$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa File: 4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa (raw, json) Hash identifier: f5OchLMkDFGJzPCkS4bZNGtRzQVsUDWZ3Ssh3HDAiAQ= Subject key identifier: 0E:D9:06:97:18:0C:C4:8A:4C:97:38:E0:5C:4D:DF:22:C6:55:62:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B26BB30D8D3323ED7E2E410E1 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa Signing time: Wed 10 Sep 2025 19:25:35 +0000 ROA not before: Wed 10 Sep 2025 19:25:35 +0000 ROA not after: Tue 09 Dec 2025 20:25:35 +0000 asID: 30036 IP address blocks: 2604:2e8c:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:bb:30:d8:d3:32:3e:d7:e2:e4:10:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 10 19:25:35 2025 GMT Not After : Dec 9 20:25:35 2025 GMT Subject: CN=0660a3d9-e29d-48e2-8b58-1c2591d34480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:71:86:e8:14:97:eb:0c:1c:c1:5f:ed:21: bc:54:1f:d0:08:93:50:05:c4:1e:ba:7b:2f:8f:23: c7:b4:1d:5f:98:7e:12:65:06:b9:d8:b1:34:3d:a3: 64:f4:93:8a:68:ab:c2:3a:ae:07:8d:6b:a1:20:86: 9b:aa:05:f7:44:c9:11:5d:1b:a9:76:4f:c0:b9:05: 21:8a:15:57:f3:6f:da:d6:87:35:e0:7c:12:2e:ad: f1:4f:25:ff:7b:d0:92:70:b9:73:9f:c3:54:69:39: 9a:a1:2d:be:01:dc:a9:c6:58:58:10:cb:01:27:05: 47:2c:ad:2a:5a:9c:32:a1:34:94:12:16:13:af:12: 86:7a:9f:9c:bf:5c:98:e1:1b:24:ef:24:e0:6a:f9: e9:ef:df:92:28:c1:db:04:31:1f:d4:27:20:16:1a: 24:de:57:67:39:8a:74:39:2c:8d:b0:28:b7:70:78: a1:19:f7:e1:97:5c:52:1c:80:79:94:52:ce:87:59: a1:49:35:a3:9b:a3:f4:3e:6b:6d:39:f8:2b:43:76: 9e:59:2d:4f:9a:56:5b:38:4d:fd:55:f2:62:67:58: 45:4b:5a:14:41:1a:8d:d4:50:46:37:70:27:bd:44: 98:ba:86:93:9e:ab:c1:4a:8b:47:63:95:3c:62:55: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D9:06:97:18:0C:C4:8A:4C:97:38:E0:5C:4D:DF:22:C6:55:62:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4d5ad1de-db18-3492-9d9f-3c7293419ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d8:06:4c:29:dc:a6:e8:d2:fb:d4:6d:3a:c6:97:07:f2:b2: 64:83:a5:8b:a1:31:6d:46:f4:bd:46:7b:58:f6:fd:b6:cc:37: 85:61:5a:1d:20:8f:24:f3:4b:67:3a:37:c3:47:e5:11:00:6e: c8:00:d4:0f:7d:23:ff:f4:05:32:ea:28:7c:6b:09:3c:65:9d: 63:0a:84:44:ea:d6:89:92:b3:db:df:52:65:c3:c0:60:e7:7e: aa:f7:04:09:55:21:28:be:dd:0a:5e:4d:d7:93:3d:9c:16:ac: c8:94:76:3f:6a:c9:e1:c1:63:53:d7:33:fb:eb:13:cf:4d:7f: c0:2e:9b:e7:6a:1a:69:e3:3a:74:5f:55:b7:46:9c:a7:68:50: 26:c2:57:2b:01:a6:0c:d6:a0:6d:67:60:c3:5c:82:65:c3:0e: ea:97:63:ea:e3:45:bb:06:9f:dd:45:e5:a8:9d:47:d0:78:ad: ee:d1:41:2a:99:61:27:bb:83:c0:9c:92:e6:2e:08:46:a1:f2: b8:23:74:c8:f2:bd:5a:0d:52:f2:2b:0e:8d:83:64:ff:73:db: 74:2f:c6:fc:a7:d4:63:50:ae:a8:11:74:48:9f:ba:75:66:00: 37:f1:9c:04:25:bc:4c:38:de:62:4d:da:39:35:93:8c:c3:01: 8f:7f:5d:dd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsmuzDY0zI+1+LkEOEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxMDE5MjUzNVoXDTI1MTIwOTIwMjUzNVowLzEtMCsGA1UEAxMk MDY2MGEzZDktZTI5ZC00OGUyLThiNTgtMWMyNTkxZDM0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw5xhugUl+sMHMFf7SG8VB/QCJNQBcQeunsv jyPHtB1fmH4SZQa52LE0PaNk9JOKaKvCOq4HjWuhIIabqgX3RMkRXRupdk/AuQUh ihVX82/a1oc14HwSLq3xTyX/e9CScLlzn8NUaTmaoS2+AdypxlhYEMsBJwVHLK0q WpwyoTSUEhYTrxKGep+cv1yY4Rsk7yTgavnp79+SKMHbBDEf1CcgFhok3ldnOYp0 OSyNsCi3cHihGffhl1xSHIB5lFLOh1mhSTWjm6P0PmttOfgrQ3aeWS1PmlZbOE39 VfJiZ1hFS1oUQRqN1FBGN3AnvUSYuoaTnqvBSotHY5U8YlWsSwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA7ZBpcYDMSKTJc44FxN3yLGVWLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGQ1YWQxZGUtZGIxOC0z NDkyLTlkOWYtM2M3MjkzNDE5ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXdgGTCncpujS+9RtOsaXB/KyZIOli6ExbUb0vUZ7WPb9tsw3hWFa HSCPJPNLZzo3w0flEQBuyADUD30j//QFMuoofGsJPGWdYwqEROrWiZKz299SZcPA YOd+qvcECVUhKL7dCl5N15M9nBasyJR2P2rJ4cFjU9cz++sTz01/wC6b52oaaeM6 dF9Vt0acp2hQJsJXKwGmDNagbWdgw1yCZcMO6pdj6uNFuwaf3UXlqJ1H0Hit7tFB KplhJ7uDwJyS5i4IRqHyuCN0yPK9Wg1S8isOjYNk/3PbdC/G/KfUY1CuqBF0SJ+6 dWYAN/GcBCW8TDjeYk3aOTWTjMMBj39d3Q== -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:04 2025 by rpki-client