$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa File: 397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa (raw, json) Hash identifier: FQ3Eg5FfbllbjXYQ0lww+wvTZQ2QSbSrubrbOr7GAN0= Subject key identifier: 9B:D9:32:31:89:3E:03:62:64:13:B9:9B:40:7D:DE:71:0F:B9:93:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B79CAAC2C29DB3DB223872200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa Signing time: Fri 10 Oct 2025 13:28:52 +0000 ROA not before: Fri 10 Oct 2025 13:28:52 +0000 ROA not after: Thu 08 Jan 2026 14:28:52 +0000 asID: 19905 IP address blocks: 2604:2e8d:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ca:ac:2c:29:db:3d:b2:23:87:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 10 13:28:52 2025 GMT Not After : Jan 8 14:28:52 2026 GMT Subject: CN=4ff813a7-3d33-4575-8005-610ce20babab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:9d:ad:8e:76:af:65:73:1f:c5:5e:56:c8: 2c:ba:a5:e4:e2:15:88:80:cb:e6:eb:33:fe:46:c4: d9:1b:9a:fe:e5:d4:41:c0:55:02:24:c1:7b:14:a9: 71:c0:15:6b:53:1f:ac:2b:1d:e6:0f:9c:0c:ea:7e: 12:0e:b4:00:45:43:cf:ef:54:78:b2:99:68:d5:c4: 7f:bc:c3:02:77:18:25:1c:00:d7:59:fc:a6:c9:4c: 58:b7:68:11:c0:17:28:4e:68:fc:d9:8f:37:63:4a: c5:19:51:16:a6:9d:38:4c:a2:1d:f6:a5:77:17:ea: e1:90:7e:b2:d8:72:be:28:3b:2e:d8:91:81:b1:f6: ad:73:ae:ec:7f:db:10:8c:e7:d9:bc:97:7c:f4:07: 95:5a:7e:46:36:e8:1a:c3:74:b1:63:33:9d:2a:da: 7d:63:62:17:75:c1:c3:32:17:39:c9:c4:a4:3d:2b: eb:14:1a:87:40:7d:09:e9:9b:37:6d:eb:81:ec:b8: 1f:ea:54:44:96:4a:22:9a:a2:27:91:4c:43:cf:5e: ff:38:74:34:ea:fe:70:d2:d7:2f:a0:5d:7b:61:80: 68:7a:89:3f:86:e7:24:24:79:41:7e:e5:d1:81:da: d7:6b:e2:4b:2d:54:35:0b:c7:0e:98:14:2b:1a:ad: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:32:31:89:3E:03:62:64:13:B9:9B:40:7D:DE:71:0F:B9:93:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/397d521b-1684-3ce6-b4d0-06ddc83d88e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0c:37:ab:6f:3c:8a:75:0e:26:a0:55:fb:56:ee:7c:31:df: 96:e3:ee:a0:91:07:5b:18:bb:8d:b3:28:85:94:be:a3:41:51: 70:97:eb:a3:dd:2b:1f:24:c1:68:28:1a:c5:87:25:f9:3e:83: e0:64:bf:e4:49:2d:e7:79:57:11:78:75:7f:e4:84:f5:8b:5a: d2:cc:88:69:19:5a:71:02:09:b7:c3:ea:82:13:69:29:a1:48: 18:26:da:3f:a2:dc:68:8b:2d:9f:77:d4:69:da:8c:2e:f0:12: 60:40:df:27:93:bd:22:51:4e:3e:03:87:bf:a1:57:dc:f6:66: c6:a7:34:9d:f6:1a:f3:ed:07:23:08:28:1a:53:ae:ef:ce:36: 5a:5e:9d:81:5c:aa:35:5c:ff:76:94:0b:fe:08:33:20:c3:a0: 07:41:10:81:88:e9:52:13:ab:a5:35:52:cf:06:9f:04:85:3a: 02:f6:d0:25:40:5f:d2:18:4f:30:a9:da:d9:ad:c1:6b:c2:0a: b2:f9:03:0f:88:20:8e:fe:f0:4d:35:fd:de:36:43:7b:41:ee: 5e:6a:13:1c:51:da:67:b1:50:84:37:89:ac:0e:01:9b:29:d0: 84:fd:3b:42:47:d2:04:d8:26:6e:48:a5:fb:7e:8d:53:e2:a3: 0b:31:0e:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt5yqwsKds9siOHIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMDEzMjg1MloXDTI2MDEwODE0Mjg1MlowLzEtMCsGA1UEAxMk NGZmODEzYTctM2QzMy00NTc1LTgwMDUtNjEwY2UyMGJhYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2edrY52r2VzH8VeVsgsuqXk4hWIgMvm6zP+ RsTZG5r+5dRBwFUCJMF7FKlxwBVrUx+sKx3mD5wM6n4SDrQARUPP71R4splo1cR/ vMMCdxglHADXWfymyUxYt2gRwBcoTmj82Y83Y0rFGVEWpp04TKId9qV3F+rhkH6y 2HK+KDsu2JGBsfatc67sf9sQjOfZvJd89AeVWn5GNugaw3SxYzOdKtp9Y2IXdcHD Mhc5ycSkPSvrFBqHQH0J6Zs3beuB7Lgf6lRElkoimqInkUxDz17/OHQ06v5w0tcv oF17YYBoeok/huckJHlBfuXRgdrXa+JLLVQ1C8cOmBQrGq3kCQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJvZMjGJPgNiZBO5m0B93nEPuZOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzk3ZDUyMWItMTY4NC0z Y2U2LWI0ZDAtMDZkZGM4M2Q4OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujQQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaQw3q288inUOJqBV+1bufDHfluPuoJEHWxi7jbMohZS+o0FRcJfr o90rHyTBaCgaxYcl+T6D4GS/5Ekt53lXEXh1f+SE9Yta0syIaRlacQIJt8PqghNp KaFIGCbaP6LcaIstn3fUadqMLvASYEDfJ5O9IlFOPgOHv6FX3PZmxqc0nfYa8+0H IwgoGlOu7842Wl6dgVyqNVz/dpQL/ggzIMOgB0EQgYjpUhOrpTVSzwafBIU6AvbQ JUBf0hhPMKna2a3Ba8IKsvkDD4ggjv7wTTX93jZDe0HuXmoTHFHaZ7FQhDeJrA4B mynQhP07QkfSBNgmbkil+36NU+KjCzEOMw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:49 2025 by rpki-client