$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa File: 630a483b-2ad1-3535-9e6e-bcbac743a122.roa (raw, json) Hash identifier: W/hSUoOf9y8kjA2toCWy0NcTFoJvn7rHU8YdArJufw8= Subject key identifier: B5:D2:DA:C6:ED:FF:87:5A:9A:B9:AB:93:42:6B:2D:B6:37:44:48:72 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3C51B446EDD693D5514C4C40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2e8d:f400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b4:46:ed:d6:93:d5:51:4c:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=d170ea49-d3ab-4c47-93c7-ddf55999511d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:63:66:7c:0b:12:91:c4:5d:99:9c:96:23:d6: 34:8f:80:b1:53:16:9c:5d:51:a9:65:af:d5:d8:69: fd:e4:65:88:a2:bc:ed:33:d8:88:c1:9b:4b:a5:51: 39:0c:46:ef:b5:68:cf:41:ad:68:d7:8e:ef:10:48: aa:4d:73:e2:4f:00:5d:e2:4c:ec:9f:e9:ba:88:3e: f5:98:3d:55:02:ec:5d:3e:40:82:6d:f2:4c:1d:0a: ff:02:f9:50:6d:51:82:17:c6:23:d6:6e:32:50:4c: b9:ec:47:48:73:00:8e:c7:de:84:48:7f:23:1e:40: ee:24:06:d2:90:00:24:02:bf:29:b8:2a:61:27:5d: da:c4:c4:73:fd:fd:2c:74:87:28:65:33:1d:56:f5: 76:37:1a:1f:25:de:58:3d:f3:ec:80:35:20:f4:b4: b6:a8:97:44:a3:dd:c9:72:12:0e:07:bc:3e:39:c2: d6:84:ed:93:60:37:b8:18:71:1a:fa:52:52:08:74: 2b:24:7b:36:07:15:4b:3d:a2:5e:20:d1:c3:ef:5f: 36:d2:de:80:95:2d:6b:4b:6a:3f:a9:89:d7:62:fc: c5:53:52:2c:f0:0a:3e:69:3e:54:6e:c5:20:f4:ae: 26:1e:73:45:42:1b:2e:42:b2:36:f8:d0:b8:fe:31: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D2:DA:C6:ED:FF:87:5A:9A:B9:AB:93:42:6B:2D:B6:37:44:48:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/630a483b-2ad1-3535-9e6e-bcbac743a122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:f400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:06:7f:ac:5e:3e:42:d4:6a:27:03:7c:86:1a:49:94:f9:60: 6c:c9:01:0b:06:e0:9b:9f:c1:d3:38:8c:31:af:93:8f:56:28: 3c:c6:6a:0e:be:01:db:59:fe:c6:d5:9b:31:3d:d0:8c:ff:0c: bc:cf:ec:12:fa:7b:9f:9f:c9:c0:06:db:ad:52:45:56:22:08: 41:db:01:f6:3a:7a:fd:c8:32:4e:c7:8b:12:cf:64:83:5e:c1: d3:9d:3b:37:a3:2c:e5:5e:ab:c9:f9:5b:28:00:1a:32:6f:32: f0:12:0c:b3:fc:4c:86:85:41:45:06:80:7a:77:1d:9a:87:7d: bb:3b:7b:62:85:84:61:2c:da:8d:d8:ad:82:75:41:5e:7b:05: 28:0b:7c:e5:fd:59:f3:bc:3b:5c:8d:a7:2e:82:67:c4:a1:e8: 85:73:97:48:cb:fa:01:b6:47:a6:14:34:30:89:77:80:2f:ef: 02:15:ea:bd:b7:40:07:17:16:19:69:90:e5:64:4f:77:21:1e: 5c:4e:30:72:6d:6c:8f:3b:bc:33:52:31:87:04:f7:e9:d4:d6: e6:3e:84:97:e5:3f:08:3a:cc:90:66:6c:20:3b:55:81:d9:e0: fc:fa:b3:77:53:12:fe:cb:9d:6d:0a:4b:a8:1a:2f:43:5a:af: 70:ce:94:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs8UbRG7daT1VFMTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDE3MGVhNDktZDNhYi00YzQ3LTkzYzctZGRmNTU5OTk1MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGNmfAsSkcRdmZyWI9Y0j4CxUxacXVGpZa/V 2Gn95GWIorztM9iIwZtLpVE5DEbvtWjPQa1o147vEEiqTXPiTwBd4kzsn+m6iD71 mD1VAuxdPkCCbfJMHQr/AvlQbVGCF8Yj1m4yUEy57EdIcwCOx96ESH8jHkDuJAbS kAAkAr8puCphJ13axMRz/f0sdIcoZTMdVvV2NxofJd5YPfPsgDUg9LS2qJdEo93J chIOB7w+OcLWhO2TYDe4GHEa+lJSCHQrJHs2BxVLPaJeINHD71820t6AlS1rS2o/ qYnXYvzFU1Is8Ao+aT5UbsUg9K4mHnNFQhsuQrI2+NC4/jHnNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLXS2sbt/4damrmrk0JrLbY3REhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjMwYTQ4M2ItMmFkMS0z NTM1LTllNmUtYmNiYWM3NDNhMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujfQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATQZ/rF4+QtRqJwN8hhpJlPlgbMkBCwbgm5/B0ziMMa+Tj1YoPMZq Dr4B21n+xtWbMT3QjP8MvM/sEvp7n5/JwAbbrVJFViIIQdsB9jp6/cgyTseLEs9k g17B0507N6Ms5V6ryflbKAAaMm8y8BIMs/xMhoVBRQaAencdmod9uzt7YoWEYSza jditgnVBXnsFKAt85f1Z87w7XI2nLoJnxKHohXOXSMv6AbZHphQ0MIl3gC/vAhXq vbdABxcWGWmQ5WRPdyEeXE4wcm1sjzu8M1IxhwT36dTW5j6El+U/CDrMkGZsIDtV gdng/Pqzd1MS/sudbQpLqBovQ1qvcM6UZA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:16:32 2025 by rpki-client