$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fbb0ea5-58e0-34bd-813a-8a444dd57d90.roa File: 8fbb0ea5-58e0-34bd-813a-8a444dd57d90.roa (raw, json) Hash identifier: q14rf/AShrTjqu8W3LxYec2v4kov0TJQ+6L5eM17ias= Subject key identifier: A0:83:E2:94:F1:CB:57:3E:F1:94:57:1D:AE:4D:02:74:99:38:0A:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE3FD8981CD051AD084800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fbb0ea5-58e0-34bd-813a-8a444dd57d90.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e89:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3f:d8:98:1c:d0:51:ad:08:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bdcf02d3-4cc0-4e40-809b-f1e24b1b1e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:f1:a9:27:4c:1c:5b:b8:33:56:79:bc:a6: 1c:0f:76:39:31:aa:e1:9c:b6:f7:0a:27:a7:6d:31: 33:ff:b3:6d:73:32:45:ff:3f:34:c6:7f:2d:c7:5f: 33:7a:af:72:df:7b:ca:c1:60:e2:36:75:e9:c7:43: c5:e4:cc:17:49:86:b3:dd:c8:3e:45:58:6e:b8:a8: 3c:ce:a9:48:88:8c:37:1f:ed:6f:09:77:4c:88:78: 41:34:d0:b0:79:1b:10:e2:ce:2e:d1:38:7a:61:d9: 6b:5a:9a:c1:23:69:f5:a5:61:5b:f6:16:2d:24:40: 7e:94:c7:8f:5a:cd:bf:96:02:64:8d:9e:eb:75:99: 3f:5c:c6:d8:7a:1a:df:32:c7:30:47:a9:61:5d:78: a1:47:b7:7f:30:ee:80:86:15:35:d2:09:84:12:8a: 74:25:3f:51:a9:7c:2b:7e:d5:15:77:f4:15:70:bd: a4:26:35:b8:e1:63:c2:b3:6d:c1:47:6c:b3:3e:f7: 43:e3:d1:d8:62:ee:3d:6b:f3:0a:7d:06:4a:f3:f5: eb:46:bf:98:fd:8f:61:d0:3d:4e:57:b8:d8:3e:9a: 3b:53:f1:5f:44:10:b5:f5:5f:1d:61:e7:95:7b:69: 18:34:80:f8:56:25:d2:c4:0d:80:b4:52:a0:a3:ab: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:E2:94:F1:CB:57:3E:F1:94:57:1D:AE:4D:02:74:99:38:0A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8fbb0ea5-58e0-34bd-813a-8a444dd57d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:ac00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:34:3b:4d:59:ca:d3:01:37:0b:43:dc:ae:38:f1:de:e5:ee: 77:0c:67:55:6e:a5:ce:25:7f:26:17:33:12:8c:34:30:43:6d: 6f:99:21:f7:53:2f:ed:65:d7:d9:4d:35:b0:15:15:08:7a:e0: e7:e4:0b:46:38:22:84:a5:5c:20:4e:88:38:51:85:a9:61:9b: bb:f6:71:a1:bd:89:4d:80:ca:4e:07:0f:f7:16:b6:9e:aa:c2: ae:ad:16:3f:30:1c:09:ce:4d:f7:4b:95:67:0b:8b:46:6b:b0: e1:ab:2b:ed:89:5c:a7:c7:99:f7:62:12:59:43:0f:05:fe:52: 18:cb:57:7f:db:5c:a3:0e:3c:94:a5:4c:e5:cc:ba:d3:19:75: bd:fc:8d:16:24:ba:df:11:ef:2c:26:4e:18:72:5f:9d:7f:1f: 73:8f:9d:e9:d3:f2:40:82:0d:54:91:86:bd:06:53:5b:38:9a: ba:35:83:0e:52:3a:00:51:b1:9e:7a:30:dc:de:37:74:00:42: bd:c5:14:a8:65:0e:46:36:cb:23:94:79:7a:e0:cc:82:15:ef: 42:c8:12:d3:94:87:54:c3:0b:16:c1:9d:b6:1e:5c:7b:51:1f: b1:69:99:16:f6:15:1a:46:28:68:bf:e3:9b:5e:75:4d:c5:3c: bb:97:7d:64 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzj/YmBzQUa0ISAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmRjZjAyZDMtNGNjMC00ZTQwLTgwOWItZjFlMjRiMWIxZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkPxqSdMHFu4M1Z5vKYcD3Y5MarhnLb3Cien bTEz/7NtczJF/z80xn8tx18zeq9y33vKwWDiNnXpx0PF5MwXSYaz3cg+RVhuuKg8 zqlIiIw3H+1vCXdMiHhBNNCweRsQ4s4u0Th6YdlrWprBI2n1pWFb9hYtJEB+lMeP Ws2/lgJkjZ7rdZk/XMbYehrfMscwR6lhXXihR7d/MO6AhhU10gmEEop0JT9RqXwr ftUVd/QVcL2kJjW44WPCs23BR2yzPvdD49HYYu49a/MKfQZK8/XrRr+Y/Y9h0D1O V7jYPpo7U/FfRBC19V8dYeeVe2kYNID4ViXSxA2AtFKgo6vwXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKCD4pTxy1c+8ZRXHa5NAnSZOApSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZiYjBlYTUtNThlMC0z NGJkLTgxM2EtOGE0NDRkZDU3ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiaww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABTQ7TVnK0wE3C0Pcrjjx3uXudwxnVW6lziV/JhczEow0MENtb5kh 91Mv7WXX2U01sBUVCHrg5+QLRjgihKVcIE6IOFGFqWGbu/Zxob2JTYDKTgcP9xa2 nqrCrq0WPzAcCc5N90uVZwuLRmuw4asr7Ylcp8eZ92ISWUMPBf5SGMtXf9tcow48 lKVM5cy60xl1vfyNFiS63xHvLCZOGHJfnX8fc4+d6dPyQIINVJGGvQZTWziaujWD DlI6AFGxnnow3N43dABCvcUUqGUORjbLI5R5euDMghXvQsgS05SHVMMLFsGdth5c e1EfsWmZFvYVGkYoaL/jm151TcU8u5d9ZA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:24 2025 by rpki-client