$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa File: 38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa (raw, json) Hash identifier: zCf/Rc11ATMOK3U9P22hi9ytst6eQgMrEv3hQZCw1pA= Subject key identifier: CC:43:B5:4B:21:0C:AF:B5:6A:71:A5:DD:F3:E6:B3:F3:B5:68:BE:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE56A9BCF6215E161CD900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8e:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:56:a9:bc:f6:21:5e:16:1c:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e7b7ce5e-c60f-4d6e-894b-f28d63df984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:a2:c8:5e:d3:03:de:b6:53:f6:ed:86:62: 85:e3:7c:78:a5:c8:36:a9:ba:4c:00:b0:bb:f7:e5: 20:5f:ff:05:58:e0:e6:65:73:39:6f:e3:76:c9:e9: 25:a0:9f:2b:35:4c:85:57:d0:fe:4f:b3:57:f8:16: a2:76:ad:6f:f2:73:62:3a:9b:61:3a:bd:af:be:55: e9:d5:4b:1f:40:6b:6d:7d:ba:0f:52:b2:52:3f:99: a4:64:7f:24:b1:f2:10:c3:1f:74:ef:aa:7e:f5:67: 0a:f1:28:85:bd:1a:ef:17:55:85:21:b9:a8:b4:d5: d0:70:9f:02:b4:c8:5d:fb:97:d6:6c:d0:48:11:d8: 5c:77:e0:df:c1:f6:30:91:6e:bc:83:53:37:e7:6e: 4a:e8:fa:b0:45:d9:9d:e1:9d:ff:ae:fe:0a:d6:0d: 11:28:2e:f4:10:d2:97:b0:d7:75:08:d4:6c:03:8a: cf:5f:0a:55:e1:bb:bd:5c:3f:cc:8b:a9:ec:ae:95: 19:22:f3:34:34:94:67:61:57:bd:51:d1:b3:3f:22: 1b:70:f4:c7:75:a1:5a:1b:c2:c1:3a:f4:e3:a9:7b: 91:3c:a2:a2:bb:f9:80:21:c2:3f:54:17:ec:d0:98: 1f:d4:83:d1:07:d5:0f:16:75:ca:c9:ac:82:ae:31: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:43:B5:4B:21:0C:AF:B5:6A:71:A5:DD:F3:E6:B3:F3:B5:68:BE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/38fdca3c-b8e9-3031-9757-154c2b7d75ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8e:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:99:4a:4e:7e:b6:b0:a8:35:9c:df:6e:ea:f7:23:8e:1e:71: 42:9d:dc:57:1f:12:2d:58:1f:a0:6b:35:60:f1:43:ff:67:67: 7d:f6:d2:3d:53:87:50:1a:b2:9e:e1:3e:1b:88:6b:d4:c7:60: 8c:d5:0a:38:91:55:42:d4:71:78:20:55:e0:56:ca:56:48:12: c4:e2:bd:36:cc:59:f4:78:e8:6d:bb:54:b6:2c:bd:06:55:6f: 9d:43:da:71:e9:54:7e:33:ee:14:34:2c:b4:7b:fb:6e:34:01: 90:5c:cd:90:de:44:d5:c5:26:e2:8a:9f:52:d1:19:e3:74:65: 94:bf:f1:8e:55:08:ce:50:dc:f3:74:55:db:ed:6f:06:19:d6: 8d:0a:ff:c6:01:3d:6d:38:69:54:44:f0:a8:5e:df:6b:43:2b: 07:ed:7e:70:98:87:50:43:f7:41:ed:a9:b4:58:ac:27:b1:f7: e1:3a:b9:f2:45:44:3e:19:2e:15:67:de:98:3c:c4:9a:d9:db: e9:39:55:33:44:1f:99:7d:bf:d8:da:60:1e:22:eb:01:6c:b1: 49:34:4d:7d:cc:41:44:26:9b:e1:23:91:f3:89:9c:b9:9e:e3: 9c:dd:88:1d:85:71:f3:ad:57:93:85:7b:47:0c:00:45:94:fe: ae:d3:7a:e1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzlapvPYhXhYc2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTdiN2NlNWUtYzYwZi00ZDZlLTg5NGItZjI4ZDYzZGY5ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/miyF7TA962U/bthmKF43x4pcg2qbpMALC7 9+UgX/8FWODmZXM5b+N2yekloJ8rNUyFV9D+T7NX+Baidq1v8nNiOpthOr2vvlXp 1UsfQGttfboPUrJSP5mkZH8ksfIQwx9076p+9WcK8SiFvRrvF1WFIbmotNXQcJ8C tMhd+5fWbNBIEdhcd+DfwfYwkW68g1M3525K6PqwRdmd4Z3/rv4K1g0RKC70ENKX sNd1CNRsA4rPXwpV4bu9XD/Mi6nsrpUZIvM0NJRnYVe9UdGzPyIbcPTHdaFaG8LB OvTjqXuRPKKiu/mAIcI/VBfs0Jgf1IPRB9UPFnXKyayCrjHbtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMxDtUshDK+1anGl3fPms/O1aL62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzhmZGNhM2MtYjhlOS0z MDMxLTk3NTctMTU0YzJiN2Q3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujgQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJZlKTn62sKg1nN9u6vcjjh5xQp3cVx8SLVgfoGs1YPFD/2dnffbS PVOHUBqynuE+G4hr1MdgjNUKOJFVQtRxeCBV4FbKVkgSxOK9NsxZ9HjobbtUtiy9 BlVvnUPacelUfjPuFDQstHv7bjQBkFzNkN5E1cUm4oqfUtEZ43RllL/xjlUIzlDc 83RV2+1vBhnWjQr/xgE9bThpVETwqF7fa0MrB+1+cJiHUEP3Qe2ptFisJ7H34Tq5 8kVEPhkuFWfemDzEmtnb6TlVM0QfmX2/2NpgHiLrAWyxSTRNfcxBRCab4SOR84mc uZ7jnN2IHYVx861Xk4V7RwwARZT+rtN64Q== -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:16 2025 by rpki-client