$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json) Hash identifier: nWNJ+bOsVlMrkkiCE+RyQMWT9/RKvp47IqQAsl0LVjI= Subject key identifier: 9E:CB:C5:E4:85:E9:3B:BD:BE:2E:F5:46:39:97:C6:4C:FB:BF:55:B5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A84124728AA6C3A71FE682080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e8a:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:47:28:aa:6c:3a:71:fe:68:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3d6d5131-3e39-43e2-b621-1825874945fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:b7:e1:0e:2c:42:77:43:2e:b0:89:f6:64: de:5a:50:0d:1d:13:f9:f7:d2:c1:52:ba:dd:ee:da: 48:c0:00:c9:5c:9e:6f:c1:3f:d9:1d:51:9f:d8:47: 98:1f:b4:95:ac:46:df:28:1c:11:57:7d:43:ed:04: 3d:9d:dc:c6:49:45:17:7b:13:ad:50:4e:d9:dd:12: 15:fe:45:5c:3e:26:77:83:65:dd:1d:79:bb:35:d3: f3:2d:02:fd:4b:39:7c:2c:b0:7d:4b:df:f6:93:d9: c7:b0:2e:0e:50:0c:49:a7:33:df:22:e4:e5:0c:29: 1b:d0:e9:51:6e:a1:8a:91:a5:92:e2:76:c2:bb:d3: 6b:fa:f9:4e:10:90:e5:e3:dd:17:af:0b:08:6f:df: af:4e:93:38:bc:f0:e2:5a:fb:4e:6f:1a:fb:9b:3e: fc:b2:73:ef:fe:65:dc:b9:ac:ca:29:a8:0b:f8:4a: 60:10:fb:ab:c4:39:9d:6e:8f:b3:bb:bf:94:09:ed: 59:c3:45:eb:6f:33:2c:7b:f8:de:4a:ab:ec:62:57: 1b:03:da:6b:f2:8b:8d:61:46:98:fe:e6:20:63:19: b2:fd:a7:c6:41:d7:16:a4:18:19:ac:86:64:9d:66: ee:5c:74:e5:f2:f4:7d:b1:11:d3:a7:d5:d1:37:97: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:C5:E4:85:E9:3B:BD:BE:2E:F5:46:39:97:C6:4C:FB:BF:55:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:b4:c0:9a:31:88:06:4d:8b:7a:9f:df:a9:71:e2:28:48: 2c:77:2b:5c:40:06:17:e3:be:e7:cd:38:83:c9:81:62:85:d1: 9e:6d:52:c9:e1:ce:0d:89:9a:be:a1:ba:98:f3:02:9a:37:a4: 18:80:dd:83:00:12:58:78:51:00:62:08:e9:d6:c6:b1:2e:88: ff:b8:d1:2d:8d:19:ee:36:38:9f:ed:8e:d7:fa:bd:d3:14:e3: 07:7c:48:8f:83:29:67:bf:56:a3:98:73:08:72:00:f4:be:8e: 4f:5d:e3:00:0d:21:90:1b:12:cf:68:df:51:6b:3c:a8:ef:6a: 44:98:09:b0:b8:71:aa:ba:42:3d:79:c1:81:cc:1a:b5:00:88: 63:85:36:37:e9:9a:d6:6e:85:25:43:c0:df:27:3e:8a:24:1b: 6c:ff:cd:10:25:5e:b3:3b:31:9e:e8:94:c0:2d:bd:94:b9:8f: ba:b4:3a:01:11:f2:16:4b:e6:97:e4:67:6a:6f:a0:9d:e1:7f: 24:1b:00:04:ce:82:71:35:a1:6b:f9:86:1a:f3:94:21:b4:d1: 71:fe:a2:af:45:e4:39:cf:19:b3:da:e4:8a:ae:c0:8d:df:ce: 38:d8:41:cb:7c:42:a5:93:54:72:3c:43:b7:ce:e3:b8:4d:e9: 21:84:e7:35 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEkcoqmw6cf5oIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2Q2ZDUxMzEtM2UzOS00M2UyLWI2MjEtMTgyNTg3NDk0NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7+34Q4sQndDLrCJ9mTeWlANHRP599LBUrrd 7tpIwADJXJ5vwT/ZHVGf2EeYH7SVrEbfKBwRV31D7QQ9ndzGSUUXexOtUE7Z3RIV /kVcPiZ3g2XdHXm7NdPzLQL9Szl8LLB9S9/2k9nHsC4OUAxJpzPfIuTlDCkb0OlR bqGKkaWS4nbCu9Nr+vlOEJDl490XrwsIb9+vTpM4vPDiWvtObxr7mz78snPv/mXc uazKKagL+EpgEPurxDmdbo+zu7+UCe1Zw0XrbzMse/jeSqvsYlcbA9pr8ouNYUaY /uYgYxmy/afGQdcWpBgZrIZknWbuXHTl8vR9sRHTp9XRN5ekowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ7LxeSF6Tu9vi71RjmXxkz7v1W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZjU0MzEtNWZjZS0z NmQwLTg0YTgtMGExOWY3YTAzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATJG0wJoxiAZNi3qf36lx4ihILHcrXEAGF+O+5804g8mBYoXRnm1S yeHODYmavqG6mPMCmjekGIDdgwASWHhRAGII6dbGsS6I/7jRLY0Z7jY4n+2O1/q9 0xTjB3xIj4MpZ79Wo5hzCHIA9L6OT13jAA0hkBsSz2jfUWs8qO9qRJgJsLhxqrpC PXnBgcwatQCIY4U2N+ma1m6FJUPA3yc+iiQbbP/NECVeszsxnuiUwC29lLmPurQ6 ARHyFkvml+Rnam+gneF/JBsABM6CcTWha/mGGvOUIbTRcf6ir0XkOc8Zs9rkiq7A jd/OONhBy3xCpZNUcjxDt87juE3pIYTnNQ== -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:57 2025 by rpki-client