$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/878e92f9-5c0e-3560-9f87-ce96d76073f0.roa File: 878e92f9-5c0e-3560-9f87-ce96d76073f0.roa (raw, json) Hash identifier: srTq/G3YonZwCLRtvEos7XLl9JiBN9A9WuLWHF1OWVA= Subject key identifier: 26:F7:E8:A6:55:FF:09:41:34:79:19:9C:36:62:C7:17:C8:F2:76:00 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B67973B955D7DFD558E6F0180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/878e92f9-5c0e-3560-9f87-ce96d76073f0.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e8b:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3b:95:5d:7d:fd:55:8e:6f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=420bc981-cce7-4213-aad0-29970650d6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:f4:21:8b:28:3a:09:93:13:98:2f:07:c6: d1:84:b0:04:86:47:7d:b1:72:39:ff:43:be:d2:1e: ea:ba:e0:4b:7b:39:ee:98:3d:cb:39:72:d9:d4:e7: 09:ab:37:bd:7c:4e:fd:e8:34:f1:8a:0d:8a:d5:c8: e1:53:05:84:42:26:a9:19:e7:f4:38:5f:37:0c:c4: ab:4c:d5:b0:01:2e:e8:7e:c3:20:73:aa:72:e4:26: 51:2d:73:a8:a9:96:6c:c0:74:2a:99:aa:0d:bd:d3: 8d:82:ef:27:57:ab:b2:42:d4:20:3e:e6:c0:77:44: 68:89:91:74:86:7c:5a:84:b7:f0:99:de:74:3b:a9: 1a:65:ae:c4:99:4e:63:b1:f4:c0:d0:9a:d2:c4:d0: 76:79:45:b3:0b:f0:02:1e:32:de:c8:16:30:4d:2f: 1c:a2:1c:d7:f7:e5:06:a4:35:1e:49:bb:4b:75:95: 8d:0b:67:d9:e7:a6:63:28:59:b3:45:d4:97:6b:67: 35:8d:ce:88:05:0c:16:f8:68:94:0b:3c:81:7f:bb: cb:6f:10:d3:33:85:e4:0f:32:9a:45:78:e7:e1:b5: c0:1c:5a:59:b8:c2:be:a0:45:25:0a:72:e8:92:70: 6b:4f:87:ba:2a:67:13:97:28:3b:c2:37:be:03:de: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F7:E8:A6:55:FF:09:41:34:79:19:9C:36:62:C7:17:C8:F2:76:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/878e92f9-5c0e-3560-9f87-ce96d76073f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9b:be:f0:40:4d:57:7a:40:d8:8a:c4:97:e0:ff:bb:6c:ac: 4f:d7:b0:80:17:8c:cc:d2:aa:32:56:fd:52:b5:df:15:e3:0a: 38:99:e1:74:9e:c4:e3:a8:b4:c8:64:f5:31:35:8c:78:e7:c2: 40:91:71:b8:c0:c7:06:da:1f:8b:3e:9c:80:46:d9:58:65:52: f2:13:7a:0a:f7:28:14:92:5b:eb:17:39:71:d3:0f:d4:38:7d: 07:09:03:55:6c:b8:fe:b7:0b:f6:8e:f4:f8:dc:17:74:99:d8: 1a:aa:5d:db:45:94:16:04:98:88:82:65:aa:66:a3:22:4b:cc: 5d:3a:b7:e6:6c:68:43:57:f2:c4:c4:1d:c5:51:33:7f:a6:7a: 98:e6:93:8a:23:23:f4:98:59:e4:b1:b5:8f:5a:50:98:7f:95: d7:28:28:7d:4c:6f:28:49:70:c6:fe:91:cf:0c:cb:de:e4:b5: 6d:50:ba:e5:f6:ff:79:d3:95:39:7b:ca:bf:84:01:ce:3d:8b: bf:5d:96:94:25:66:5e:a7:0e:d9:67:50:0b:3a:1c:f9:fa:ca: 4f:6d:1e:81:52:40:4f:85:57:0f:2d:d9:6e:dc:24:a2:a9:59: 24:28:e3:76:3a:cb:91:d7:ae:58:9b:ff:70:eb:0f:8c:c8:06: 7a:8f:a3:36 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtnlzuVXX39VY5vAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDIwYmM5ODEtY2NlNy00MjEzLWFhZDAtMjk5NzA2NTBkNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsb0IYsoOgmTE5gvB8bRhLAEhkd9sXI5/0O+ 0h7quuBLeznumD3LOXLZ1OcJqze9fE796DTxig2K1cjhUwWEQiapGef0OF83DMSr TNWwAS7ofsMgc6py5CZRLXOoqZZswHQqmaoNvdONgu8nV6uyQtQgPubAd0RoiZF0 hnxahLfwmd50O6kaZa7EmU5jsfTA0JrSxNB2eUWzC/ACHjLeyBYwTS8cohzX9+UG pDUeSbtLdZWNC2fZ56ZjKFmzRdSXa2c1jc6IBQwW+GiUCzyBf7vLbxDTM4XkDzKa RXjn4bXAHFpZuMK+oEUlCnLoknBrT4e6KmcTlyg7wje+A95a5QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCb36KZV/wlBNHkZnDZixxfI8nYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODc4ZTkyZjktNWMwZS0z NTYwLTlmODctY2U5NmQ3NjA3M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuixAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfZu+8EBNV3pA2IrEl+D/u2ysT9ewgBeMzNKqMlb9UrXfFeMKOJnh dJ7E46i0yGT1MTWMeOfCQJFxuMDHBtofiz6cgEbZWGVS8hN6CvcoFJJb6xc5cdMP 1Dh9BwkDVWy4/rcL9o70+NwXdJnYGqpd20WUFgSYiIJlqmajIkvMXTq35mxoQ1fy xMQdxVEzf6Z6mOaTiiMj9JhZ5LG1j1pQmH+V1ygofUxvKElwxv6RzwzL3uS1bVC6 5fb/edOVOXvKv4QBzj2Lv12WlCVmXqcO2WdQCzoc+frKT20egVJAT4VXDy3Zbtwk oqlZJCjjdjrLkdeuWJv/cOsPjMgGeo+jNg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:23 2025 by rpki-client