$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa File: bf84129d-5373-3325-85f9-58b86b087904.roa (raw, json) Hash identifier: V8mxWNU3HbhynGBqTufvgEBH8/kTsHQ5RlDBOkWOmTI= Subject key identifier: FB:10:88:1F:80:C2:4E:C0:CA:2C:27:69:35:DC:D1:BA:4B:41:A0:6F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A84124543817CA01EE267FE80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e8d:4000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:45:43:81:7c:a0:1e:e2:67:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9cccae60-d17c-40fb-a7cf-0ee532711a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:86:f7:3a:08:a6:7c:0f:81:32:72:40:ff: a9:dc:7e:b8:07:fd:33:5b:fc:0d:46:3f:f8:6a:48: 1d:e9:f3:cc:2a:de:aa:42:af:6c:24:4e:ac:91:a8: b8:31:b4:33:b8:89:0d:d8:cd:f3:75:d0:5c:bc:53: 99:c3:5b:7d:dd:70:4f:12:16:27:e6:a9:a9:45:e6: e0:b3:4a:2c:cc:ee:72:bb:1e:06:3b:b4:fe:f0:c9: 89:06:ca:28:d8:d0:da:99:32:30:af:ce:6d:ed:aa: b9:7c:7e:06:f3:ea:86:55:4e:01:8b:90:1c:54:4a: 90:6b:60:09:49:bc:64:1b:5b:15:c4:93:6d:c7:92: 85:c2:b9:40:d2:e8:e9:e6:14:4b:54:02:71:cb:46: f5:b1:cf:ac:7b:ae:bf:d5:ee:94:3e:01:ea:d5:89: 99:7f:6c:7c:c8:05:3c:23:bb:cf:dd:1c:a2:fa:15: 58:a8:ad:6a:dd:36:6c:75:37:7c:2f:46:83:0a:ea: a1:92:60:ca:c5:18:06:f8:ee:54:68:65:32:e9:a9: 2d:54:19:47:07:c2:6f:de:fc:c3:c9:9e:87:cb:9a: a6:63:34:2e:3b:07:5e:8b:dc:02:47:43:74:94:f0: c5:5b:57:f7:06:73:2c:02:72:f7:b4:a4:47:99:ea: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:10:88:1F:80:C2:4E:C0:CA:2C:27:69:35:DC:D1:BA:4B:41:A0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf84129d-5373-3325-85f9-58b86b087904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:4000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:23:9b:7e:50:28:31:ce:1f:98:8e:f3:92:88:f8:ff:07: a3:51:89:08:9a:36:8c:e6:f9:a9:8b:ae:0a:c1:07:12:88:51: 2c:c1:c2:75:49:d6:f8:21:f4:6c:1f:d4:8a:1c:1f:89:c3:1e: 4f:ea:b3:25:61:4d:10:ac:5c:95:84:a7:a1:38:71:5b:89:48: 33:40:a5:db:24:09:26:fc:a8:02:37:0a:33:bf:c3:d9:71:e8: 08:da:92:d4:4a:a6:4a:aa:7f:7f:90:b1:37:6d:d6:5b:bd:65: d4:da:5f:40:c6:2e:4a:53:ff:0b:e1:90:58:39:f4:11:75:bd: d7:80:f3:0b:aa:ab:fd:70:89:ca:46:e2:64:9a:ce:c2:e3:cf: b6:14:66:bf:56:0a:0e:12:a2:b2:fd:c8:f0:9d:ee:23:2a:08: ba:e4:8f:d7:7f:a9:7a:88:df:b8:20:33:4c:24:34:f7:12:37: 1e:1a:d2:f8:4c:19:c4:28:50:3d:51:6e:4e:34:a5:8b:f9:01: 3d:ff:58:29:9d:ee:11:c4:7c:2b:fe:2e:9e:c3:44:27:bb:70: 75:36:32:50:b0:5e:2b:13:ed:9f:55:39:0d:71:69:72:0f:ee: 65:e1:a8:4d:4f:38:47:ab:2c:58:d5:42:ee:f1:8e:99:49:93: 9e:5e:cd:2a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqEEkVDgXygHuJn/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWNjY2FlNjAtZDE3Yy00MGZiLWE3Y2YtMGVlNTMyNzExYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/SG9zoIpnwPgTJyQP+p3H64B/0zW/wNRj/4 akgd6fPMKt6qQq9sJE6skai4MbQzuIkN2M3zddBcvFOZw1t93XBPEhYn5qmpRebg s0oszO5yux4GO7T+8MmJBsoo2NDamTIwr85t7aq5fH4G8+qGVU4Bi5AcVEqQa2AJ SbxkG1sVxJNtx5KFwrlA0ujp5hRLVAJxy0b1sc+se66/1e6UPgHq1YmZf2x8yAU8 I7vP3Ryi+hVYqK1q3TZsdTd8L0aDCuqhkmDKxRgG+O5UaGUy6aktVBlHB8Jv3vzD yZ6Hy5qmYzQuOwdei9wCR0N0lPDFW1f3BnMsAnL3tKRHmepL3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPsQiB+Awk7AyiwnaTXc0bpLQaBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY4NDEyOWQtNTM3My0z MzI1LTg1ZjktNThiODZiMDg3OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUFUjm35QKDHOH5iO85KI+P8Ho1GJCJo2jOb5qYuuCsEHEohRLMHC dUnW+CH0bB/UihwficMeT+qzJWFNEKxclYSnoThxW4lIM0Cl2yQJJvyoAjcKM7/D 2XHoCNqS1EqmSqp/f5CxN23WW71l1NpfQMYuSlP/C+GQWDn0EXW914DzC6qr/XCJ ykbiZJrOwuPPthRmv1YKDhKisv3I8J3uIyoIuuSP13+peojfuCAzTCQ09xI3HhrS +EwZxChQPVFuTjSli/kBPf9YKZ3uEcR8K/4unsNEJ7twdTYyULBeKxPtn1U5DXFp cg/uZeGoTU84R6ssWNVC7vGOmUmTnl7NKg== -----END CERTIFICATE-----Generated at Sat Aug 9 10:52:21 2025 by rpki-client