$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa File: 43340026-ff0a-331b-b876-5b9d48e15d12.roa (raw, json) Hash identifier: iNLRJ3+38HyJNn74kZYFrKj1Tt3/otDknGJV5yrvp1o= Subject key identifier: 90:19:53:E7:88:22:0B:78:52:16:BA:E0:E3:4C:D3:6A:21:BE:28:04 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AE95C8EE0F332DDFB25654D40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa Signing time: Tue 19 Aug 2025 19:50:36 +0000 ROA not before: Tue 19 Aug 2025 19:50:36 +0000 ROA not after: Mon 17 Nov 2025 20:50:36 +0000 asID: 30036 IP address blocks: 2604:2e87:a800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:5c:8e:e0:f3:32:dd:fb:25:65:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 19 19:50:36 2025 GMT Not After : Nov 17 20:50:36 2025 GMT Subject: CN=8f5bcc71-80d3-4fe6-becc-859670efd032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2e:96:c2:50:81:27:0c:9d:46:2e:c1:26:c0: 40:53:e8:7d:9c:4d:d3:c5:78:ad:1e:1a:11:76:88: e5:82:ca:8e:b3:fe:95:e1:b7:04:00:4f:bd:3a:06: 25:aa:a5:40:8d:c3:ab:b4:88:80:de:e3:c9:e3:53: 2c:58:e2:fe:94:6b:8d:24:92:64:cc:c9:eb:77:ff: fc:a8:6b:42:59:cb:af:6c:09:12:2c:79:f0:63:85: 10:44:60:1f:6a:15:a9:ae:f5:27:0b:33:c7:af:27: 67:d3:c4:cc:35:06:51:9d:47:83:83:94:c3:e6:9b: e1:26:bb:de:2a:23:56:3a:cb:e9:7c:be:64:e8:39: 1f:d8:3b:db:31:80:f9:8e:97:78:6f:87:74:94:94: 2f:0c:49:b1:32:3f:99:6e:01:fa:ae:28:c9:fb:92: 70:5d:e2:6b:41:e8:d6:76:06:f8:71:fd:a5:4a:8b: d7:9b:31:6e:bc:45:c2:d2:c3:e7:9c:1c:93:ab:15: 2c:17:8c:ba:09:33:1c:0c:c2:07:d8:1b:8a:12:0e: f6:d6:7e:69:10:11:c7:fe:c8:e9:de:02:41:d2:8f: 45:51:e9:dd:0c:7e:89:a5:91:f0:7a:ad:2d:c9:e3: ab:07:2e:14:3d:58:ac:ac:bd:c6:a4:ce:b9:9f:ef: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:53:E7:88:22:0B:78:52:16:BA:E0:E3:4C:D3:6A:21:BE:28:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43340026-ff0a-331b-b876-5b9d48e15d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:a800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7f:51:e6:47:77:15:30:44:44:c4:23:aa:36:4e:7d:8f:0e: 6c:33:3b:ff:17:74:85:c5:61:71:fc:f4:55:d3:28:23:8c:b2: 88:81:43:15:79:01:8d:78:e7:4e:f9:42:9b:0e:e0:e1:30:99: 93:24:02:d8:ba:1a:3f:3a:ec:88:e2:72:4b:cc:a7:e6:b6:e2: 52:82:ba:b0:3a:14:34:a7:03:01:6a:7f:18:19:d9:da:35:ce: 52:78:6e:58:d8:67:54:79:32:a1:66:12:be:a2:11:28:d8:15: a4:16:8b:8b:4b:ab:47:6f:eb:93:e6:93:62:33:ea:8b:a8:bf: d2:55:13:57:0c:7f:4e:50:e3:bf:b5:40:7d:aa:2f:c0:59:e3: fb:2d:ee:2d:d2:19:96:21:23:30:85:07:4b:30:58:1a:c3:3c: 04:a3:1a:23:bf:29:7a:3f:5e:f9:e5:7d:ad:ca:ef:b8:a9:46: 90:ea:d2:0a:cc:d1:0f:3d:a4:07:c5:d7:0f:53:5e:4f:b2:e2: 18:f8:5b:1e:af:3a:43:2c:8c:2c:e1:82:7d:32:2f:40:53:ed: 0d:ce:6f:83:36:a1:a9:54:85:e7:11:f5:b9:c9:bb:17:9e:42: 49:35:b1:fd:c0:5d:89:19:9e:7b:db:fd:a5:ec:3d:6c:f9:85: 6f:c3:77:18 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpXI7g8zLd+yVlTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxOTE5NTAzNloXDTI1MTExNzIwNTAzNlowLzEtMCsGA1UEAxMk OGY1YmNjNzEtODBkMy00ZmU2LWJlY2MtODU5NjcwZWZkMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii6WwlCBJwydRi7BJsBAU+h9nE3TxXitHhoR dojlgsqOs/6V4bcEAE+9OgYlqqVAjcOrtIiA3uPJ41MsWOL+lGuNJJJkzMnrd//8 qGtCWcuvbAkSLHnwY4UQRGAfahWprvUnCzPHrydn08TMNQZRnUeDg5TD5pvhJrve KiNWOsvpfL5k6Dkf2DvbMYD5jpd4b4d0lJQvDEmxMj+ZbgH6rijJ+5JwXeJrQejW dgb4cf2lSovXmzFuvEXC0sPnnByTqxUsF4y6CTMcDMIH2BuKEg721n5pEBHH/sjp 3gJB0o9FUendDH6JpZHweq0tyeOrBy4UPVisrL3GpM65n+/c5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJAZU+eIIgt4Uha64ONM02ohvigEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDMzNDAwMjYtZmYwYS0z MzFiLWI4NzYtNWI5ZDQ4ZTE1ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh6gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZn9R5kd3FTBERMQjqjZOfY8ObDM7/xd0hcVhcfz0VdMoI4yyiIFD FXkBjXjnTvlCmw7g4TCZkyQC2LoaPzrsiOJyS8yn5rbiUoK6sDoUNKcDAWp/GBnZ 2jXOUnhuWNhnVHkyoWYSvqIRKNgVpBaLi0urR2/rk+aTYjPqi6i/0lUTVwx/TlDj v7VAfaovwFnj+y3uLdIZliEjMIUHSzBYGsM8BKMaI78pej9e+eV9rcrvuKlGkOrS CszRDz2kB8XXD1NeT7LiGPhbHq86QyyMLOGCfTIvQFPtDc5vgzahqVSF5xH1ucm7 F55CSTWx/cBdiRmee9v9pew9bPmFb8N3GA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:34 2025 by rpki-client