$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa File: 4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa (raw, json) Hash identifier: 76u9Skv+DmSw/IEK3c8QXMowG194K9HzfpE6Mp3d5aQ= Subject key identifier: 2F:66:B1:8D:0F:03:4A:5F:EB:AA:02:11:C6:A8:97:A7:11:1D:0E:77 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AF2A35D073F8CB03D6C0AAE90 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa Signing time: Sat 23 Aug 2025 03:35:32 +0000 ROA not before: Sat 23 Aug 2025 03:35:32 +0000 ROA not after: Fri 21 Nov 2025 04:35:32 +0000 asID: 30036 IP address blocks: 2604:2e87:c800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:a3:5d:07:3f:8c:b0:3d:6c:0a:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 23 03:35:32 2025 GMT Not After : Nov 21 04:35:32 2025 GMT Subject: CN=048ce82f-58a4-4249-a123-ef1c486dfde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:44:87:e2:a6:30:e8:f5:54:69:99:c1:ce: 58:5a:64:da:c6:a9:92:72:91:ff:ae:0f:e3:c8:42: f1:5b:ed:cc:36:77:99:6b:d0:6b:31:e5:eb:cb:eb: 5f:5a:ed:06:cc:53:0d:ea:4f:d7:ad:06:7c:3d:8a: d1:0a:16:8d:41:0b:87:4a:45:a5:be:7e:66:bc:d8: 7f:c6:d9:15:cc:f5:3b:a8:3e:22:93:18:1d:ab:b5: d2:26:4b:13:51:35:6d:1c:64:07:b5:1c:96:55:f0: 7d:ad:de:63:54:b2:99:83:b1:cc:74:43:44:65:f8: 94:a4:14:72:ab:72:9a:39:2e:cb:36:1e:9b:8e:d2: 61:3f:0f:17:eb:c6:ab:3f:93:e6:c6:b6:ab:35:71: 02:23:b2:12:fe:a9:6b:45:f7:e7:8f:11:d4:83:95: 29:cb:d2:b5:7d:ec:53:a7:75:34:a7:5f:97:83:fd: 36:fe:e7:b6:0b:7d:8e:48:73:81:59:e4:e4:9d:97: c1:cc:fd:7f:75:62:19:f2:ac:d1:13:de:67:eb:c3: 1c:43:0c:b2:18:1e:44:61:34:8d:4e:04:9f:82:03: 1b:19:47:5a:5f:5e:19:2c:3f:c9:0a:ae:e4:6d:b2: 56:23:36:c7:99:3a:a2:93:5c:62:47:1f:25:4f:6b: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:B1:8D:0F:03:4A:5F:EB:AA:02:11:C6:A8:97:A7:11:1D:0E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d3d801b-0547-38e0-b7eb-5c9a01740a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:c800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:53:a7:db:85:66:c9:00:79:8f:5d:94:7c:36:a1:56:d7:2c: c2:3f:32:8c:e8:54:9d:4a:4d:a3:97:94:4a:73:5a:db:f1:10: 19:aa:1e:3f:ca:25:06:35:2b:ca:9a:c0:dc:6c:be:b4:14:84: b5:03:fc:96:6f:c6:4e:b0:b6:22:05:4f:fa:8b:7d:c0:53:0d: 36:8b:3a:ed:f7:2c:a7:d9:12:b3:cc:61:5c:1a:d2:b8:04:f7: 31:67:be:16:30:c8:de:db:56:69:8e:f1:bb:47:c9:ea:7f:95: ec:56:de:17:6b:56:4c:ee:f5:a7:89:ac:75:98:a4:61:b9:c1: b6:f9:59:3c:9c:e6:2c:78:f9:2f:b6:4c:19:75:1c:ff:a9:cc: de:34:2f:1d:c9:dd:42:af:b6:56:81:a1:e3:02:0c:a9:6f:bb: 65:19:ed:2e:71:24:b0:64:c6:4f:39:cb:c8:65:61:6c:99:f3: a3:be:be:2e:ff:2f:ef:a1:fc:17:57:35:ca:7e:8b:91:2d:37: 1c:f0:aa:a2:a6:5b:f9:db:f0:da:c2:2b:93:12:e9:3f:f6:f1: 5a:b3:43:4e:ce:28:74:83:f9:85:c5:55:2d:a5:e7:83:5a:68: f4:a0:04:40:a0:41:21:1b:6b:93:47:c4:7a:0d:c9:4c:51:b2: 5a:4d:d9:80 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEryo10HP4ywPWwKrpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgyMzAzMzUzMloXDTI1MTEyMTA0MzUzMlowLzEtMCsGA1UEAxMk MDQ4Y2U4MmYtNThhNC00MjQ5LWExMjMtZWYxYzQ4NmRmZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqdEh+KmMOj1VGmZwc5YWmTaxqmScpH/rg/j yELxW+3MNneZa9BrMeXry+tfWu0GzFMN6k/XrQZ8PYrRChaNQQuHSkWlvn5mvNh/ xtkVzPU7qD4ikxgdq7XSJksTUTVtHGQHtRyWVfB9rd5jVLKZg7HMdENEZfiUpBRy q3KaOS7LNh6bjtJhPw8X68arP5PmxrarNXECI7IS/qlrRffnjxHUg5Upy9K1fexT p3U0p1+Xg/02/ue2C32OSHOBWeTknZfBzP1/dWIZ8qzRE95n68McQwyyGB5EYTSN TgSfggMbGUdaX14ZLD/JCq7kbbJWIzbHmTqik1xiRx8lT2sPcwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC9msY0PA0pf66oCEcaol6cRHQ53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQzZDgwMWItMDU0Ny0z OGUwLWI3ZWItNWM5YTAxNzQwYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh8gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkFOn24VmyQB5j12UfDahVtcswj8yjOhUnUpNo5eUSnNa2/EQGaoe P8olBjUryprA3Gy+tBSEtQP8lm/GTrC2IgVP+ot9wFMNNos67fcsp9kSs8xhXBrS uAT3MWe+FjDI3ttWaY7xu0fJ6n+V7FbeF2tWTO71p4msdZikYbnBtvlZPJzmLHj5 L7ZMGXUc/6nM3jQvHcndQq+2VoGh4wIMqW+7ZRntLnEksGTGTznLyGVhbJnzo76+ Lv8v76H8F1c1yn6LkS03HPCqoqZb+dvw2sIrkxLpP/bxWrNDTs4odIP5hcVVLaXn g1po9KAEQKBBIRtrk0fEeg3JTFGyWk3ZgA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:53 2025 by rpki-client