$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa File: 1f98d05a-221a-3e67-a811-957ae99c4b9f.roa (raw, json) Hash identifier: 4SXXMrsAytsIWm9Dl26H1b5qi/cLYFHHyT85th0CF1s= Subject key identifier: 6A:BF:A5:71:F5:31:C1:2E:4E:72:E6:3A:41:08:34:A4:9F:50:1B:16 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CC81D9F68DD6A8D5E372C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8e:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:81:d9:f6:8d:d6:a8:d5:e3:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0724b28a-d064-46c7-9e73-28d39cb7c49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:26:9c:d7:b7:bd:92:00:93:dd:6d:76:f2: 05:d6:4f:50:73:29:23:45:e3:3b:85:c4:57:d2:21: 25:8e:47:bf:b4:12:79:b6:39:6b:d4:c1:24:35:00: 19:a1:d0:6c:a7:12:3e:3e:2c:62:30:17:ef:ef:89: 21:6d:9a:e7:4f:55:db:89:49:db:37:b7:43:ee:ea: e1:dc:a9:2a:db:9f:b5:43:3b:d6:07:75:97:10:33: 4b:6f:eb:2f:72:bd:34:53:23:e2:4e:9b:65:41:4d: d4:8f:d5:90:9c:af:4d:b2:d9:e2:2c:17:4c:e7:66: 63:f6:09:cb:99:e7:29:7d:92:bc:ac:3a:ff:9f:28: 43:cd:aa:73:fc:9c:f6:82:06:54:67:d8:96:ad:25: 6c:c6:4f:a8:7d:ea:f9:7a:16:86:06:15:5e:2d:af: be:f1:73:45:51:75:11:7b:1a:08:a8:25:5b:eb:94: 54:23:9f:66:41:f3:e4:1a:6e:09:2e:71:f6:d6:1b: ec:4b:bd:99:69:f7:27:5c:38:0e:b4:9f:2e:5d:73: e9:87:ae:f8:2c:44:3e:66:55:d7:f6:a4:51:79:1d: d3:62:ed:51:a9:b0:05:da:9e:26:25:30:06:ec:41: c7:0b:83:6e:b9:0e:be:dc:a9:86:2d:04:b6:7a:da: 91:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:A5:71:F5:31:C1:2E:4E:72:E6:3A:41:08:34:A4:9F:50:1B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1f98d05a-221a-3e67-a811-957ae99c4b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:2000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:93:e2:f2:e1:9d:c6:f5:a2:b6:32:34:d4:b6:19:39:8e:a0: 31:4f:ea:16:a9:39:ef:fb:b8:ce:25:cb:59:f9:c7:2b:a5:5e: 9c:81:6a:7a:b0:0b:ae:f9:be:e9:05:ce:6c:26:0f:2a:d2:23: 0e:9e:39:7b:ed:dd:50:7e:a3:09:b9:33:ba:4c:a4:92:1c:d0: 66:89:f0:2b:53:ea:51:10:39:8e:66:c7:68:1e:86:a4:1b:67: 95:7c:e5:1b:05:b9:62:48:cf:8d:bf:8c:70:94:3f:be:a3:9b: 25:41:ba:3b:78:7e:33:4b:eb:a1:e2:c4:f2:93:a9:95:fe:2e: e2:ab:95:4c:7e:48:e5:18:bb:b9:f6:ff:96:e2:db:ef:ea:09: 36:34:54:84:b6:5b:65:e9:01:5d:a4:14:c5:f5:4d:8d:82:f1: b7:f2:3e:36:de:d9:6d:16:d6:eb:73:fc:ba:67:15:ec:aa:a8: df:37:64:82:e4:9a:23:eb:2d:ca:7f:2d:70:b2:08:03:e0:da: 36:fb:bc:97:f2:dd:7c:1e:b0:2c:c0:ca:45:d7:39:00:ac:a3: 45:dd:78:fb:b7:06:b6:d8:ae:0f:f2:ff:9b:11:51:a6:82:7e: 96:1f:0c:5d:a3:da:7e:7c:6e:bf:97:f0:5b:c0:93:12:2c:f5: 80:d2:9d:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzIHZ9o3WqNXjcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDcyNGIyOGEtZDA2NC00NmM3LTllNzMtMjhkMzljYjdjNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld0mnNe3vZIAk91tdvIF1k9QcykjReM7hcRX 0iEljke/tBJ5tjlr1MEkNQAZodBspxI+PixiMBfv74khbZrnT1XbiUnbN7dD7urh 3Kkq25+1QzvWB3WXEDNLb+svcr00UyPiTptlQU3Uj9WQnK9NstniLBdM52Zj9gnL mecpfZK8rDr/nyhDzapz/Jz2ggZUZ9iWrSVsxk+ofer5ehaGBhVeLa++8XNFUXUR exoIqCVb65RUI59mQfPkGm4JLnH21hvsS72ZafcnXDgOtJ8uXXPph674LEQ+ZlXX 9qRReR3TYu1RqbAF2p4mJTAG7EHHC4NuuQ6+3KmGLQS2etqR5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGq/pXH1McEuTnLmOkEINKSfUBsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWY5OGQwNWEtMjIxYS0z ZTY3LWE4MTEtOTU3YWU5OWM0YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPZPi8uGdxvWitjI01LYZOY6gMU/qFqk57/u4ziXLWfnHK6VenIFq erALrvm+6QXObCYPKtIjDp45e+3dUH6jCbkzukykkhzQZonwK1PqURA5jmbHaB6G pBtnlXzlGwW5YkjPjb+McJQ/vqObJUG6O3h+M0vroeLE8pOplf4u4quVTH5I5Ri7 ufb/luLb7+oJNjRUhLZbZekBXaQUxfVNjYLxt/I+Nt7ZbRbW63P8umcV7Kqo3zdk guSaI+styn8tcLIIA+DaNvu8l/LdfB6wLMDKRdc5AKyjRd14+7cGttiuD/L/mxFR poJ+lh8MXaPafnxuv5fwW8CTEiz1gNKdFA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:12:36 2025 by rpki-client