$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa File: 9b970d4e-cc06-30a7-a188-46e717b7337e.roa (raw, json) Hash identifier: x4wHHLGo2CaXq3pOWwWZgsyuV6VNP/+R3+ZLiEFt8G4= Subject key identifier: 69:AD:CA:A0:64:44:9E:E6:8C:C0:98:70:CD:51:B9:9B:E7:CA:28:22 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB45D0D5BE8A14383518E9C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8d:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0d:5b:e8:a1:43:83:51:8e:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d16e1d08-4ca9-4225-aeb7-d75746fc6f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:ee:f6:58:3e:da:cf:f7:e5:08:eb:4b:bb: 56:57:4c:aa:b9:50:9a:27:bf:39:c9:4b:b0:ee:59: 34:41:f9:b2:c0:88:cf:ab:49:fa:12:7b:30:7d:2b: 5c:f4:14:b0:e2:dc:97:6a:76:e5:ea:c9:a6:d4:cf: c5:af:71:89:42:c7:10:21:3f:be:42:f5:c6:6e:07: 49:ea:b4:fa:0c:6d:94:85:89:5a:46:ed:c9:f9:67: bf:f5:74:75:63:02:d6:77:11:8c:60:82:dc:e4:7f: 3a:85:60:7d:d8:7a:b2:68:02:99:e7:33:40:22:53: 5f:cd:78:dc:bc:8c:06:19:57:bd:e3:06:4e:31:b2: d6:ea:f0:9b:76:82:5f:a7:02:53:93:f6:56:ae:a0: 5a:f8:12:9a:bf:f1:20:be:a8:bb:8f:ca:59:4e:e0: a2:9e:8f:c7:af:1a:d8:e5:85:90:17:ee:87:d8:8e: c6:31:b6:49:b7:85:b2:c7:6b:e8:e2:93:86:f0:d1: 97:3d:18:8e:82:a8:aa:18:f5:b9:ba:5e:c3:91:3d: cd:5e:e8:76:41:0a:0b:22:8a:17:f2:30:25:68:dd: 3c:a1:9f:24:20:ce:f7:e0:5e:d7:38:79:19:ba:f8: c5:f1:44:c9:32:f8:3d:ff:95:3e:8f:18:bd:10:4c: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:CA:A0:64:44:9E:E6:8C:C0:98:70:CD:51:B9:9B:E7:CA:28:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9b970d4e-cc06-30a7-a188-46e717b7337e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:3400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:62:87:d7:23:58:84:19:7b:cb:58:84:17:96:7c:e4:bb: c6:41:9d:4b:54:4e:0d:5d:5e:3a:be:c7:82:aa:35:80:a5:4a: 83:b0:dc:0d:d2:08:2f:ce:bd:66:a2:ec:3e:85:85:32:cb:75: 50:20:63:12:89:3e:5e:9d:93:e6:b7:46:1c:00:da:ff:b2:cf: ad:00:35:83:74:78:ef:b7:a8:b8:74:06:cb:96:1c:bd:15:91: f0:27:ba:bc:c8:e3:2c:0d:21:ff:17:a9:0c:aa:7b:be:df:42: ca:a8:1e:75:27:b6:7c:40:26:25:a9:4a:bc:18:93:3c:73:9b: 84:4c:6f:6b:5a:ca:ec:fe:35:dd:8d:dd:43:ea:6d:c5:23:8a: 95:a7:26:7a:62:07:1a:2f:19:64:b4:52:e1:2f:f4:6e:7f:06: e1:7e:7d:d5:35:5f:5a:62:6e:73:e1:38:c8:66:9a:87:4b:47: 46:fd:00:5e:18:1e:fe:44:a3:a8:d1:f6:27:01:45:92:e5:00: c5:ad:de:92:fb:c0:8b:70:0d:bc:d7:2a:14:c8:0d:e5:88:80: 03:b1:a3:b6:9b:4d:99:c1:af:aa:c6:37:98:ef:45:9d:87:eb: f0:ae:20:6c:49:a6:71:bb:d9:80:75:6d:bc:f0:fd:92:a1:d6: f7:d6:95:33 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XQ1b6KFDg1GOnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDE2ZTFkMDgtNGNhOS00MjI1LWFlYjctZDc1NzQ2ZmM2ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrnu9lg+2s/35QjrS7tWV0yquVCaJ785yUuw 7lk0QfmywIjPq0n6EnswfStc9BSw4tyXanbl6smm1M/Fr3GJQscQIT++QvXGbgdJ 6rT6DG2UhYlaRu3J+We/9XR1YwLWdxGMYILc5H86hWB92HqyaAKZ5zNAIlNfzXjc vIwGGVe94wZOMbLW6vCbdoJfpwJTk/ZWrqBa+BKav/Egvqi7j8pZTuCino/HrxrY 5YWQF+6H2I7GMbZJt4Wyx2vo4pOG8NGXPRiOgqiqGPW5ul7DkT3NXuh2QQoLIooX 8jAlaN08oZ8kIM734F7XOHkZuvjF8UTJMvg9/5U+jxi9EEwxSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGmtyqBkRJ7mjMCYcM1RuZvnyigiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWI5NzBkNGUtY2MwNi0z MGE3LWExODgtNDZlNzE3YjczMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujTQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQsdih9cjWIQZe8tYhBeWfOS7xkGdS1RODV1eOr7Hgqo1gKVKg7Dc DdIIL869ZqLsPoWFMst1UCBjEok+Xp2T5rdGHADa/7LPrQA1g3R477eouHQGy5Yc vRWR8Ce6vMjjLA0h/xepDKp7vt9CyqgedSe2fEAmJalKvBiTPHObhExva1rK7P41 3Y3dQ+ptxSOKlacmemIHGi8ZZLRS4S/0bn8G4X591TVfWmJuc+E4yGaah0tHRv0A Xhge/kSjqNH2JwFFkuUAxa3ekvvAi3ANvNcqFMgN5YiAA7GjtptNmcGvqsY3mO9F nYfr8K4gbEmmcbvZgHVtvPD9kqHW99aVMw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:13 2025 by rpki-client