$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa File: 525a8858-0ad9-37d9-901c-8c74bef96b29.roa (raw, json) Hash identifier: VYrnA/1ZUV0g0vccan+b47MRaOU+2WkAUY04PLjKtes= Subject key identifier: C2:2E:03:9B:1C:09:8A:0E:81:BA:87:D0:19:F5:5E:8C:25:B9:FA:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BBB75A1416EB20A2F392D7980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8d:7800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a1:41:6e:b2:0a:2f:39:2d:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=6de425ed-236a-4e96-b4ed-2e9a09976fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:97:8d:b4:68:c0:64:26:df:24:c5:f3:26: 84:86:6b:45:31:a1:2c:92:c5:79:34:98:a4:25:55: 82:28:da:da:f2:12:d3:4f:02:09:11:b9:9b:22:0d: 86:58:2a:5c:11:70:2c:fa:aa:a5:b3:50:e5:8d:25: 37:f9:62:1a:e8:b7:e8:63:5f:8a:e2:0d:97:92:3c: 92:b5:7a:c0:84:36:c9:e4:01:d5:25:93:be:85:a6: 9d:6a:bf:b2:91:34:11:64:b3:82:15:c9:67:bd:90: 45:85:a6:e5:cf:00:4c:18:16:e3:64:d5:2a:ac:af: 72:34:d6:ad:16:58:34:cc:2f:f6:35:46:d5:30:f2: 0a:a7:27:ba:e8:5d:86:3f:df:dc:8a:67:22:f1:22: 45:3f:a6:12:01:6b:aa:d8:31:1d:92:87:af:26:e6: ba:3d:00:12:65:7a:03:42:f0:41:fb:9f:76:4d:ec: a8:e0:a1:06:4c:e7:06:01:a1:63:3f:e6:88:6a:67: b2:85:58:d4:97:15:7c:12:1f:36:bd:fe:ad:6e:5c: 78:a1:a0:ef:f4:ab:5a:db:c5:16:83:c8:63:9e:55: 1b:55:ff:69:ab:f4:c2:83:56:7d:e4:3f:db:63:95: 58:a0:d0:d3:4b:e7:4a:31:6d:97:a3:e3:88:39:9c: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2E:03:9B:1C:09:8A:0E:81:BA:87:D0:19:F5:5E:8C:25:B9:FA:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/525a8858-0ad9-37d9-901c-8c74bef96b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:7800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:01:ea:98:1c:da:d6:e6:0a:4a:e6:b2:18:31:1f:7d:be:b9: 19:d9:5e:7b:02:ae:fa:de:d4:8c:f5:1a:46:12:0f:aa:f8:15: ed:8b:d3:c3:d0:7e:c5:3d:07:ae:8e:d3:fe:7f:ac:28:ae:69: 2d:a9:26:54:ce:9d:9d:c0:96:e7:4c:a7:97:d6:d2:73:6a:b4: 57:25:3d:66:14:74:8b:ca:82:b1:f7:31:c5:d7:af:a0:a0:59: 78:54:9e:65:bd:03:14:33:f8:b2:7c:40:a0:91:1b:8d:a3:5f: af:dc:cb:d4:a3:55:96:a9:6e:09:33:fc:1e:57:d3:be:9e:71: de:9c:1d:e2:4c:8e:2a:4b:b5:52:3c:11:5e:61:fc:09:da:ce: 7e:e3:39:62:54:2e:4b:a1:73:30:8f:cf:12:50:b1:f8:98:32: a4:2a:86:1e:e2:30:26:e9:16:22:e1:4b:98:95:6c:ce:46:8b: f6:a4:18:17:fa:c0:58:7d:35:38:38:c2:88:ec:3b:6c:45:cc: 6a:ae:ff:17:eb:14:f7:21:30:05:d5:15:88:81:0d:61:58:74: 35:98:81:d3:a1:e9:c2:31:21:ab:8b:39:7a:b5:db:41:3e:bd: 3c:69:9e:42:3f:b8:ca:80:c0:9c:ba:50:78:c5:b9:0e:4e:ec: bc:2a:6d:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu7daFBbrIKLzkteYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NmRlNDI1ZWQtMjM2YS00ZTk2LWI0ZWQtMmU5YTA5OTc2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx+XjbRowGQm3yTF8yaEhmtFMaEsksV5NJik JVWCKNra8hLTTwIJEbmbIg2GWCpcEXAs+qqls1DljSU3+WIa6LfoY1+K4g2XkjyS tXrAhDbJ5AHVJZO+haadar+ykTQRZLOCFclnvZBFhablzwBMGBbjZNUqrK9yNNat Flg0zC/2NUbVMPIKpye66F2GP9/cimci8SJFP6YSAWuq2DEdkoevJua6PQASZXoD QvBB+592Teyo4KEGTOcGAaFjP+aIameyhVjUlxV8Eh82vf6tblx4oaDv9Kta28UW g8hjnlUbVf9pq/TCg1Z95D/bY5VYoNDTS+dKMW2Xo+OIOZw0xwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMIuA5scCYoOgbqH0Bn1XowlufqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNTI1YTg4NTgtMGFkOS0z N2Q5LTkwMWMtOGM3NGJlZjk2YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujXgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZQHqmBza1uYKSuayGDEffb65GdleewKu+t7UjPUaRhIPqvgV7YvT w9B+xT0Hro7T/n+sKK5pLakmVM6dncCW50ynl9bSc2q0VyU9ZhR0i8qCsfcxxdev oKBZeFSeZb0DFDP4snxAoJEbjaNfr9zL1KNVlqluCTP8HlfTvp5x3pwd4kyOKku1 UjwRXmH8CdrOfuM5YlQuS6FzMI/PElCx+JgypCqGHuIwJukWIuFLmJVszkaL9qQY F/rAWH01ODjCiOw7bEXMaq7/F+sU9yEwBdUViIENYVh0NZiB06HpwjEhq4s5erXb QT69PGmeQj+4yoDAnLpQeMW5Dk7svCptoQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:49:35 2025 by rpki-client