$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa File: a41da2d8-6d56-3524-b868-acd5274597fb.roa (raw, json) Hash identifier: W+mbXwCfPq6TqepINWPZ/KtaoB9O/f+1w2SJVdLlRT4= Subject key identifier: 8C:96:BA:C5:37:F0:20:5C:65:58:8A:14:6E:86:2E:37:54:F9:AD:21 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB45D19C38890EE12D0DE5A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e80::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:19:c3:88:90:ee:12:d0:de:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=7aa7f9f8-76e2-404d-8630-c43e6db34564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:a0:b8:e6:c0:6c:6c:ea:b4:b2:8b:d3:29: 83:2a:9b:3b:42:e6:65:0e:1d:12:46:0c:86:e4:6c: 0e:7c:84:85:70:30:61:4a:ca:a6:72:25:0c:30:01: 76:f0:aa:10:24:e9:5d:4b:4c:3a:a7:f6:08:b8:1e: 25:5b:68:d4:d3:74:f5:98:96:85:d9:95:67:28:b1: de:fe:90:ec:40:22:c9:52:b9:c1:d3:e0:b4:b5:cc: 16:cb:87:0f:de:14:07:06:5d:e2:7a:c6:3b:8f:85: 50:d5:35:e4:b7:1c:2e:e5:2e:f4:25:88:f8:d6:19: 5d:ea:bf:8c:d7:0d:e2:b7:82:3f:51:85:4a:6f:34: af:8e:78:9a:ec:9f:3e:45:9d:dd:0b:7d:b7:c1:c6: 0b:f5:c2:31:9c:a7:6e:2b:a7:b1:ef:c9:84:90:b8: 50:1a:94:11:7e:9a:a3:58:f6:cc:65:54:d8:85:1c: 9f:65:df:c5:25:49:cb:4f:bb:0c:99:53:c1:80:1c: f2:16:06:f5:75:1d:37:4a:9a:c8:69:fa:c4:3d:32: e2:3a:60:9e:e7:58:3b:7b:9c:f9:2f:62:db:ee:0a: e6:5c:97:6a:80:b0:3b:f2:1a:e7:a9:0a:54:65:a9: e8:b8:1e:b0:37:86:75:4d:c7:a8:49:16:f0:5c:2c: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:96:BA:C5:37:F0:20:5C:65:58:8A:14:6E:86:2E:37:54:F9:AD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a41da2d8-6d56-3524-b868-acd5274597fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5b:25:6b:5d:e0:53:86:bd:1c:b1:b4:ab:0f:76:4e:8d:4f: 5b:b8:b4:b9:67:32:07:78:0a:39:13:19:9b:87:05:ab:c2:57: 43:a4:b8:5e:86:ab:e2:1d:d5:73:04:07:b6:20:c1:13:d4:06: 63:30:c5:26:cf:8f:49:5f:b1:81:e6:07:2c:c7:51:35:8c:cd: 16:56:d4:84:58:57:19:00:81:75:f7:91:1d:8d:5f:c1:ae:34: df:f9:5b:bd:53:8e:e5:c5:7c:d8:61:3b:00:1d:1c:5e:d2:21: 4d:5e:4e:b7:b6:f5:3a:3d:b1:44:e4:9b:4e:43:38:f6:7c:de: bb:90:25:62:c0:a9:1e:6c:0d:f0:06:d9:35:70:6c:86:3d:73: 17:62:e0:59:7e:11:0e:4a:0b:fc:77:d1:12:f4:35:ce:7d:1f: fd:79:9b:4f:50:6b:d7:ed:c9:3f:e4:47:f8:e8:e4:3d:3c:4f: 03:28:64:5e:46:e3:af:5b:a6:4c:da:8e:02:4e:53:9c:a9:a6: 2b:5c:02:3c:09:d6:c0:b2:2f:5a:77:83:88:b4:0b:f3:be:8d: b4:39:00:5d:78:25:25:7e:7c:6a:97:88:2c:99:4e:9e:d1:49: ac:a6:15:77:3b:01:38:e0:39:92:f6:9e:c0:b6:94:04:fe:34: 6c:23:d0:27 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XRnDiJDuEtDeWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk N2FhN2Y5ZjgtNzZlMi00MDRkLTg2MzAtYzQzZTZkYjM0NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISguObAbGzqtLKL0ymDKps7QuZlDh0SRgyG 5GwOfISFcDBhSsqmciUMMAF28KoQJOldS0w6p/YIuB4lW2jU03T1mJaF2ZVnKLHe /pDsQCLJUrnB0+C0tcwWy4cP3hQHBl3iesY7j4VQ1TXktxwu5S70JYj41hld6r+M 1w3it4I/UYVKbzSvjnia7J8+RZ3dC323wcYL9cIxnKduK6ex78mEkLhQGpQRfpqj WPbMZVTYhRyfZd/FJUnLT7sMmVPBgBzyFgb1dR03SprIafrEPTLiOmCe51g7e5z5 L2Lb7grmXJdqgLA78hrnqQpUZanouB6wN4Z1TceoSRbwXCyn4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIyWusU38CBcZViKFG6GLjdU+a0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTQxZGEyZDgtNmQ1Ni0z NTI0LWI4NjgtYWNkNTI3NDU5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQugAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOVsla13gU4a9HLG0qw92To1PW7i0uWcyB3gKORMZm4cFq8JXQ6S4 Xoar4h3VcwQHtiDBE9QGYzDFJs+PSV+xgeYHLMdRNYzNFlbUhFhXGQCBdfeRHY1f wa403/lbvVOO5cV82GE7AB0cXtIhTV5Ot7b1Oj2xROSbTkM49nzeu5AlYsCpHmwN 8AbZNXBshj1zF2LgWX4RDkoL/HfREvQ1zn0f/XmbT1Br1+3JP+RH+OjkPTxPAyhk Xkbjr1umTNqOAk5TnKmmK1wCPAnWwLIvWneDiLQL876NtDkAXXglJX58apeILJlO ntFJrKYVdzsBOOA5kvaewLaUBP40bCPQJw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:26 2025 by rpki-client