$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa File: 5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa (raw, json) Hash identifier: +GBkZ7Pdu+daZZL7G1MhHTLKkQ2eVRXtj2wL4wS6HOw= Subject key identifier: BA:B2:28:03:A8:E2:06:02:F1:DF:C5:94:75:D6:A1:BF:9C:EE:C3:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BACC556FE0877213C550E9C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa Signing time: Tue 28 Oct 2025 19:44:21 +0000 ROA not before: Tue 28 Oct 2025 19:44:21 +0000 ROA not after: Mon 26 Jan 2026 20:44:21 +0000 asID: 30036 IP address blocks: 2604:2e8f:9c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:c5:56:fe:08:77:21:3c:55:0e:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 28 19:44:21 2025 GMT Not After : Jan 26 20:44:21 2026 GMT Subject: CN=42525b79-d1c4-4f53-b511-e89ba79ac7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:f4:c3:69:a2:be:ab:ff:3d:45:73:5f:fd: 4d:f0:c0:f7:38:16:3f:dc:9e:47:17:fd:4d:81:eb: 6d:47:de:2e:7b:fc:b5:7e:d9:77:3f:00:75:f6:23: fe:f1:27:6c:7a:35:68:bc:13:57:06:fe:c8:37:47: 39:b5:02:38:8a:30:d6:61:9f:5f:e9:36:05:b2:df: 49:e1:72:6e:47:2b:46:11:99:d2:ee:ce:f9:c3:2d: e1:81:3c:f6:60:a2:c7:81:ba:44:8b:bc:a4:e3:19: e4:fd:37:83:bd:f1:db:3b:76:05:5d:35:ab:e9:82: 16:0f:89:8f:eb:ea:e2:ff:2b:b7:65:19:26:2a:6b: 9a:7d:58:7e:4f:a1:ba:2d:50:36:8c:9a:4c:61:ec: b7:0b:63:89:cb:fb:9f:d8:91:d7:42:5a:c7:cf:89: ba:5e:56:53:cb:43:7b:27:4a:e5:83:82:22:7a:79: a3:03:91:ac:52:a5:dd:dd:b5:42:19:d3:81:ef:54: b1:b0:a3:aa:af:b6:36:95:9f:4a:2b:91:57:84:69: f1:44:21:b4:03:f5:43:a1:11:17:9e:2f:cf:4f:d9: 25:f6:ba:63:eb:f4:e0:8b:ba:f4:f6:ae:73:af:57: 4c:01:52:6e:d1:27:46:bf:64:e5:94:c7:c0:f0:0b: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B2:28:03:A8:E2:06:02:F1:DF:C5:94:75:D6:A1:BF:9C:EE:C3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f174a83-f855-3fb1-877a-d38cdec4e0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:9c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c2:11:3e:07:a7:a6:00:ee:60:01:c3:8b:da:ec:1f:e0:08: a7:db:cb:09:da:46:54:37:0a:5f:1c:09:22:20:40:65:2c:15: 54:89:43:99:c1:96:9d:fc:33:5e:d1:ae:ad:be:1f:90:65:d3: 8d:d9:2e:c7:a9:51:0f:ff:b8:18:bc:d9:cd:09:a3:5b:bd:ed: 98:36:00:bf:f1:b6:73:06:54:30:0a:22:1b:c5:76:2d:80:80: 03:17:44:71:f1:3f:8c:cc:d5:6c:7c:a2:e6:b1:dc:4e:e9:f7: 4e:35:31:8b:4a:22:a9:02:c7:df:f2:5d:a7:19:3d:2f:d2:59: 78:24:22:06:57:df:17:d7:94:b2:4b:1d:0a:2a:d6:db:39:15: 77:b3:2f:4a:dc:79:60:76:19:80:55:50:db:1c:f8:0f:39:da: 13:b0:8a:ac:e4:8f:43:90:67:b8:dc:8c:48:97:68:90:5f:2a: 9e:cc:6d:f6:c9:11:4d:47:2e:45:83:0d:9f:38:23:75:95:7a: b6:94:dc:e6:ca:aa:2c:7e:f6:d1:8d:6a:84:36:37:af:7b:33: 2e:4d:eb:1a:e6:dc:d9:ae:42:29:56:82:f7:83:c6:42:d9:a0: 89:80:90:79:37:47:33:d5:4b:0b:46:39:64:29:bf:08:19:02: b6:d7:3d:30 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEusxVb+CHchPFUOnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyODE5NDQyMVoXDTI2MDEyNjIwNDQyMVowLzEtMCsGA1UEAxMk NDI1MjViNzktZDFjNC00ZjUzLWI1MTEtZTg5YmE3OWFjN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvz0w2mivqv/PUVzX/1N8MD3OBY/3J5HF/1N gettR94ue/y1ftl3PwB19iP+8SdsejVovBNXBv7IN0c5tQI4ijDWYZ9f6TYFst9J 4XJuRytGEZnS7s75wy3hgTz2YKLHgbpEi7yk4xnk/TeDvfHbO3YFXTWr6YIWD4mP 6+ri/yu3ZRkmKmuafVh+T6G6LVA2jJpMYey3C2OJy/uf2JHXQlrHz4m6XlZTy0N7 J0rlg4IienmjA5GsUqXd3bVCGdOB71SxsKOqr7Y2lZ9KK5FXhGnxRCG0A/VDoREX ni/PT9kl9rpj6/Tgi7r09q5zr1dMAVJu0SdGv2TllMfA8AujpQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLqyKAOo4gYC8d/FlHXWob+c7sN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYxNzRhODMtZjg1NS0z ZmIxLTg3N2EtZDM4Y2RlYzRlMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj5ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgMIRPgenpgDuYAHDi9rsH+AIp9vLCdpGVDcKXxwJIiBAZSwVVIlD mcGWnfwzXtGurb4fkGXTjdkux6lRD/+4GLzZzQmjW73tmDYAv/G2cwZUMAoiG8V2 LYCAAxdEcfE/jMzVbHyi5rHcTun3TjUxi0oiqQLH3/Jdpxk9L9JZeCQiBlffF9eU sksdCirW2zkVd7MvStx5YHYZgFVQ2xz4DznaE7CKrOSPQ5BnuNyMSJdokF8qnsxt 9skRTUcuRYMNnzgjdZV6tpTc5sqqLH720Y1qhDY3r3szLk3rGubc2a5CKVaC94PG QtmgiYCQeTdHM9VLC0Y5ZCm/CBkCttc9MA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:35 2025 by rpki-client