$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa File: 5af117be-6302-321b-9b42-6f7e31c1219f.roa (raw, json) Hash identifier: ktn68xe9l7PrVrAFpILi+J7UQa/M6K7AH2s9DyYS8ls= Subject key identifier: 07:D0:0E:9C:16:FF:20:B8:25:BF:46:9E:7A:D2:B0:DA:9C:89:93:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D749BBE8B0FAE3E7996A50 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e88:9000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:49:bb:e8:b0:fa:e3:e7:99:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=ddb2abd1-09b3-4c52-a956-0d98545307f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:d4:09:9b:d8:25:fc:c8:b7:97:df:28:0c: 49:85:91:1e:8b:e1:15:7a:6e:39:0b:5e:4a:c3:ba: 13:50:1b:9d:f2:30:cf:02:b6:2e:96:ed:1d:70:76: 11:37:78:76:9e:74:47:25:ba:6d:00:59:36:3a:4c: bc:3f:6e:6c:ab:4f:7b:cb:7a:a7:82:4c:1e:0d:58: 00:29:c9:4a:49:75:b5:78:46:d4:8a:51:52:07:9a: b4:41:56:66:99:bd:18:85:57:1b:86:ce:c5:9a:2d: e3:2a:1a:2e:e6:d5:e9:62:5d:f4:af:eb:23:e0:c2: cd:00:5b:bd:55:b2:ea:79:fd:51:eb:60:3f:6b:a8: 30:23:66:75:e2:f4:20:1d:86:31:7f:03:97:35:19: b6:68:4c:05:7f:41:14:e1:e8:a8:09:3e:8d:dc:0f: 79:dc:05:04:84:cc:6e:d7:6a:c4:cb:fc:5f:6b:f4: 80:21:aa:a1:49:7f:cb:5e:e1:ee:d0:96:eb:dd:1a: f9:a1:79:55:49:cd:5a:af:13:0a:39:b3:20:ff:22: 4b:5d:c0:0d:4b:41:7c:4d:3a:fe:e9:76:d1:6b:01: 6f:15:9b:98:de:a7:d9:db:f1:3c:29:81:7b:4c:8a: fc:54:5a:b8:e5:bc:00:70:69:63:c2:e1:f2:92:3a: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D0:0E:9C:16:FF:20:B8:25:BF:46:9E:7A:D2:B0:DA:9C:89:93:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5af117be-6302-321b-9b42-6f7e31c1219f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:9000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:39:47:7e:1b:71:85:d6:f1:01:f1:58:68:c4:91:e2:fd:bd: 55:a6:c3:20:66:ab:8e:ed:36:cd:3b:9b:20:31:a2:45:46:bb: 8e:4d:ad:32:0f:c7:e6:fb:0a:41:28:8f:85:c3:52:99:e3:f3: 32:c4:cd:76:51:c2:49:34:9f:de:fd:f5:d9:e8:f9:c4:c1:64: 61:26:e1:64:4f:35:fc:16:09:25:44:2a:1c:0c:b8:ba:b0:5c: 0b:92:45:2d:c4:ae:73:03:59:3a:35:98:b0:8c:5b:e2:49:0f: de:ee:2e:79:98:db:a4:ff:f7:9c:ba:02:29:4b:be:d2:93:47: d3:db:b2:77:82:35:78:14:20:6c:5e:8e:37:7c:a8:91:54:cc: fc:19:2d:c9:a4:bc:01:b5:93:25:98:0d:b3:c6:a9:a2:c1:27: c8:30:88:1c:1e:e7:4d:87:c9:ca:61:35:c1:b2:b5:06:58:79: 94:d8:0f:05:21:a6:c4:30:ec:db:b8:96:f4:c5:92:e5:cf:9e: 00:d2:95:d8:06:32:37:be:6c:17:b0:d9:54:a4:f5:26:ba:72: 5a:d2:c8:47:f7:ac:af:c3:aa:dc:b8:8b:e3:a1:ac:24:a9:ff: a7:62:1d:98:4d:ed:81:e4:49:45:26:4a:26:ff:1b:d9:73:2d: 3b:87:84:3d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW10m76LD64+eZalAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGRiMmFiZDEtMDliMy00YzUyLWE5NTYtMGQ5ODU0NTMwN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEvUCZvYJfzIt5ffKAxJhZEei+EVem45C15K w7oTUBud8jDPArYulu0dcHYRN3h2nnRHJbptAFk2Oky8P25sq097y3qngkweDVgA KclKSXW1eEbUilFSB5q0QVZmmb0YhVcbhs7Fmi3jKhou5tXpYl30r+sj4MLNAFu9 VbLqef1R62A/a6gwI2Z14vQgHYYxfwOXNRm2aEwFf0EU4eioCT6N3A953AUEhMxu 12rEy/xfa/SAIaqhSX/LXuHu0Jbr3Rr5oXlVSc1arxMKObMg/yJLXcANS0F8TTr+ 6XbRawFvFZuY3qfZ2/E8KYF7TIr8VFq45bwAcGljwuHykjpxXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAfQDpwW/yC4Jb9GnnrSsNqciZMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFmMTE3YmUtNjMwMi0z MjFiLTliNDItNmY3ZTMxYzEyMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiJAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAETlHfhtxhdbxAfFYaMSR4v29VabDIGarju02zTubIDGiRUa7jk2t Mg/H5vsKQSiPhcNSmePzMsTNdlHCSTSf3v312ej5xMFkYSbhZE81/BYJJUQqHAy4 urBcC5JFLcSucwNZOjWYsIxb4kkP3u4ueZjbpP/3nLoCKUu+0pNH09uyd4I1eBQg bF6ON3yokVTM/BktyaS8AbWTJZgNs8aposEnyDCIHB7nTYfJymE1wbK1Blh5lNgP BSGmxDDs27iW9MWS5c+eANKV2AYyN75sF7DZVKT1JrpyWtLIR/esr8Oq3LiL46Gs JKn/p2IdmE3tgeRJRSZKJv8b2XMtO4eEPQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:18:02 2025 by rpki-client