$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa File: bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa (raw, json) Hash identifier: WX6ltj1YPPTqi3uAiL6TXBSDQEE2Gsvr9FkmHIhSzTA= Subject key identifier: FC:39:3E:0E:78:8C:F7:05:34:89:78:25:91:86:5E:C3:4E:8A:E5:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB45D40F20295C51E4120B248 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e8e:a800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:40:f2:02:95:c5:1e:41:20:b2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=517e37c4-6a36-4529-bce4-9888f94d2a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:ed:c9:32:15:00:4b:38:9f:60:6a:5c:1e: d3:9a:80:cb:3a:6b:ca:b5:b2:83:72:e0:e6:fa:75: 74:c3:dd:bd:b2:9f:0a:0a:51:71:38:33:3a:51:50: 7e:84:2a:6c:3a:68:56:26:fa:25:f7:1a:d9:7a:24: 3e:d5:41:32:7c:29:39:d6:7b:60:35:88:4f:9a:db: c7:f7:80:58:a3:fb:40:ef:71:e7:ac:88:8e:4d:d9: 11:53:76:a9:2a:de:b3:4d:47:d6:ad:48:23:04:bd: a4:b7:40:d6:72:00:8d:ac:06:a1:22:cc:8d:06:cc: 02:8e:5f:7f:ce:0c:db:ee:b1:97:c9:bb:0d:d8:07: 0a:1b:bf:d4:da:47:f1:81:0c:9d:1d:4f:c4:9b:56: 7b:94:b6:8c:72:1c:94:c1:81:98:a9:bd:30:b9:12: 05:5b:5d:d8:3a:57:7f:6e:7d:fd:d7:ea:a0:b2:b0: 6b:d9:6b:04:8f:19:e9:f5:de:ee:5e:2d:c8:e9:20: 18:78:fb:50:66:85:73:39:8a:3f:ce:52:43:e8:c6: aa:69:28:60:4e:9c:e8:64:ac:67:54:fb:c5:7c:3a: 82:c2:1b:d2:d4:3b:d8:bb:93:54:04:08:37:d2:b2: 64:28:aa:b6:b0:fc:b1:fb:43:4a:13:80:f7:9a:b1: 79:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:39:3E:0E:78:8C:F7:05:34:89:78:25:91:86:5E:C3:4E:8A:E5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf68f4c6-8b76-3744-99bf-a0c5b4b38f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:a800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:53:2c:64:84:f1:32:80:e0:e6:a1:76:ba:2c:74:19:06:8c: ed:ef:33:12:12:c9:42:7e:20:70:4d:e5:91:e7:26:bb:22:36: ae:d9:6a:43:5a:ed:13:02:41:04:cf:7d:ba:07:ee:f1:58:b3: 67:5f:f3:9f:72:a3:8d:82:df:a7:f0:12:40:21:dc:f6:6f:1b: 73:59:0f:19:4e:e8:52:32:70:a5:ab:d0:7e:7e:90:b5:43:d4: 3f:93:43:4a:a6:e3:9f:d0:3b:8c:a5:25:21:f3:48:98:ef:29: 69:c9:68:76:56:b9:68:d5:d5:37:c7:98:18:7a:c6:8a:56:35: 9b:fa:82:ba:0d:4f:88:dd:96:52:8a:f5:ac:3e:6a:2a:10:29: 24:36:31:fa:73:5f:00:4a:d2:6e:cc:98:74:a8:11:72:f4:eb: 06:15:73:fa:9c:61:21:f7:0b:15:0a:96:46:3d:0d:3e:0d:96: e0:fb:3c:c8:9a:5c:37:6b:68:49:0c:dd:00:85:24:ac:d7:a8: 4f:3e:e6:2d:c2:02:bb:94:8f:8e:ab:f9:aa:d5:cb:e6:b8:46: 55:2f:ee:f7:66:eb:c1:11:07:ba:24:8a:ac:51:9a:00:31:3b: 63:db:94:2e:9e:0e:52:b4:f8:0b:e0:2c:56:4d:42:00:8a:fc: 58:03:e3:9c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu0XUDyApXFHkEgskgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NTE3ZTM3YzQtNmEzNi00NTI5LWJjZTQtOTg4OGY5NGQyYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAbtyTIVAEs4n2BqXB7TmoDLOmvKtbKDcuDm +nV0w929sp8KClFxODM6UVB+hCpsOmhWJvol9xrZeiQ+1UEyfCk51ntgNYhPmtvH 94BYo/tA73HnrIiOTdkRU3apKt6zTUfWrUgjBL2kt0DWcgCNrAahIsyNBswCjl9/ zgzb7rGXybsN2AcKG7/U2kfxgQydHU/Em1Z7lLaMchyUwYGYqb0wuRIFW13YOld/ bn391+qgsrBr2WsEjxnp9d7uXi3I6SAYePtQZoVzOYo/zlJD6MaqaShgTpzoZKxn VPvFfDqCwhvS1DvYu5NUBAg30rJkKKq2sPyx+0NKE4D3mrF5jQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPw5Pg54jPcFNIl4JZGGXsNOiuVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2OGY0YzYtOGI3Ni0z NzQ0LTk5YmYtYTBjNWI0YjM4ZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujqgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkFMsZITxMoDg5qF2uix0GQaM7e8zEhLJQn4gcE3lkecmuyI2rtlq Q1rtEwJBBM99ugfu8VizZ1/zn3KjjYLfp/ASQCHc9m8bc1kPGU7oUjJwpavQfn6Q tUPUP5NDSqbjn9A7jKUlIfNImO8paclodla5aNXVN8eYGHrGilY1m/qCug1PiN2W Uor1rD5qKhApJDYx+nNfAErSbsyYdKgRcvTrBhVz+pxhIfcLFQqWRj0NPg2W4Ps8 yJpcN2toSQzdAIUkrNeoTz7mLcICu5SPjqv5qtXL5rhGVS/u92brwREHuiSKrFGa ADE7Y9uULp4OUrT4C+AsVk1CAIr8WAPjnA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:52:21 2025 by rpki-client