$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29bc4b72-d751-3b42-bfdd-4d87e37c0db5.roa File: 29bc4b72-d751-3b42-bfdd-4d87e37c0db5.roa (raw, json) Hash identifier: VTiNcZpFRHSdsTZ5Evqzp9MJRDWLHFWLX2qNSbXjZ0k= Subject key identifier: 92:CC:C0:80:BA:46:A8:6A:94:37:2F:84:5E:7E:5D:2C:C8:24:80:1A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D71AFC7A9CDD4233B1440A Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29bc4b72-d751-3b42-bfdd-4d87e37c0db5.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e88:1400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1a:fc:7a:9c:dd:42:33:b1:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=e29f38b2-e072-444f-9fcb-c5bb0ea564da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:0b:60:a7:13:15:e0:16:db:fb:4c:d1:04: 72:98:50:31:fe:cb:31:1b:f4:8c:16:78:1c:9c:37: 5d:79:cb:a8:ee:11:97:8d:fe:a2:44:f7:90:82:9a: 77:ed:ed:ff:e3:2f:6e:d7:1f:ce:a4:f3:dc:e1:da: 48:16:46:e4:71:ce:1f:57:ec:98:14:ac:41:1d:34: 39:bb:27:ac:a8:5b:f3:2a:d7:ce:67:b9:39:78:24: 2f:98:6b:97:d8:0d:1f:ef:32:83:87:8e:16:f8:e1: fd:cf:77:8f:96:63:21:79:b3:0a:28:0c:78:4a:57: 9b:72:18:6c:ce:07:78:51:ae:c2:50:73:d0:98:cd: 0b:f1:94:c1:35:37:6b:8f:fc:4e:02:ab:ee:5e:c8: 75:4f:33:27:ec:bd:1b:48:d8:c3:3f:21:e1:37:65: b9:6c:e0:13:c1:16:96:bd:26:fa:fb:a5:af:e0:21: 0c:d4:49:bc:4e:c4:85:5c:e9:de:32:5e:90:49:e9: 27:94:ca:58:3f:25:d8:34:59:e1:04:06:f5:fb:b7: 3e:fa:60:3b:75:22:e4:23:89:a3:8c:5f:46:58:14: f0:b4:33:b9:1f:dc:53:97:87:ba:6e:e7:53:d5:b9: 09:70:d7:a4:cf:8e:df:39:5b:c8:5e:ab:ae:2a:91: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CC:C0:80:BA:46:A8:6A:94:37:2F:84:5E:7E:5D:2C:C8:24:80:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/29bc4b72-d751-3b42-bfdd-4d87e37c0db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:1400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e7:06:5c:cd:f1:ea:7e:48:9e:2f:ea:ec:5a:27:77:0e:d9: 27:85:5e:53:29:ea:21:17:6f:29:2b:20:b1:28:6c:2c:e2:aa: b5:d5:d7:0b:88:5c:3f:c2:ea:23:c5:44:5e:d9:f0:27:57:e9: b1:c7:7c:75:4e:54:d6:a8:3e:f2:77:9b:c3:7f:f4:37:66:0d: 3d:ef:84:dd:29:ac:a1:08:ec:46:00:22:50:ca:0a:8c:8e:5c: 20:55:a5:0b:e9:e8:46:28:e3:49:7c:62:26:36:e2:8c:28:00: 51:98:c3:95:cb:07:09:4a:1e:f9:0a:66:2b:1b:81:f3:24:2f: b8:d0:b6:1d:0f:d6:5f:08:7f:9c:62:ff:8c:5e:9a:d4:93:5b: 4a:99:07:b8:b9:56:e5:78:1c:4d:ed:cf:84:1b:81:81:04:fc: df:05:90:0b:60:40:98:4d:1f:38:eb:67:19:0a:a5:8a:c8:98: 89:2c:1c:b9:ee:3e:2b:e1:69:bb:ca:18:69:43:5d:44:a8:0c: 70:e5:14:5f:1a:ed:61:91:c0:c4:8e:8c:d2:07:13:85:e8:2d: 7e:f0:cb:fd:d2:33:2a:ea:d3:eb:b8:8c:d2:4b:5e:68:cf:bd: bc:cd:69:fe:57:20:31:0a:92:99:e7:04:cb:8f:0a:f0:0f:25: ef:ab:80:6f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW1xr8epzdQjOxRAowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTI5ZjM4YjItZTA3Mi00NDRmLTlmY2ItYzViYjBlYTU2NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJgLYKcTFeAW2/tM0QRymFAx/ssxG/SMFngc nDddecuo7hGXjf6iRPeQgpp37e3/4y9u1x/OpPPc4dpIFkbkcc4fV+yYFKxBHTQ5 uyesqFvzKtfOZ7k5eCQvmGuX2A0f7zKDh44W+OH9z3ePlmMhebMKKAx4Slebchhs zgd4Ua7CUHPQmM0L8ZTBNTdrj/xOAqvuXsh1TzMn7L0bSNjDPyHhN2W5bOATwRaW vSb6+6Wv4CEM1Em8TsSFXOneMl6QSeknlMpYPyXYNFnhBAb1+7c++mA7dSLkI4mj jF9GWBTwtDO5H9xTl4e6budT1bkJcNekz47fOVvIXquuKpFPdwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJLMwIC6RqhqlDcvhF5+XSzIJIAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjliYzRiNzItZDc1MS0z YjQyLWJmZGQtNGQ4N2UzN2MwZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiBQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAecGXM3x6n5Ini/q7Fondw7ZJ4VeUynqIRdvKSsgsShsLOKqtdXX C4hcP8LqI8VEXtnwJ1fpscd8dU5U1qg+8nebw3/0N2YNPe+E3SmsoQjsRgAiUMoK jI5cIFWlC+noRijjSXxiJjbijCgAUZjDlcsHCUoe+QpmKxuB8yQvuNC2HQ/WXwh/ nGL/jF6a1JNbSpkHuLlW5XgcTe3PhBuBgQT83wWQC2BAmE0fOOtnGQqlisiYiSwc ue4+K+Fpu8oYaUNdRKgMcOUUXxrtYZHAxI6M0gcThegtfvDL/dIzKurT67iM0kte aM+9vM1p/lcgMQqSmecEy48K8A8l76uAbw== -----END CERTIFICATE-----Generated at Sat Oct 11 07:12:35 2025 by rpki-client