$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa File: 3602582a-a894-32a0-8f9b-5cc020d56039.roa (raw, json) Hash identifier: xLrXi91hxTQzX266x1cLPi/BZvPpv0uC95EFLLObD9A= Subject key identifier: 85:98:E7:98:93:E7:E9:AA:CB:A8:B1:D5:D8:3E:A6:79:22:5D:45:62 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B679738F1E34EF2ED8E79EA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e8c:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:38:f1:e3:4e:f2:ed:8e:79:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1ad6a8ce-502f-49b5-8d37-f1f2b2e1c107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:87:04:bc:ba:d7:22:7f:c4:57:f6:a1:0c:5b: 5b:5d:81:b7:f6:f5:db:8c:70:67:e2:22:2b:db:e2: 6f:39:74:e3:5e:8a:63:33:d9:f0:a4:cf:12:80:e8: 65:b5:9f:e0:89:48:86:84:9d:e0:fc:ba:c4:69:e0: 38:ce:ee:b7:d9:6b:09:b5:88:38:9c:5d:be:59:95: f0:82:1d:d2:15:4a:39:48:a4:4f:fb:38:71:6f:7e: 2d:d0:e5:6d:17:00:1d:ec:0a:68:03:de:9f:3f:c9: 2e:a5:00:23:c9:f5:c2:55:27:58:b2:67:cd:78:67: b0:69:e0:2a:6f:df:81:59:3d:70:ec:52:e6:7e:49: 6e:59:3b:78:91:d8:91:9d:e3:a5:c9:bf:df:78:a8: fc:af:29:1a:17:ef:2f:bb:3a:e7:e0:91:af:d2:48: ef:f2:8f:99:06:0c:19:72:9e:cd:37:3e:9d:86:8e: a6:ad:f1:71:67:ad:4b:0e:85:8a:35:77:fc:48:30: 62:8a:73:c1:bf:99:fe:b8:1b:0b:25:fb:46:cc:27: 0d:60:41:dd:be:ce:54:cb:46:ba:30:d7:ff:bb:4a: 97:a1:e7:2f:91:62:e8:4f:0b:88:d5:76:3d:cd:4f: ce:f8:88:24:43:d7:dc:e0:ac:f9:66:5e:69:c1:f8: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:E7:98:93:E7:E9:AA:CB:A8:B1:D5:D8:3E:A6:79:22:5D:45:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3602582a-a894-32a0-8f9b-5cc020d56039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f0:3d:6a:ae:0a:98:b6:2f:de:23:b4:da:ae:8d:68:32:81: b7:7f:62:41:65:15:21:2c:e4:7b:22:a8:7d:d6:64:73:d9:01: 0e:7e:ab:a0:a2:79:7e:1a:a3:b4:72:5d:c6:e8:6a:da:62:75: c9:67:e2:92:11:22:7d:f0:11:53:d4:4b:61:c4:8d:0f:a2:07: 40:85:65:52:57:65:f1:19:16:c5:a3:7e:60:cd:e5:3b:ab:3d: bf:99:71:3d:a6:0f:9e:fe:b5:99:b1:dd:f7:31:b3:3e:45:c1: e5:18:66:c0:c2:7f:a1:bc:a6:34:56:29:21:7d:1d:9d:be:d4: a8:f8:a6:4e:aa:75:12:30:e6:21:49:c7:63:a3:91:b7:2a:c0: 92:90:8d:f8:fa:c0:fe:0f:f4:ab:94:2e:25:29:b8:5c:16:c4: 6e:3c:b8:bf:9b:e6:9c:ec:3d:23:52:9c:e9:71:50:5d:bd:72: e8:87:05:9f:f3:f2:29:0a:b0:7f:81:18:b1:b7:83:f9:ee:47: ff:ca:ef:df:ba:e5:42:03:0c:53:21:d5:5b:87:b7:70:db:9e: 68:89:68:02:ba:e1:6e:b8:49:d6:b8:44:09:14:aa:9c:5e:7f: e8:01:19:2e:72:6e:40:68:b5:1c:b1:67:0f:af:19:ef:78:19: 5b:0b:b5:cf -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtnlzjx407y7Y556kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWFkNmE4Y2UtNTAyZi00OWI1LThkMzctZjFmMmIyZTFjMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYcEvLrXIn/EV/ahDFtbXYG39vXbjHBn4iIr 2+JvOXTjXopjM9nwpM8SgOhltZ/giUiGhJ3g/LrEaeA4zu632WsJtYg4nF2+WZXw gh3SFUo5SKRP+zhxb34t0OVtFwAd7ApoA96fP8kupQAjyfXCVSdYsmfNeGewaeAq b9+BWT1w7FLmfkluWTt4kdiRneOlyb/feKj8rykaF+8vuzrn4JGv0kjv8o+ZBgwZ cp7NNz6dho6mrfFxZ61LDoWKNXf8SDBiinPBv5n+uBsLJftGzCcNYEHdvs5Uy0a6 MNf/u0qXoecvkWLoTwuI1XY9zU/O+IgkQ9fc4Kz5Zl5pwfjxSQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIWY55iT5+mqy6ix1dg+pnkiXUViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzYwMjU4MmEtYTg5NC0z MmEwLThmOWItNWNjMDIwZDU2MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAiPA9aq4KmLYv3iO02q6NaDKBt39iQWUVISzkeyKofdZkc9kBDn6r oKJ5fhqjtHJdxuhq2mJ1yWfikhEiffARU9RLYcSND6IHQIVlUldl8RkWxaN+YM3l O6s9v5lxPaYPnv61mbHd9zGzPkXB5RhmwMJ/obymNFYpIX0dnb7UqPimTqp1EjDm IUnHY6ORtyrAkpCN+PrA/g/0q5QuJSm4XBbEbjy4v5vmnOw9I1Kc6XFQXb1y6IcF n/PyKQqwf4EYsbeD+e5H/8rv37rlQgMMUyHVW4e3cNueaIloArrhbrhJ1rhECRSq nF5/6AEZLnJuQGi1HLFnD68Z73gZWwu1zw== -----END CERTIFICATE-----Generated at Sat Oct 11 07:19:25 2025 by rpki-client