$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa File: 32cf1c42-4bc7-304c-80fc-25ca24305072.roa (raw, json) Hash identifier: m5i/zdUqq04P03vKwTDvu9dLUDtfgE1rTs5adA5yUco= Subject key identifier: D0:07:C9:CA:D8:28:6C:14:AE:4B:B2:07:70:28:B5:C7:56:48:1F:4B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6201E0F5F7BD8BC78FA1F800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8e:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e0:f5:f7:bd:8b:c7:8f:a1:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c0452012-073b-4b73-998d-cf206ce0753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c2:31:85:02:bc:95:5b:18:1c:8c:35:70:f3: b7:c6:69:06:19:3a:a3:bc:1c:2e:5e:55:e2:f0:f9: 1b:97:80:3d:1e:9e:7f:fd:7f:de:bb:e4:17:7a:08: 06:f1:5d:c3:89:43:ea:e9:06:3b:b0:9e:c0:77:9c: 0b:f3:bd:c3:77:71:f2:ee:95:f2:e6:13:cb:aa:b2: 25:73:d9:6a:e2:9d:a6:4d:82:ea:93:c2:ab:4e:02: 50:4d:75:a9:aa:4b:57:fa:0d:f3:49:a3:62:d7:1f: d7:4d:25:02:5f:c8:3c:0c:2f:fb:b7:83:50:72:7b: 0e:ee:56:4b:07:a2:c8:fc:47:f6:ea:0b:60:ac:20: 8d:f9:24:b3:c9:8b:c0:2a:0a:30:61:2c:da:91:73: 7d:73:08:ff:92:f3:c0:a9:67:47:fe:93:e8:67:af: c2:3a:fb:f3:78:ce:d0:e0:a3:19:70:f3:45:d6:99: 2e:a2:3b:09:2c:8f:bf:c8:39:ba:a0:dd:1f:06:62: a7:14:9a:f5:89:94:98:59:45:09:46:fb:45:ab:40: 89:50:1e:b4:37:1a:7d:f3:bf:41:d6:27:0e:29:a0: 34:ca:a7:8a:d0:1f:12:1a:24:d6:a7:8d:a1:d4:e2: 53:58:3b:44:1e:b1:98:2d:90:5a:25:d6:a8:60:34: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:C9:CA:D8:28:6C:14:AE:4B:B2:07:70:28:B5:C7:56:48:1F:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32cf1c42-4bc7-304c-80fc-25ca24305072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f6:73:26:79:ef:0c:ab:d5:c0:c1:99:fb:17:c2:f5:80:76: ef:97:97:ed:07:1e:82:7b:fb:67:7d:87:8a:89:62:de:28:6b: ee:7a:28:1a:0e:dc:77:84:ed:9c:11:d5:c8:45:04:c0:fd:2f: 54:31:b3:2c:9a:16:20:d9:5f:7d:77:89:53:6d:35:fa:fc:eb: b0:c4:57:e8:8f:2d:27:75:da:98:74:7a:d0:ea:f9:cb:1f:7f: a3:9f:8a:ee:46:b6:64:8e:de:e5:22:c7:b5:c0:53:9f:d3:d3: df:8f:d3:ef:e8:da:9a:e3:8d:f3:41:5b:25:cf:63:61:7a:f5: 52:aa:ee:df:02:6b:3c:a3:1b:03:be:7d:19:94:de:84:15:74: aa:30:75:b4:f8:e8:68:37:87:1e:c1:8e:5e:58:a3:17:7b:d7: 66:8d:7c:f5:24:e8:88:bb:f0:4e:0c:93:02:1d:d0:8c:9c:2c: df:75:d7:63:35:df:8f:7f:a6:86:50:c1:85:bd:c6:ef:d7:88: 0a:22:e6:40:4b:ff:b4:73:be:1f:24:16:e8:a8:f3:1f:6b:f5: 16:92:ae:5c:27:e5:6d:68:73:42:18:1f:00:2c:e7:51:fa:10: 0b:32:4c:7a:cd:cf:a3:a4:c2:fa:4a:21:0e:a3:d5:81:02:1a: 82:f4:06:08 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAeD1972Lx4+h+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzA0NTIwMTItMDczYi00YjczLTk5OGQtY2YyMDZjZTA3NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsIxhQK8lVsYHIw1cPO3xmkGGTqjvBwuXlXi 8Pkbl4A9Hp5//X/eu+QXeggG8V3DiUPq6QY7sJ7Ad5wL873Dd3Hy7pXy5hPLqrIl c9lq4p2mTYLqk8KrTgJQTXWpqktX+g3zSaNi1x/XTSUCX8g8DC/7t4NQcnsO7lZL B6LI/Ef26gtgrCCN+SSzyYvAKgowYSzakXN9cwj/kvPAqWdH/pPoZ6/COvvzeM7Q 4KMZcPNF1pkuojsJLI+/yDm6oN0fBmKnFJr1iZSYWUUJRvtFq0CJUB60Nxp9879B 1icOKaA0yqeK0B8SGiTWp42h1OJTWDtEHrGYLZBaJdaoYDSRMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNAHycrYKGwUrkuyB3AotcdWSB9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzJjZjFjNDItNGJjNy0z MDRjLTgwZmMtMjVjYTI0MzA1MDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujvAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAavZzJnnvDKvVwMGZ+xfC9YB275eX7Qcegnv7Z32Hioli3ihr7noo Gg7cd4TtnBHVyEUEwP0vVDGzLJoWINlffXeJU201+vzrsMRX6I8tJ3XamHR60Or5 yx9/o5+K7ka2ZI7e5SLHtcBTn9PT34/T7+jamuON80FbJc9jYXr1Uqru3wJrPKMb A759GZTehBV0qjB1tPjoaDeHHsGOXlijF3vXZo189SToiLvwTgyTAh3QjJws33XX YzXfj3+mhlDBhb3G79eICiLmQEv/tHO+HyQW6KjzH2v1FpKuXCflbWhzQhgfACzn UfoQCzJMes3Po6TC+kohDqPVgQIagvQGCA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:33 2025 by rpki-client