$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/660590f3-9bd1-32ad-b293-5670b83482c2.roa File: 660590f3-9bd1-32ad-b293-5670b83482c2.roa (raw, json) Hash identifier: +qsr+V3bfuWp08+rIsRiZeDamMPiNmJ2dcLbi94fA1c= Subject key identifier: C1:9C:BB:46:BB:FE:42:D4:E7:FD:45:63:3B:9C:00:46:12:69:51:FE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B715D100428C3A8BA41B74B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/660590f3-9bd1-32ad-b293-5670b83482c2.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 30036 IP address blocks: 2604:2e87:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:10:04:28:c3:a8:ba:41:b7:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3aba61d3-71a0-4b75-99d9-3986289a5bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:d9:d9:45:5d:bb:11:e8:e9:ad:7b:9f:85: 30:7f:50:48:00:8c:c1:5f:d2:b4:d6:3f:1c:9e:c4: 92:4a:6b:d2:a0:ee:99:c4:de:17:25:da:88:5c:52: eb:5e:f7:01:d3:df:9e:9d:90:76:06:4d:ff:fb:2d: 74:21:e5:83:db:95:8a:07:cf:52:bc:d4:17:e3:77: 0d:d4:4e:02:36:b6:6e:c6:1d:7c:c6:cc:45:7f:ea: 68:aa:54:9d:e7:2d:e9:67:1c:3a:70:6e:36:69:67: 32:eb:d5:d9:4e:ff:6c:70:1d:6d:7b:ec:47:77:b3: b8:62:81:a5:5d:a0:83:76:09:10:72:83:0a:0e:16: db:63:ed:64:56:81:49:e9:ad:f6:99:e2:f7:5f:c4: 97:de:6a:97:81:88:55:42:c6:59:6d:5e:33:9c:dc: f7:25:1c:16:f4:38:94:95:2a:8f:4b:67:e4:66:e6: 40:97:d7:c8:af:91:96:39:c9:77:b1:13:53:47:65: 9b:69:5f:bd:3e:75:bd:db:f6:9d:fa:a2:d3:64:95: 95:d5:f1:6b:d4:c7:1b:59:e4:d9:ae:34:18:3c:25: 87:4d:90:37:81:86:17:68:db:87:c1:81:c1:2a:55: ce:e3:a2:44:b7:07:f1:a2:5f:6f:1e:0e:63:fd:7f: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:BB:46:BB:FE:42:D4:E7:FD:45:63:3B:9C:00:46:12:69:51:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/660590f3-9bd1-32ad-b293-5670b83482c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:42:73:01:b3:0b:1f:df:25:35:f9:a7:96:77:17:d4:6b:f6: 58:c4:66:7a:8f:b3:8a:ce:9b:86:d2:6b:42:4b:d9:e3:46:83: fe:bd:9c:f6:d4:07:59:a0:31:dd:14:ac:fa:49:1d:56:1f:4a: d1:63:dc:24:20:65:0f:86:ab:4a:d3:66:41:06:6f:c1:c2:99: 7b:bb:4d:5e:06:65:53:74:34:4a:0e:b7:c0:dc:73:79:4c:48: fc:58:f4:ce:4c:fc:68:f8:d5:7c:3c:d3:85:d6:79:31:52:a4: 62:82:13:5e:fb:81:e6:dd:70:b9:7c:c1:70:80:b8:df:69:e8: 1c:6c:ae:95:d6:fd:09:90:47:ba:e0:d9:43:79:e2:ed:b8:08: 6b:64:78:c8:bd:5c:10:ad:2f:83:1f:a9:32:12:c7:86:e3:17: 53:82:c5:09:bd:ac:ae:89:30:a4:9c:04:41:0e:56:2f:39:aa: c9:43:b9:73:d7:1d:5c:bf:49:db:d1:5b:81:be:bb:15:1b:cf: c3:7c:6c:53:1e:ba:4c:e5:0e:b4:dd:5d:fe:42:e5:0a:d7:12: b6:80:73:e3:ed:8f:1e:cb:56:28:ee:7c:cc:3c:2e:06:88:7d: 38:bf:f0:4b:52:88:8b:64:01:bd:43:d2:f7:69:32:67:a6:eb: 2c:4a:52:f1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtxXRAEKMOoukG3SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2FiYTYxZDMtNzFhMC00Yjc1LTk5ZDktMzk4NjI4OWE1YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSvZ2UVduxHo6a17n4Uwf1BIAIzBX9K01j8c nsSSSmvSoO6ZxN4XJdqIXFLrXvcB09+enZB2Bk3/+y10IeWD25WKB89SvNQX43cN 1E4CNrZuxh18xsxFf+poqlSd5y3pZxw6cG42aWcy69XZTv9scB1te+xHd7O4YoGl XaCDdgkQcoMKDhbbY+1kVoFJ6a32meL3X8SX3mqXgYhVQsZZbV4znNz3JRwW9DiU lSqPS2fkZuZAl9fIr5GWOcl3sRNTR2WbaV+9PnW92/ad+qLTZJWV1fFr1McbWeTZ rjQYPCWHTZA3gYYXaNuHwYHBKlXO46JEtwfxol9vHg5j/X+g3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMGcu0a7/kLU5/1FYzucAEYSaVH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjYwNTkwZjMtOWJkMS0z MmFkLWIyOTMtNTY3MGI4MzQ4MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfEJzAbMLH98lNfmnlncX1Gv2WMRmeo+zis6bhtJrQkvZ40aD/r2c 9tQHWaAx3RSs+kkdVh9K0WPcJCBlD4arStNmQQZvwcKZe7tNXgZlU3Q0Sg63wNxz eUxI/Fj0zkz8aPjVfDzThdZ5MVKkYoITXvuB5t1wuXzBcIC432noHGyuldb9CZBH uuDZQ3ni7bgIa2R4yL1cEK0vgx+pMhLHhuMXU4LFCb2srokwpJwEQQ5WLzmqyUO5 c9cdXL9J29Fbgb67FRvPw3xsUx66TOUOtN1d/kLlCtcStoBz4+2PHstWKO58zDwu Boh9OL/wS1KIi2QBvUPS92kyZ6brLEpS8Q== -----END CERTIFICATE-----Generated at Sat Oct 11 07:19:14 2025 by rpki-client