$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3039cbe7-3c0c-312c-9710-285383cfa55d.roa File: 3039cbe7-3c0c-312c-9710-285383cfa55d.roa (raw, json) Hash identifier: woz4d6orosRZ6CDFE2Zxl5ikzEN7n1UcsnaNuMSqYFU= Subject key identifier: 20:71:5A:CC:22:8A:BD:18:4E:B6:36:80:FA:42:74:48:59:48:69:A5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B4FDC7322855C7ADDCDFEBE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3039cbe7-3c0c-312c-9710-285383cfa55d.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2e8d:9800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:73:22:85:5c:7a:dd:cd:fe:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=d6318ddc-59a4-4dd2-b2d5-9a7100f9db83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:ae:90:08:72:c9:b7:fb:64:70:77:ca:b6: 00:fd:7e:32:cf:10:08:e6:00:79:fa:47:ff:49:04: ae:93:08:8b:2e:87:b9:ea:f0:67:ca:52:ac:ee:17: 23:00:f9:c8:7b:fd:f4:43:5e:3a:f7:12:c4:4f:a9: 1b:d8:f1:a4:92:63:9a:42:05:b2:54:e2:48:a8:e9: 7b:3e:93:37:7c:e9:7e:c4:a1:7e:e3:b0:87:23:d7: f3:30:63:e2:d7:d6:92:40:5d:d6:00:0f:57:95:b4: fa:68:b9:ef:92:33:b8:ec:15:9f:99:85:09:42:a6: 95:c0:da:19:16:b0:29:78:81:bf:ea:cc:45:b7:1b: 0d:9b:cf:c5:7c:77:f3:68:c5:84:1c:70:c4:86:f9: 7d:9b:94:db:b4:1e:60:f3:ec:29:22:6b:dd:98:cb: f7:34:f9:b9:49:b5:bf:b8:73:8e:d9:7b:93:6a:fc: 6f:33:aa:47:d2:42:aa:cd:16:86:bf:79:f2:e1:ae: 2f:e9:05:99:c5:fa:fc:f9:f9:86:8c:42:15:b4:ed: e0:cf:41:35:49:92:2e:55:2c:97:2e:12:f9:5d:da: 10:c7:1f:27:80:ba:36:8d:cb:73:5b:8f:89:f3:1e: f9:a0:01:86:7b:bd:27:46:19:4f:96:ac:ce:b6:c5: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:5A:CC:22:8A:BD:18:4E:B6:36:80:FA:42:74:48:59:48:69:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3039cbe7-3c0c-312c-9710-285383cfa55d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:9800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:08:d1:e7:25:9f:d6:8d:96:30:da:45:73:f5:37:38:27:81: bc:71:af:1b:7c:ff:c2:9c:73:52:f2:5f:cc:8d:77:18:93:91: 6e:27:77:4e:fd:8a:a5:6e:5c:40:5a:cf:1c:36:86:c9:ac:98: 13:cf:28:e3:91:19:9e:34:07:55:1b:3d:24:9e:72:5d:7f:3d: ad:71:3a:44:82:fe:32:86:cf:f2:2c:b2:d1:9f:1a:2e:97:4e: 77:86:87:f4:84:c7:f6:ad:79:78:9b:04:55:8a:2e:2e:6f:df: 35:f7:e6:c0:86:7f:5b:ce:d4:a2:21:fd:e7:fc:5c:46:05:2d: 8a:9c:5e:89:05:26:a3:0f:52:eb:a6:a3:ef:84:5a:29:3e:20: 07:d8:5d:90:9a:79:4e:e0:21:97:82:53:b6:f0:ae:99:be:07: 79:d3:76:9e:c0:ef:f4:4b:36:8a:ce:06:b4:a8:17:74:9c:d4: b1:45:43:36:9f:f7:73:7d:e0:a4:83:3b:11:38:28:48:b3:a0: 4f:78:ed:77:3c:b3:aa:16:90:ba:23:1e:59:8e:0d:43:64:e7: 88:11:4b:6f:46:21:4b:97:e2:9d:04:85:22:16:6e:6b:19:2d: a7:53:8b:46:aa:9d:de:7a:eb:15:d3:eb:b5:9c:d3:7e:55:bf: eb:9b:08:b9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtP3HMihVx63c3+vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDYzMThkZGMtNTlhNC00ZGQyLWIyZDUtOWE3MTAwZjlkYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZyukAhyybf7ZHB3yrYA/X4yzxAI5gB5+kf/ SQSukwiLLoe56vBnylKs7hcjAPnIe/30Q1469xLET6kb2PGkkmOaQgWyVOJIqOl7 PpM3fOl+xKF+47CHI9fzMGPi19aSQF3WAA9XlbT6aLnvkjO47BWfmYUJQqaVwNoZ FrApeIG/6sxFtxsNm8/FfHfzaMWEHHDEhvl9m5TbtB5g8+wpImvdmMv3NPm5SbW/ uHOO2XuTavxvM6pH0kKqzRaGv3ny4a4v6QWZxfr8+fmGjEIVtO3gz0E1SZIuVSyX LhL5XdoQxx8ngLo2jctzW4+J8x75oAGGe70nRhlPlqzOtsV2TwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCBxWswiir0YTrY2gPpCdEhZSGmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzAzOWNiZTctM2MwYy0z MTJjLTk3MTAtMjg1MzgzY2ZhNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujZgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXgjR5yWf1o2WMNpFc/U3OCeBvHGvG3z/wpxzUvJfzI13GJORbid3 Tv2KpW5cQFrPHDaGyayYE88o45EZnjQHVRs9JJ5yXX89rXE6RIL+MobP8iyy0Z8a LpdOd4aH9ITH9q15eJsEVYouLm/fNffmwIZ/W87UoiH95/xcRgUtipxeiQUmow9S 66aj74RaKT4gB9hdkJp5TuAhl4JTtvCumb4HedN2nsDv9Es2is4GtKgXdJzUsUVD Np/3c33gpIM7ETgoSLOgT3jtdzyzqhaQuiMeWY4NQ2TniBFLb0YhS5finQSFIhZu axktp1OLRqqd3nrrFdPrtZzTflW/65sIuQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:23:07 2025 by rpki-client