$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9549f294-648c-38ac-a602-2c5aeb021889.roa File: 9549f294-648c-38ac-a602-2c5aeb021889.roa (raw, json) Hash identifier: K/ydEh5RPXyWuQp7h+YYeNQ0Ao0NVLpHehW3EWeQ9Cw= Subject key identifier: 2A:78:78:B0:AA:7D:E5:DA:5F:74:24:74:4A:25:7E:8B:D4:B7:66:91 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9B8D0812A58A2125F9761F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9549f294-648c-38ac-a602-2c5aeb021889.roa Signing time: Wed 22 Oct 2025 15:42:09 +0000 ROA not before: Wed 22 Oct 2025 15:42:09 +0000 ROA not after: Tue 20 Jan 2026 16:42:09 +0000 asID: 19905 IP address blocks: 2604:2e8f:9800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:8d:08:12:a5:8a:21:25:f9:76:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 22 15:42:09 2025 GMT Not After : Jan 20 16:42:09 2026 GMT Subject: CN=4a627fe0-53b8-4e82-b099-6dca487ed670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:a5:d7:51:92:ba:78:a5:52:19:63:52:20: 1c:6e:6b:bc:c3:59:61:0f:8e:0c:60:f8:03:0e:56: c5:0c:49:8d:60:4d:a0:2c:1f:ba:c5:08:6e:2e:c2: d6:b3:2e:49:bc:b5:66:95:2f:04:56:f4:0d:02:81: eb:96:cd:56:7f:d1:82:1e:10:fa:8e:ce:80:6b:5b: 9d:2f:30:94:64:2a:17:fc:6a:9d:bf:ec:dd:d4:04: b8:1f:41:a9:9d:9b:e6:9b:82:13:eb:6a:2d:ff:c6: 14:13:60:bf:d4:fd:4b:77:28:de:5b:e5:3c:0a:94: fe:44:fb:02:49:c4:51:37:cb:f8:c8:bf:1b:7f:74: 48:ae:37:3d:44:db:81:dc:10:c1:d0:5a:4a:57:82: 4c:6f:b4:04:46:cb:7d:54:ad:b2:f3:a0:25:95:1c: b3:b2:18:3a:af:20:7e:6b:6f:e4:54:06:34:61:ff: db:68:5c:af:13:02:98:cd:3b:52:a5:65:5d:3b:68: b3:a6:cb:b1:d4:c2:cc:fe:32:8c:4d:96:9c:b9:b7: a7:86:f7:14:e1:07:df:19:c6:02:2f:b8:89:54:e7: f3:6b:71:d0:9c:ad:f7:c5:da:6f:5e:07:7c:42:cd: 28:b6:16:4d:01:36:cb:4f:3f:16:e6:7b:20:dd:50: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:78:B0:AA:7D:E5:DA:5F:74:24:74:4A:25:7E:8B:D4:B7:66:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9549f294-648c-38ac-a602-2c5aeb021889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:9800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3a:0a:33:85:ca:65:47:3d:51:bc:1f:65:c7:35:26:3f:78: 23:10:59:a7:91:21:19:bd:34:86:46:ef:63:e9:d7:79:fc:66: 3c:49:58:b1:04:d4:d3:ee:ab:3a:e2:ef:13:d6:32:45:71:df: f8:7d:ea:97:75:55:42:5e:24:23:5e:9d:a4:2a:25:8d:e1:94: 91:65:85:6b:a3:a7:be:72:4e:2f:16:f5:ed:18:52:1b:2f:35: ce:cf:7c:be:14:3d:34:57:61:d5:2a:fe:6c:a6:1c:a6:84:10: 1a:82:b6:43:8b:0b:f8:8f:ab:9c:80:52:79:c3:7d:48:b3:5b: b3:6b:d1:da:cf:76:69:e2:c9:97:27:b9:04:57:29:c8:a1:c6: b7:6b:a9:b9:7c:6a:42:f1:9e:93:75:3a:b5:67:e7:92:d1:a8: af:54:8a:fe:5c:ac:b0:92:5c:9d:c6:64:06:a0:b6:22:4d:e0: dc:0b:85:c6:3e:3c:07:c7:b5:3d:83:d2:cc:c4:3a:c7:84:1d: c2:6f:3c:53:83:e1:44:29:9f:54:91:d9:7f:21:38:ad:c2:03: 8a:0d:89:95:3f:cf:15:7a:09:09:6f:27:03:fa:c8:81:8d:d9: 36:96:43:96:c1:ef:1b:29:ef:12:86:2d:dd:a4:28:7d:8a:3c: 4b:22:fa:7e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEubjQgSpYohJfl2H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMjE1NDIwOVoXDTI2MDEyMDE2NDIwOVowLzEtMCsGA1UEAxMk NGE2MjdmZTAtNTNiOC00ZTgyLWIwOTktNmRjYTQ4N2VkNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXyl11GSunilUhljUiAcbmu8w1lhD44MYPgD DlbFDEmNYE2gLB+6xQhuLsLWsy5JvLVmlS8EVvQNAoHrls1Wf9GCHhD6js6Aa1ud LzCUZCoX/Gqdv+zd1AS4H0GpnZvmm4IT62ot/8YUE2C/1P1LdyjeW+U8CpT+RPsC ScRRN8v4yL8bf3RIrjc9RNuB3BDB0FpKV4JMb7QERst9VK2y86AllRyzshg6ryB+ a2/kVAY0Yf/baFyvEwKYzTtSpWVdO2izpsux1MLM/jKMTZacubenhvcU4QffGcYC L7iJVOfza3HQnK33xdpvXgd8Qs0othZNATbLTz8W5nsg3VDTtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCp4eLCqfeXaX3QkdEolfovUt2aRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTU0OWYyOTQtNjQ4Yy0z OGFjLWE2MDItMmM1YWViMDIxODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj5gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAejoKM4XKZUc9UbwfZcc1Jj94IxBZp5EhGb00hkbvY+nXefxmPElY sQTU0+6rOuLvE9YyRXHf+H3ql3VVQl4kI16dpColjeGUkWWFa6OnvnJOLxb17RhS Gy81zs98vhQ9NFdh1Sr+bKYcpoQQGoK2Q4sL+I+rnIBSecN9SLNbs2vR2s92aeLJ lye5BFcpyKHGt2upuXxqQvGek3U6tWfnktGor1SK/lyssJJcncZkBqC2Ik3g3AuF xj48B8e1PYPSzMQ6x4Qdwm88U4PhRCmfVJHZfyE4rcIDig2JlT/PFXoJCW8nA/rI gY3ZNpZDlsHvGynvEoYt3aQofYo8SyL6fg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:23 2025 by rpki-client