$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/968786a0-565e-36ca-a293-bdfd519f3fad.roa File: 968786a0-565e-36ca-a293-bdfd519f3fad.roa (raw, json) Hash identifier: CTA32Yj/FsUk2UHMhL3Y5xwl+eSDhdOUTw9hoeC+clY= Subject key identifier: 76:13:9C:DE:3E:08:F1:CB:C3:AB:86:CF:F0:7E:66:E4:38:F9:3E:8B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BAF3E253A7788B6E485EE9380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/968786a0-565e-36ca-a293-bdfd519f3fad.roa Signing time: Wed 29 Oct 2025 16:59:23 +0000 ROA not before: Wed 29 Oct 2025 16:59:23 +0000 ROA not after: Tue 27 Jan 2026 17:59:23 +0000 asID: 30036 IP address blocks: 2604:2e8f:a000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:3e:25:3a:77:88:b6:e4:85:ee:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 29 16:59:23 2025 GMT Not After : Jan 27 17:59:23 2026 GMT Subject: CN=aec1b710-7761-4274-9d98-5162393b8bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:b8:85:01:86:02:57:66:90:5b:63:ed:e3: c6:f8:22:21:f0:13:7c:37:b9:02:21:81:fe:ce:bf: 02:8a:fc:ac:ed:79:8a:ba:d3:0a:65:a5:2e:7c:1c: 7c:04:e6:bd:8e:68:28:86:6e:15:4f:ec:e9:33:37: 81:3e:44:a0:ef:e3:e8:4b:e6:bf:c6:43:21:88:61: 95:63:c1:3f:88:ab:23:30:4f:71:01:58:63:fe:a0: 8f:bd:b1:43:5c:10:78:bb:2e:38:76:73:92:f4:25: a0:ce:64:37:6d:e8:0e:a1:8b:25:48:65:07:ef:24: 59:e5:97:ba:e1:3a:3c:87:7a:44:99:b8:db:dd:33: bb:81:d5:fd:ce:d4:75:31:9d:6a:6e:72:79:ef:8c: b7:ed:d6:bb:3f:e7:2a:3c:ad:ed:22:ea:59:99:49: e6:c0:56:97:63:ac:2f:6a:e1:f7:ce:17:c6:22:a0: fd:57:ed:69:4a:97:85:d5:00:15:8d:4c:a1:74:ff: 8e:a9:c2:73:47:22:a8:78:dc:ea:74:4f:ab:fb:8e: 92:98:7e:d2:cc:27:49:69:ca:c9:9c:87:77:4d:b8: ff:a3:11:0a:bd:20:9d:c9:b8:a3:51:00:9c:f2:37: e3:0a:16:53:0e:4d:97:ec:cd:4d:1a:0f:fb:1c:0b: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:13:9C:DE:3E:08:F1:CB:C3:AB:86:CF:F0:7E:66:E4:38:F9:3E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/968786a0-565e-36ca-a293-bdfd519f3fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8f:a000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:be:3d:12:9a:a1:05:c8:d7:cb:36:66:c6:80:85:77:38:c7: 63:ce:b1:40:5e:27:cd:11:7a:47:b8:50:f4:ac:34:ab:8a:27: 18:4c:cc:31:6c:3e:30:b8:df:51:13:2e:8b:f3:bb:48:33:ed: c3:a8:e2:73:9f:59:28:5e:ec:3c:2f:f6:22:28:b0:09:52:24: c3:34:11:87:5b:bc:81:6a:3b:0a:60:75:31:16:e1:ee:61:c1: 32:51:e2:2f:d5:d7:69:24:b4:a9:bf:02:f7:c5:65:fa:1c:f1: ed:e1:75:c3:78:25:6b:4b:e9:14:3e:b3:4a:54:eb:9f:ee:dc: fc:29:c2:df:64:34:c9:93:ad:c4:23:95:d4:77:9e:72:0f:bd: ef:92:9c:b8:66:b5:c8:92:08:ee:b2:52:90:15:e1:8e:97:7b: a3:67:9b:ae:fc:65:19:31:04:bd:ae:cf:c8:1b:1a:c3:16:7c: 0d:c4:70:08:7b:70:51:1c:f6:46:a5:b9:f7:a3:c4:a8:a4:b6: 0b:a4:83:86:93:30:84:73:41:ad:ef:e9:b3:59:54:fa:b3:38: ec:58:67:10:6a:a6:22:da:f1:c1:3f:3e:22:39:fb:e4:1c:bb: a0:c7:53:23:33:10:48:90:02:d2:29:d2:2d:31:ca:ff:74:a4: bb:13:55:a0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuvPiU6d4i25IXuk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyOTE2NTkyM1oXDTI2MDEyNzE3NTkyM1owLzEtMCsGA1UEAxMk YWVjMWI3MTAtNzc2MS00Mjc0LTlkOTgtNTE2MjM5M2I4YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjom4hQGGAldmkFtj7ePG+CIh8BN8N7kCIYH+ zr8Civys7XmKutMKZaUufBx8BOa9jmgohm4VT+zpMzeBPkSg7+PoS+a/xkMhiGGV Y8E/iKsjME9xAVhj/qCPvbFDXBB4uy44dnOS9CWgzmQ3begOoYslSGUH7yRZ5Ze6 4To8h3pEmbjb3TO7gdX9ztR1MZ1qbnJ574y37da7P+cqPK3tIupZmUnmwFaXY6wv auH3zhfGIqD9V+1pSpeF1QAVjUyhdP+OqcJzRyKoeNzqdE+r+46SmH7SzCdJacrJ nId3Tbj/oxEKvSCdybijUQCc8jfjChZTDk2X7M1NGg/7HAtWmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHYTnN4+CPHLw6uGz/B+ZuQ4+T6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTY4Nzg2YTAtNTY1ZS0z NmNhLWEyOTMtYmRmZDUxOWYzZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuj6Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAor49EpqhBcjXyzZmxoCFdzjHY86xQF4nzRF6R7hQ9Kw0q4onGEzM MWw+MLjfURMui/O7SDPtw6jic59ZKF7sPC/2IiiwCVIkwzQRh1u8gWo7CmB1MRbh 7mHBMlHiL9XXaSS0qb8C98Vl+hzx7eF1w3gla0vpFD6zSlTrn+7c/CnC32Q0yZOt xCOV1Heecg+975KcuGa1yJII7rJSkBXhjpd7o2ebrvxlGTEEva7PyBsawxZ8DcRw CHtwURz2RqW596PEqKS2C6SDhpMwhHNBre/ps1lU+rM47FhnEGqmItrxwT8+Ijn7 5By7oMdTIzMQSJAC0inSLTHK/3SkuxNVoA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:08:14 2025 by rpki-client