$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa File: 3b98607c-312f-3adf-a754-290a30263a4d.roa (raw, json) Hash identifier: k9iHDqzzaTzZSJEL96jbFMRCulc39PUqhpNJPCCpAuw= Subject key identifier: 83:11:A7:AE:53:0A:8B:67:F4:F0:49:7B:3B:F2:F2:C9:46:A6:6A:47 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D726F9E46C5E0692587400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e88:2800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:26:f9:e4:6c:5e:06:92:58:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=3deb31ff-d467-4ce8-aafb-bc2e92c7c250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:45:f2:c5:19:90:37:71:69:d4:07:0e:87: 38:92:5c:a1:a1:f3:de:18:08:fe:6a:20:41:ac:c9: 24:15:2a:9c:26:4f:d6:e7:0e:c1:6f:88:3a:eb:de: c4:a2:77:27:ba:d7:fb:ac:69:e5:4c:a2:6d:e1:43: 20:b1:bf:2f:9c:98:47:96:f0:34:ad:b9:ce:4e:c6: c6:67:32:5e:b4:34:c7:83:dd:a5:90:bf:c0:48:bc: e6:f9:4f:42:3e:2a:d1:bd:e3:8b:0b:11:96:91:f4: bd:ec:42:d9:05:06:9e:40:50:0a:94:50:39:81:17: 2f:4b:a1:5a:74:29:7a:e7:b2:7d:92:a4:f8:86:ae: 45:a6:02:04:29:dd:d7:79:0c:c5:fe:93:3c:91:61: 3c:8d:a4:e8:7a:52:19:60:07:45:20:bf:b8:a6:d0: 74:16:3e:94:00:f7:4f:ce:e7:9b:db:f5:87:22:54: 17:f5:58:51:ea:a7:29:bc:d4:95:34:b3:56:f7:dc: 89:91:05:ab:7c:6b:b8:57:93:d9:b4:bd:ab:5d:8e: f3:9f:a6:83:84:3e:a6:3b:16:aa:5d:3c:c9:a7:aa: 37:ba:39:38:e2:cc:a7:dd:ef:07:11:86:b6:51:89: 27:da:59:55:b4:25:61:69:f9:9c:6b:fe:55:26:1b: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:11:A7:AE:53:0A:8B:67:F4:F0:49:7B:3B:F2:F2:C9:46:A6:6A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3b98607c-312f-3adf-a754-290a30263a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:dc:db:82:29:ff:46:21:26:05:d1:fb:0f:da:7f:32:b6:4b: b3:34:f6:fa:65:c6:7c:6d:4f:4d:c7:e1:6c:ba:77:17:be:8f: f0:3f:65:48:01:54:82:a0:86:15:33:46:af:cd:70:5f:e4:ab: 03:9f:59:26:68:3c:b7:50:04:6c:e5:17:db:03:5b:d8:95:54: 58:98:a6:28:0d:2f:6a:9e:a1:61:16:eb:81:6a:42:be:95:96: 36:35:1c:cc:e6:eb:ca:07:9d:24:65:c9:9b:79:56:d4:0b:ab: d1:68:5c:bd:f3:be:bc:66:1c:e0:9c:00:f1:20:54:32:25:db: 36:8b:e1:dd:a9:fd:95:7c:a6:41:fe:88:28:87:d2:83:b7:b3: 82:e3:96:69:76:6f:97:68:c8:ee:76:6c:b6:74:ba:f1:5f:54: 62:2e:6d:15:25:2c:d8:87:25:86:30:15:4c:37:ff:07:c8:bb: 58:9a:20:d4:73:a1:90:fe:cd:24:42:80:23:37:7c:c0:05:c9: e3:83:7e:a8:3e:2d:3e:bc:ba:76:7a:28:8e:26:d9:22:55:a3: 8c:d6:bc:25:1a:9b:48:c8:54:28:a4:2d:e3:03:ca:aa:69:8c: ad:d6:64:d9:71:35:26:95:6f:1d:e5:25:12:c1:b5:b3:de:5d: e7:6f:26:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW1yb55GxeBpJYdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk M2RlYjMxZmYtZDQ2Ny00Y2U4LWFhZmItYmMyZTkyYzdjMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtF8sUZkDdxadQHDoc4klyhofPeGAj+aiBB rMkkFSqcJk/W5w7Bb4g6697Eoncnutf7rGnlTKJt4UMgsb8vnJhHlvA0rbnOTsbG ZzJetDTHg92lkL/ASLzm+U9CPirRveOLCxGWkfS97ELZBQaeQFAKlFA5gRcvS6Fa dCl657J9kqT4hq5FpgIEKd3XeQzF/pM8kWE8jaToelIZYAdFIL+4ptB0Fj6UAPdP zueb2/WHIlQX9VhR6qcpvNSVNLNW99yJkQWrfGu4V5PZtL2rXY7zn6aDhD6mOxaq XTzJp6o3ujk44syn3e8HEYa2UYkn2llVtCVhafmca/5VJhsL2wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIMRp65TCotn9PBJezvy8slGpmpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2I5ODYwN2MtMzEyZi0z YWRmLWE3NTQtMjkwYTMwMjYzYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl9zbgin/RiEmBdH7D9p/MrZLszT2+mXGfG1PTcfhbLp3F76P8D9l SAFUgqCGFTNGr81wX+SrA59ZJmg8t1AEbOUX2wNb2JVUWJimKA0vap6hYRbrgWpC vpWWNjUczObrygedJGXJm3lW1Aur0WhcvfO+vGYc4JwA8SBUMiXbNovh3an9lXym Qf6IKIfSg7ezguOWaXZvl2jI7nZstnS68V9UYi5tFSUs2IclhjAVTDf/B8i7WJog 1HOhkP7NJEKAIzd8wAXJ44N+qD4tPry6dnoojibZIlWjjNa8JRqbSMhUKKQt4wPK qmmMrdZk2XE1JpVvHeUlEsG1s95d528mqw== -----END CERTIFICATE-----Generated at Sat Oct 11 07:23:06 2025 by rpki-client