$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b1e5c9b-b329-301b-813e-6b6fb2b3cf1b.roa File: 9b1e5c9b-b329-301b-813e-6b6fb2b3cf1b.roa (raw, json) Hash identifier: DMy5lmHZi56vMNyHo7wiFhSMgaPiW9/+9DoXWeQqB7s= Subject key identifier: F8:E9:2D:4C:59:32:F8:6C:DC:B1:51:44:E0:37:19:1C:C3:DD:82:63 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B99D779DF0FCD166CA9EB0D60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b1e5c9b-b329-301b-813e-6b6fb2b3cf1b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e87:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:79:df:0f:cd:16:6c:a9:eb:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=29019cfc-ffe4-4f63-8d4b-936a0142fdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:31:b7:4f:f1:bb:9a:d9:42:1a:1e:9e:9d: 73:c2:af:13:99:67:7a:8f:d1:07:f0:cf:58:f0:19: c5:99:32:f3:f1:bc:0a:b6:8b:f2:5e:83:14:ff:0a: fa:0e:b5:0a:d1:15:63:ec:52:35:18:14:4e:53:0b: 8a:6c:a8:fe:96:bd:00:85:b4:aa:7e:93:94:4a:cb: c8:1b:25:8d:70:19:6b:10:f7:f0:80:9e:a1:65:04: e4:cd:55:81:f7:3e:56:ca:20:62:2b:13:fc:5b:8b: 1d:f2:e9:1d:c6:a4:1f:1c:34:fa:b7:4e:67:0d:8e: ab:1a:17:31:20:a0:cb:30:58:4c:eb:61:87:e3:d9: 69:c2:4f:b9:fc:53:8d:7b:09:81:5c:ba:c1:c3:0d: d9:ec:89:ba:8d:23:e7:4c:66:56:81:d8:f6:56:7e: 00:73:ba:5b:b3:b0:25:fb:ef:87:63:bd:48:45:6f: 7d:65:3f:ad:59:ab:0f:29:d5:76:35:aa:44:61:f3: 40:f2:f3:0e:44:2f:94:4a:72:bd:85:9a:3f:a7:7d: ea:dd:06:10:b6:f2:c3:c9:a0:80:e5:b4:d8:9c:96: e2:db:c4:e0:c9:3d:93:77:50:5c:f5:35:9d:80:da: 45:88:bf:a1:21:69:ea:5d:fd:8d:59:6c:a8:d6:d0: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E9:2D:4C:59:32:F8:6C:DC:B1:51:44:E0:37:19:1C:C3:DD:82:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b1e5c9b-b329-301b-813e-6b6fb2b3cf1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:99:98:50:76:14:c1:09:c3:63:43:58:fc:f9:99:78:75:ab: 27:4e:06:05:20:34:ee:0b:01:bf:e5:ee:0b:d3:79:cf:21:3c: de:2d:5a:c1:50:22:9f:99:be:1d:15:65:d7:af:9d:a0:a3:9d: 07:cd:f8:29:27:ad:6e:f7:9d:ac:fe:fb:10:2b:86:5f:30:7d: 99:54:7f:99:33:5c:ee:87:89:7e:d9:0f:c8:61:ca:03:9b:a1: 0a:d3:64:3d:a0:b3:d6:28:9f:c0:aa:4e:e2:d9:57:db:39:ba: f5:83:c7:6c:3a:ab:06:a1:31:cb:ff:7a:cf:52:7e:ea:e7:f0: 9e:06:7d:29:1a:11:46:7c:9c:01:ca:0b:15:98:0c:83:23:75: 99:cd:6e:ee:77:22:ae:d3:b2:2d:22:bd:1b:99:17:49:a3:ea: e1:44:dc:f3:01:05:87:8c:0a:d0:35:d4:d2:5c:02:58:cd:a1: 04:a7:46:ec:e5:67:f3:87:6d:34:4c:79:b6:07:1b:e1:a8:a5: 93:69:e5:14:d6:29:62:fa:22:f3:3b:7d:61:1e:02:16:c7:1e: c4:c2:90:b2:d4:be:bb:67:c4:e8:9c:b7:53:a8:ec:33:c1:3b: 6b:cc:17:3f:e4:40:cd:cd:ab:c0:6d:84:98:d7:0d:d4:e1:6b: e5:f1:d3:d5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuZ13nfD80WbKnrDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjkwMTljZmMtZmZlNC00ZjYzLThkNGItOTM2YTAxNDJmZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApekxt0/xu5rZQhoenp1zwq8TmWd6j9EH8M9Y 8BnFmTLz8bwKtovyXoMU/wr6DrUK0RVj7FI1GBROUwuKbKj+lr0AhbSqfpOUSsvI GyWNcBlrEPfwgJ6hZQTkzVWB9z5WyiBiKxP8W4sd8ukdxqQfHDT6t05nDY6rGhcx IKDLMFhM62GH49lpwk+5/FONewmBXLrBww3Z7Im6jSPnTGZWgdj2Vn4Ac7pbs7Al +++HY71IRW99ZT+tWasPKdV2NapEYfNA8vMORC+USnK9hZo/p33q3QYQtvLDyaCA 5bTYnJbi28TgyT2Td1Bc9TWdgNpFiL+hIWnqXf2NWWyo1tA9uwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPjpLUxZMvhs3LFRROA3GRzD3YJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWIxZTVjOWItYjMyOS0z MDFiLTgxM2UtNmI2ZmIyYjNjZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJpmYUHYUwQnDY0NY/PmZeHWrJ04GBSA07gsBv+XuC9N5zyE83i1a wVAin5m+HRVl16+doKOdB834KSetbvedrP77ECuGXzB9mVR/mTNc7oeJftkPyGHK A5uhCtNkPaCz1iifwKpO4tlX2zm69YPHbDqrBqExy/96z1J+6ufwngZ9KRoRRnyc AcoLFZgMgyN1mc1u7ncirtOyLSK9G5kXSaPq4UTc8wEFh4wK0DXU0lwCWM2hBKdG 7OVn84dtNEx5tgcb4ailk2nlFNYpYvoi8zt9YR4CFscexMKQstS+u2fE6Jy3U6js M8E7a8wXP+RAzc2rwG2EmNcN1OFr5fHT1Q== -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:16 2025 by rpki-client