$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa File: 9acc50a4-6e45-334f-a366-718af3497a8b.roa (raw, json) Hash identifier: mSJ1M/T3WFTD1mSJOfy8aWSw3ipQ+DkwKVrunv4j/ao= Subject key identifier: B8:C8:5A:40:9D:59:11:A9:38:3A:E9:47:BC:55:B5:FA:58:9F:A6:35 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B79BCC77873C2B7CBB9393240 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 30036 IP address blocks: 2604:2e8d:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c7:78:73:c2:b7:cb:b9:39:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=7e44c27a-5f03-4f9c-87be-f092f1dee188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:da:e8:e2:3f:b4:86:d3:c1:e7:5e:31:8a: 0b:54:98:40:e3:79:7e:ba:b2:e6:9c:31:33:8b:42: bd:94:67:3c:0b:bf:1d:50:e5:ca:d4:4f:87:87:e1: 57:f9:99:b4:86:cf:52:b2:aa:a3:58:f3:42:93:fd: 5d:5c:aa:54:f9:e0:83:84:8c:37:8d:40:1a:d0:4b: d6:6d:9c:1c:93:77:d3:41:71:52:2f:e2:a2:73:53: 9d:d1:99:ed:c2:ad:a7:72:d8:81:c2:1d:7c:70:f1: 23:75:81:02:64:4d:a4:f5:59:a4:72:2b:db:89:53: e4:e4:ea:fa:2b:04:c6:ca:92:0b:6d:c9:80:f5:84: d2:6d:2a:ae:c5:09:e8:33:4c:01:4c:e7:2c:b1:b6: 1b:52:14:21:35:8d:72:b2:20:01:e6:83:97:39:0b: 56:38:bf:da:36:6b:f9:eb:06:31:b8:fa:4a:3a:65: eb:59:d6:91:0c:24:b7:14:7d:3c:00:1d:d3:73:fe: e0:48:33:37:aa:15:8a:9a:f4:b3:46:5f:2d:7c:fd: 6d:bf:9f:36:31:80:fa:75:9f:2e:4d:f6:d3:08:d9: 30:23:74:c0:27:c4:38:11:a2:72:a4:42:bd:2d:97: 4f:73:52:1a:ad:28:f1:7f:78:e3:5e:c7:1b:55:21: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C8:5A:40:9D:59:11:A9:38:3A:E9:47:BC:55:B5:FA:58:9F:A6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9acc50a4-6e45-334f-a366-718af3497a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7e:af:a5:58:83:59:b4:5b:a1:4c:42:7e:e5:e0:63:30:1e: ae:bf:be:0e:e0:7c:b8:08:db:25:54:7b:44:bc:0e:c1:92:00: 29:9c:05:ca:4d:33:f4:44:73:53:bb:10:27:59:ef:dd:df:ed: c5:b7:c5:db:83:98:ff:0a:5a:bf:0c:f4:a1:5e:b6:21:12:7b: 99:ad:ac:32:86:26:25:21:91:29:58:60:05:b8:5d:4f:3f:3b: 1e:44:18:0a:de:f5:58:b6:8b:9c:5e:88:4a:64:51:39:24:eb: 10:df:4c:70:57:5b:53:19:e9:71:76:9d:8d:29:89:76:36:4f: 76:0f:39:26:62:b8:d0:51:0a:43:05:94:a4:e9:c9:7b:39:39: 23:12:08:e5:04:a7:2e:19:fb:87:35:bd:06:73:c4:43:9f:85: 4c:89:06:e1:8e:6d:04:ec:b6:79:be:21:94:1d:4b:e4:ee:48: 38:37:5d:65:6d:70:be:bc:aa:68:29:8d:00:20:0b:01:9a:a6: 90:4c:b5:8f:4a:5b:d1:d1:7f:f5:9f:8a:2b:03:f1:ae:1a:53: 0e:2b:c2:d8:b7:63:7c:6a:11:61:45:f8:7d:3d:8e:c9:62:a5: e3:b1:2d:60:9b:6f:77:8f:36:17:a1:38:dc:f9:e3:97:ca:d4: 0b:94:c5:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt5vMd4c8K3y7k5MkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk N2U0NGMyN2EtNWYwMy00ZjljLTg3YmUtZjA5MmYxZGVlMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWra6OI/tIbTwedeMYoLVJhA43l+urLmnDEz i0K9lGc8C78dUOXK1E+Hh+FX+Zm0hs9SsqqjWPNCk/1dXKpU+eCDhIw3jUAa0EvW bZwck3fTQXFSL+Kic1Od0Zntwq2nctiBwh18cPEjdYECZE2k9VmkcivbiVPk5Or6 KwTGypILbcmA9YTSbSquxQnoM0wBTOcssbYbUhQhNY1ysiAB5oOXOQtWOL/aNmv5 6wYxuPpKOmXrWdaRDCS3FH08AB3Tc/7gSDM3qhWKmvSzRl8tfP1tv582MYD6dZ8u TfbTCNkwI3TAJ8Q4EaJypEK9LZdPc1IarSjxf3jjXscbVSG1NwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLjIWkCdWRGpODrpR7xVtfpYn6Y1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWFjYzUwYTQtNmU0NS0z MzRmLWEzNjYtNzE4YWYzNDk3YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujbww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAG36vpViDWbRboUxCfuXgYzAerr++DuB8uAjbJVR7RLwOwZIAKZwF yk0z9ERzU7sQJ1nv3d/txbfF24OY/wpavwz0oV62IRJ7ma2sMoYmJSGRKVhgBbhd Tz87HkQYCt71WLaLnF6ISmRROSTrEN9McFdbUxnpcXadjSmJdjZPdg85JmK40FEK QwWUpOnJezk5IxII5QSnLhn7hzW9BnPEQ5+FTIkG4Y5tBOy2eb4hlB1L5O5IODdd ZW1wvryqaCmNACALAZqmkEy1j0pb0dF/9Z+KKwPxrhpTDivC2LdjfGoRYUX4fT2O yWKl47EtYJtvd482F6E43Pnjl8rUC5TFcg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:43 2025 by rpki-client