$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa File: 473f7632-25d5-3bd3-aa34-135b373772ce.roa (raw, json) Hash identifier: 5iHG3up6RuNM7/YC9a7tfb+XQ3s+sMD4PZ3Upv/JNGs= Subject key identifier: 7D:96:85:62:05:21:85:42:3F:1A:96:BE:AA:77:BC:3F:0E:DF:F1:18 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA2378CBB3350F9066AD1F900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e87:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8c:bb:33:50:f9:06:6a:d1:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=196ca51c-bd06-44a2-af87-30fa3ff73bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:64:6d:f0:f4:62:06:f3:73:c3:65:b9:dc: ea:f0:7d:4f:81:4d:47:cc:c5:62:7e:0b:8d:ad:3e: bd:0e:36:42:70:6c:4a:a1:87:d8:1e:37:9f:36:e2: 74:44:f4:f8:7c:0c:e7:4a:dc:90:ba:58:dd:7c:84: 08:da:49:e7:33:3c:6b:05:ec:92:46:b1:22:86:e0: d5:a4:51:7d:ba:40:10:62:61:50:8c:83:88:3a:ce: 7d:1b:77:2c:11:9c:1b:af:f6:2d:e7:13:c3:e1:93: a4:6b:a0:4b:7c:ba:91:3b:f9:95:d4:3e:fa:b9:2b: f2:97:17:9b:65:15:5f:a3:87:57:c7:a3:55:93:8a: a1:f7:cf:95:8d:8f:00:70:7a:ae:88:df:6a:f7:18: 3e:8e:0f:bc:d1:4a:82:38:7f:d2:db:86:f5:8f:be: 56:c4:d3:93:3b:68:a3:30:d5:a4:1b:78:ed:41:5b: 98:d1:27:c8:81:75:5b:8c:b4:68:b4:f9:4c:0e:53: ef:ea:77:f4:7e:a8:44:54:54:d9:21:51:16:b8:68: 74:cd:b0:71:0e:ae:95:22:a8:1f:05:61:c2:57:d6: a3:70:36:3c:1d:7c:16:d5:2c:a7:b8:43:87:e4:c7: 87:cb:0d:93:8f:c7:c7:15:a3:1a:6e:2e:1f:04:a1: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:85:62:05:21:85:42:3F:1A:96:BE:AA:77:BC:3F:0E:DF:F1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/473f7632-25d5-3bd3-aa34-135b373772ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c2:61:43:4f:e0:62:7c:a5:30:ec:93:32:20:0c:8e:c4:8d: 23:13:78:3e:f4:3c:5d:0b:ef:09:12:96:f0:c6:75:0b:16:63: e5:f3:24:88:73:26:fe:84:11:ca:1a:7c:cf:87:b2:38:09:25: b0:e1:8b:4a:64:ff:04:35:10:29:1f:98:ea:b3:66:34:ce:ac: c8:d4:ff:c5:05:0c:6f:55:e8:2b:ac:31:d5:bc:58:27:bd:a7: e7:b1:39:c4:c9:46:d5:5a:63:52:27:3f:11:64:b5:3b:52:81: 8d:91:eb:d1:af:1b:06:d7:8f:18:73:c3:31:76:1d:21:d1:93: 26:b3:f6:44:6b:bb:cf:e4:4e:c7:fa:99:af:f4:80:cc:d8:2e: 89:b3:b1:0f:c3:76:30:77:ba:9d:95:08:dd:a4:a4:4c:2a:2b: 1b:4e:c0:e0:55:b9:05:8a:fb:73:e0:6f:85:31:3b:0b:42:dc: 68:63:9e:c5:65:69:ba:33:f5:6c:9b:7a:46:d7:8d:29:46:f3: 77:df:b1:fc:bd:af:0c:df:2c:c4:14:21:a4:59:7f:ce:8a:9d: 92:a6:0b:a5:ee:e4:db:ca:89:5d:d0:71:5f:27:81:39:58:61: 7b:42:8b:d7:00:5e:23:46:b5:b6:77:53:55:f5:06:a4:4b:3b: 11:d3:33:92 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuiN4y7M1D5BmrR+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk MTk2Y2E1MWMtYmQwNi00NGEyLWFmODctMzBmYTNmZjczYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcxkbfD0Ygbzc8Nludzq8H1PgU1HzMVifguN rT69DjZCcGxKoYfYHjefNuJ0RPT4fAznStyQuljdfIQI2knnMzxrBeySRrEihuDV pFF9ukAQYmFQjIOIOs59G3csEZwbr/Yt5xPD4ZOka6BLfLqRO/mV1D76uSvylxeb ZRVfo4dXx6NVk4qh98+VjY8AcHquiN9q9xg+jg+80UqCOH/S24b1j75WxNOTO2ij MNWkG3jtQVuY0SfIgXVbjLRotPlMDlPv6nf0fqhEVFTZIVEWuGh0zbBxDq6VIqgf BWHCV9ajcDY8HXwW1SynuEOH5MeHyw2Tj8fHFaMabi4fBKHJswIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH2WhWIFIYVCPxqWvqp3vD8O3/EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDczZjc2MzItMjVkNS0z YmQzLWFhMzQtMTM1YjM3Mzc3MmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh4Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbMJhQ0/gYnylMOyTMiAMjsSNIxN4PvQ8XQvvCRKW8MZ1CxZj5fMk iHMm/oQRyhp8z4eyOAklsOGLSmT/BDUQKR+Y6rNmNM6syNT/xQUMb1XoK6wx1bxY J72n57E5xMlG1VpjUic/EWS1O1KBjZHr0a8bBtePGHPDMXYdIdGTJrP2RGu7z+RO x/qZr/SAzNguibOxD8N2MHe6nZUI3aSkTCorG07A4FW5BYr7c+BvhTE7C0LcaGOe xWVpujP1bJt6RteNKUbzd9+x/L2vDN8sxBQhpFl/zoqdkqYLpe7k28qJXdBxXyeB OVhhe0KL1wBeI0a1tndTVfUGpEs7EdMzkg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:12 2025 by rpki-client