ab:09:72:d5:e0:fb:6c:27:08:65:ad:3d:58: 49:17:f7:aa:20:ca:24:26:35:87:ac:65:59:62:70: 85:34:82:0b:0e:f1:b3:5e:bd:c8:a9:30:f9:bb:2d: 8b:fc:78:9a:12:2a:a7:36:c9:51:80:87:15:2e:61: 58:c3:11:d1:ed:8e:80:b0:1c:db:cd:83:a7:25:7b: 62:c4:7b:ce:7e:64:dc:9a:c9:f7:0d:c7:98:a6:d0: be:5e:0a:fb:ef:53:f5:de:51:b2:5e:0e:b0:cd:24: a9:b4:ac:31:4f:33:dc:90:58:80:eb:be:d5:d7:8e: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:22:6D:D9:8F:53:DD:6B:0D:6D:20:F0:8A:FA:09:CC:C5:65:05:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38ce5774-8cc2-3955-92b9-de4c921f066e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1f:6c:21:5f:6a:f1:5c:d7:5b:27:bb:a6:19:7f:c1:a0:02: 7c:83:3b:25:34:be:77:ca:fc:03:0d:4c:51:4c:ba:6a:6e:31: 64:0b:c6:76:b1:9c:44:0c:2c:06:78:ba:53:d1:35:4c:18:11: d7:6f:72:52:94:2e:93:11:e0:7d:f0:01:a4:8e:b0:27:07:d7: 2b:e6:26:2f:77:2a:4a:df:77:37:f9:f1:07:2e:b2:c1:dd:57: 9e:26:36:28:62:13:de:50:e2:64:69:11:e9:7a:6a:ee:21:5b: 25:7b:ca:63:c9:73:9d:dd:c7:8a:ff:dd:61:e1:fe:85:4e:cd: 4b:71:88:95:b0:0b:2e:e8:2a:3b:23:c2:0a:08:76:fa:f0:a1: 85:ab:8d:fd:34:25:f7:d8:58:1d:98:f2:12:5c:2f:9d:19:d6: 02:93:57:c6:a3:a3:f8:29:a3:32:91:c0:03:85:cd:04:41:ec: eb:2c:37:d9:27:13:18:ad:7c:0a:49:d6:68:7a:83:f0:7a:a2: b2:19:75:10:dd:59:20:0f:77:14:5d:e1:a0:df:77:81:c9:38: a9:8a:cd:21:f2:b0:04:40:ce:3e:10:cc:0f:70:de:a0:ff:6f: 44:87:b8:c3:1d:19:6b:47:f7:f0:d0:d1:d8:cd:f4:35:bd:04: ea:2b:04:93 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEPIF0DYnAni8u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmY1NjNiMjItZjI3Ny00YzA3LWI3ZmEtZjdhYzM5MmUzM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuKTM/Wq3HXicjhsQyoLN0QAt9liZH1MAlZC 3tIWhAfGCVCOkI2koR9OCHEuGKW64HyF7iwLBDkMjdyQjsDSxhFg/2CJMUQyuRyW y1XwXXY7v3SJTpATqfJAPh4jC/2gGKGjHF8tlxc0rAMoNXWTwEL0FKsy4Am5T20C 216EeCN7HXOtb7ffSKsJctXg+2wnCGWtPVhJF/eqIMokJjWHrGVZYnCFNIILDvGz Xr3IqTD5uy2L/HiaEiqnNslRgIcVLmFYwxHR7Y6AsBzbzYOnJXtixHvOfmTcmsn3 DceYptC+Xgr771P13lGyXg6wzSSptKwxTzPckFiA677V145DwQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCMibdmPU91rDW0g8Ir6CczFZQU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzhjZTU3NzQtOGNjMi0z OTU1LTkyYjktZGU0YzkyMWYwNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuidAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAih9sIV9q8VzXWye7phl/waACfIM7JTS+d8r8Aw1MUUy6am4xZAvG drGcRAwsBni6U9E1TBgR129yUpQukxHgffABpI6wJwfXK+YmL3cqSt93N/nxBy6y wd1XniY2KGIT3lDiZGkR6Xpq7iFbJXvKY8lznd3Hiv/dYeH+hU7NS3GIlbALLugq OyPCCgh2+vChhauN/TQl99hYHZjyElwvnRnWApNXxqOj+CmjMpHAA4XNBEHs6yw3 2ScTGK18CknWaHqD8Hqishl1EN1ZIA93FF3hoN93gck4qYrNIfKwBEDOPhDMD3De oP9vRIe4wx0Za0f38NDR2M30Nb0E6isEkw== -----END CERTIFICATE-----Generated at Fri Aug 8 10:27:22 2025 by rpki-client