$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa File: 3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa (raw, json) Hash identifier: fT6bGDS12Cw8CAlqRtmK9ae39ZVzpF12bB0jHtlq6ac= Subject key identifier: 0E:A0:8F:65:1D:E1:51:6B:F2:B2:C5:70:32:45:03:13:F1:2A:EB:DB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE4DAB6FDBBE68FCB89900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8a:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4d:ab:6f:db:be:68:fc:b8:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bb32a4ef-3ee3-405c-88ac-546de9f7ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:79:e6:da:48:f9:f1:82:87:80:2f:fe:9e: 2d:3b:3e:9c:f1:d0:86:63:f7:1d:01:41:ff:27:a4: 54:8a:d9:40:78:ab:53:3e:a1:7d:56:b5:d7:93:45: 5c:31:f7:b1:d6:df:ab:26:7c:2e:c5:33:f0:0a:71: 60:db:6d:30:62:32:35:35:57:b0:8c:35:8b:06:98: 6d:9c:34:1f:13:10:f2:bd:44:22:7e:71:22:a4:08: ec:a6:f0:9a:28:e5:9b:5e:e4:6c:79:5c:00:51:60: 87:3e:2e:37:bb:92:52:ff:ae:10:d3:e1:27:d0:d5: 9f:18:16:e4:c6:de:15:67:20:d5:49:e4:4f:b6:e2: 4c:14:14:67:9a:41:e3:b1:22:cd:50:07:a9:8b:c5: 6d:7f:15:1d:b5:c8:a8:cb:e4:fc:fc:bd:54:bb:89: 53:c9:e5:03:88:f4:e3:76:7d:fc:b3:0f:c3:be:49: 14:96:be:8d:51:f7:46:9a:02:50:ef:a9:e6:ab:ce: 62:73:97:bf:82:db:cc:d1:33:ee:07:d5:4d:c5:6c: e8:00:b0:f3:76:ca:0f:a2:63:b6:0f:91:0f:44:fd: a0:50:0b:da:6d:96:6c:47:bf:71:73:07:95:1a:fd: 62:70:c7:c2:48:bc:cc:ef:f3:92:4b:75:9e:2d:dc: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A0:8F:65:1D:E1:51:6B:F2:B2:C5:70:32:45:03:13:F1:2A:EB:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3f42a12a-7daf-3fdc-8d40-41b7827aa8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:aa:d5:63:fd:0c:2b:64:d5:47:ae:fe:b5:c8:79:35:24:7b: d7:bb:0f:9e:d8:22:d1:d5:45:7e:47:94:04:91:a7:fc:fd:93: 7e:21:88:d8:e9:e3:f9:d3:22:b6:8d:64:40:26:91:48:72:26: 97:e8:ae:a1:c0:3f:f3:36:0a:a6:25:97:a8:c2:e7:30:52:10: b3:ac:58:ef:ed:1e:83:74:07:80:11:c0:a5:36:a6:39:dd:ef: 9d:de:c9:72:12:a5:67:28:df:50:80:59:eb:e4:33:c5:5f:cd: 4a:94:d5:7a:85:27:2b:3c:e3:20:3c:37:f2:0c:93:f5:2c:46: 39:6b:c0:66:40:c9:b4:eb:22:78:84:f9:2b:91:52:56:8d:56: 26:8c:b6:50:19:7e:92:db:7d:29:f2:93:73:05:59:58:69:0f: 7d:b8:62:d4:47:f4:5b:44:a7:e5:e5:37:c6:30:5e:a8:fe:2b: 8f:0c:57:28:35:1e:27:ee:bd:cd:ff:42:df:ca:a8:e8:9b:14: 58:08:0e:0a:62:78:d1:53:04:dd:e6:e9:dc:51:9b:d0:32:75: 36:6e:2e:85:6a:19:eb:6c:69:4c:08:81:5a:1b:3b:42:af:c0: 81:b0:5c:3f:63:1f:5b:f3:1d:8a:92:fb:ce:29:b8:69:2d:2d: b5:fe:e2:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzk2rb9u+aPy4mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmIzMmE0ZWYtM2VlMy00MDVjLTg4YWMtNTQ2ZGU5ZjdlZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD155tpI+fGCh4Av/p4tOz6c8dCGY/cdAUH/ J6RUitlAeKtTPqF9VrXXk0VcMfex1t+rJnwuxTPwCnFg220wYjI1NVewjDWLBpht nDQfExDyvUQifnEipAjspvCaKOWbXuRseVwAUWCHPi43u5JS/64Q0+En0NWfGBbk xt4VZyDVSeRPtuJMFBRnmkHjsSLNUAepi8VtfxUdtcioy+T8/L1Uu4lTyeUDiPTj dn38sw/DvkkUlr6NUfdGmgJQ76nmq85ic5e/gtvM0TPuB9VNxWzoALDzdsoPomO2 D5EPRP2gUAvabZZsR79xcweVGv1icMfCSLzM7/OSS3WeLdxLxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA6gj2Ud4VFr8rLFcDJFAxPxKuvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2Y0MmExMmEtN2RhZi0z ZmRjLThkNDAtNDFiNzgyN2FhOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuirQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa6rVY/0MK2TVR67+tch5NSR717sPntgi0dVFfkeUBJGn/P2TfiGI 2Onj+dMito1kQCaRSHIml+iuocA/8zYKpiWXqMLnMFIQs6xY7+0eg3QHgBHApTam Od3vnd7JchKlZyjfUIBZ6+QzxV/NSpTVeoUnKzzjIDw38gyT9SxGOWvAZkDJtOsi eIT5K5FSVo1WJoy2UBl+ktt9KfKTcwVZWGkPfbhi1Ef0W0Sn5eU3xjBeqP4rjwxX KDUeJ+69zf9C38qo6JsUWAgOCmJ40VME3ebp3FGb0DJ1Nm4uhWoZ62xpTAiBWhs7 Qq/AgbBcP2MfW/MdipL7zim4aS0ttf7ipQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:39:23 2025 by rpki-client