$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa File: 01015e5b-5218-36c9-83ed-4ce6023e4861.roa (raw, json) Hash identifier: W036aXuCOXWcbBfPQkL/u3yQkkt2N8lNCLsRs54FNWo= Subject key identifier: A0:8F:55:10:DF:89:83:35:A2:ED:5B:00:8C:71:45:72:F8:80:C9:F2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE38FDC81C5FEE832231E0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e89:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:38:fd:c8:1c:5f:ee:83:22:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=78ec6b2a-a0a7-4258-95ac-ae5e3cc0f2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:ac:e3:5e:00:42:4c:10:b5:85:4e:28:7f: 95:e8:2d:e1:d6:71:3c:f0:0b:b3:44:ce:81:c7:e7: 2c:c9:ee:81:90:eb:41:85:2d:55:a9:49:82:76:6b: 11:b7:68:bd:a8:59:7e:5a:05:9b:21:1e:c2:c3:23: 43:35:e6:58:4b:e2:6d:0c:b4:03:c7:1d:0b:ce:53: 88:18:60:9a:37:29:8e:35:c2:28:ac:1a:77:53:1d: 15:41:20:65:68:7b:97:a7:25:ab:f7:0e:16:3a:7e: 6e:39:69:70:e0:d3:c3:f5:7c:5d:1b:56:1e:c1:92: 5c:5c:78:b5:a4:89:a2:72:d7:3e:d9:44:ca:53:a3: a8:2d:30:f0:14:86:97:67:05:90:bb:96:35:a8:4f: 95:dd:e8:9d:71:93:d2:5d:97:a0:d9:42:3e:10:bd: 3f:66:11:18:57:41:22:e5:6f:49:62:2a:7c:c4:96: 9b:46:44:1a:91:e5:99:34:dd:ba:f1:0e:80:d7:53: 5f:f6:cd:5e:06:7f:ef:da:db:df:95:ab:3e:20:1d: ab:d4:8e:10:1d:e6:3c:fe:04:f8:16:51:4b:d7:53: 43:39:c4:03:c7:99:8a:d5:45:2e:12:d8:81:7c:d3: e8:17:e0:25:12:96:20:6d:aa:30:33:70:11:8e:96: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:55:10:DF:89:83:35:A2:ED:5B:00:8C:71:45:72:F8:80:C9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/01015e5b-5218-36c9-83ed-4ce6023e4861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7b:d7:00:91:7e:42:e1:44:08:73:c8:4e:c5:11:5c:59:64: b1:3b:2e:ac:95:e5:94:0a:3b:f5:1a:e0:a3:74:aa:76:ab:f3: f6:6f:23:a3:52:57:fa:60:66:6f:ca:66:00:be:b7:1d:94:23: 85:fe:68:07:19:3a:94:8a:68:33:58:df:89:ae:b7:e5:ea:e0: d9:65:c5:1d:fd:f1:58:5f:05:57:73:3f:47:6f:66:65:b2:ab: a0:85:b4:3a:78:f4:b9:e0:52:2e:dd:ae:c2:ca:82:79:4e:36: f8:1d:d9:6e:34:4c:4a:15:38:c7:79:e6:4a:65:9b:29:5f:54: 7b:7d:19:c8:cc:ef:9e:5f:15:e5:f0:6b:27:aa:64:60:3d:4f: af:54:3e:25:fc:40:7f:64:30:07:a9:dc:c1:d6:66:33:78:1f: 3d:96:10:74:54:c9:fb:99:09:ec:55:7c:6b:a6:82:ce:42:b2: 74:02:31:ff:7f:a2:37:50:a1:01:36:a6:a5:a2:8d:5a:00:e4: 43:c0:e1:81:49:7b:a3:7a:8e:b8:b4:49:0c:d2:c9:51:56:a9: 44:5e:90:c1:ff:49:e4:c9:1a:01:b2:69:01:ec:70:ae:09:1c: 27:d0:17:12:15:44:18:b4:e1:0d:e3:69:33:8e:db:a6:03:a5: d5:e9:7b:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzjj9yBxf7oMiMeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzhlYzZiMmEtYTBhNy00MjU4LTk1YWMtYWU1ZTNjYzBmMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWs414AQkwQtYVOKH+V6C3h1nE88AuzRM6B x+csye6BkOtBhS1VqUmCdmsRt2i9qFl+WgWbIR7CwyNDNeZYS+JtDLQDxx0LzlOI GGCaNymONcIorBp3Ux0VQSBlaHuXpyWr9w4WOn5uOWlw4NPD9XxdG1YewZJcXHi1 pImictc+2UTKU6OoLTDwFIaXZwWQu5Y1qE+V3eidcZPSXZeg2UI+EL0/ZhEYV0Ei 5W9JYip8xJabRkQakeWZNN268Q6A11Nf9s1eBn/v2tvflas+IB2r1I4QHeY8/gT4 FlFL11NDOcQDx5mK1UUuEtiBfNPoF+AlEpYgbaowM3ARjpbsrwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKCPVRDfiYM1ou1bAIxxRXL4gMnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDEwMTVlNWItNTIxOC0z NmM5LTgzZWQtNGNlNjAyM2U0ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiaQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFnvXAJF+QuFECHPITsURXFlksTsurJXllAo79Rrgo3Sqdqvz9m8j o1JX+mBmb8pmAL63HZQjhf5oBxk6lIpoM1jfia635erg2WXFHf3xWF8FV3M/R29m ZbKroIW0Onj0ueBSLt2uwsqCeU42+B3ZbjRMShU4x3nmSmWbKV9Ue30ZyMzvnl8V 5fBrJ6pkYD1Pr1Q+JfxAf2QwB6ncwdZmM3gfPZYQdFTJ+5kJ7FV8a6aCzkKydAIx /3+iN1ChATampaKNWgDkQ8DhgUl7o3qOuLRJDNLJUVapRF6Qwf9J5MkaAbJpAexw rgkcJ9AXEhVEGLThDeNpM47bpgOl1el74A== -----END CERTIFICATE-----Generated at Sat Oct 11 07:18:10 2025 by rpki-client