$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9038f73f-0334-391e-be24-a9abb7293fa7.roa File: 9038f73f-0334-391e-be24-a9abb7293fa7.roa (raw, json) Hash identifier: wK2IY3fjAxmZf+4ktttdY7VCOJPWXhSLgsP3dWpHsJ4= Subject key identifier: C0:19:D6:07:FC:0B:F8:0B:5A:23:D1:66:3A:3B:BC:24:03:8A:81:FC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B79CAA15BA193D4574620F900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9038f73f-0334-391e-be24-a9abb7293fa7.roa Signing time: Fri 10 Oct 2025 13:28:47 +0000 ROA not before: Fri 10 Oct 2025 13:28:47 +0000 ROA not after: Thu 08 Jan 2026 14:28:47 +0000 asID: 19905 IP address blocks: 2604:2e8a:9400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ca:a1:5b:a1:93:d4:57:46:20:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 10 13:28:47 2025 GMT Not After : Jan 8 14:28:47 2026 GMT Subject: CN=46c90d7c-3fa8-4794-8ccb-1ef4d8985b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:0c:d6:b8:64:17:ef:0b:98:60:6e:ff:ac: 0b:22:c2:a2:ed:34:63:88:20:25:48:1f:db:0d:da: 22:f3:8a:c1:fc:05:03:46:3f:27:6a:80:a9:83:29: c4:da:20:de:5a:a9:5a:09:6b:88:a1:c3:af:94:74: a4:e0:7d:87:d9:4c:da:01:a2:e6:d2:cf:2a:d1:7d: 07:0c:a1:99:18:a6:81:f6:49:ca:a7:83:53:77:b4: 4a:11:fa:23:f4:28:01:e4:b1:02:a3:ff:f1:98:33: 44:ae:a3:51:c7:67:8a:ee:86:ea:b5:55:11:01:bb: 9d:5e:d4:0b:00:90:84:d2:d6:df:c0:bf:88:5b:f9: b5:ec:da:8d:54:44:ed:20:b4:f8:ef:3a:ff:3e:97: 25:be:6e:5c:7b:dd:bf:a0:f0:3d:fa:1e:6d:3b:b0: 76:a6:e3:16:04:ec:18:16:b7:46:58:37:dc:9f:e8: 60:fd:1c:42:84:b8:68:65:9b:5d:d1:e0:f4:7e:09: b4:92:72:33:9b:49:9d:21:2c:61:17:7c:8c:dd:65: a6:4b:4c:c7:d2:17:06:9b:c2:63:06:50:8e:07:09: e2:1c:7e:6c:df:a0:c6:2d:17:b7:72:ba:56:b7:2b: db:73:04:34:1e:b2:8d:7e:45:3a:78:45:76:cd:0b: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:D6:07:FC:0B:F8:0B:5A:23:D1:66:3A:3B:BC:24:03:8A:81:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9038f73f-0334-391e-be24-a9abb7293fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:9400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ad:04:e5:fc:50:47:a8:d9:2d:5f:c1:2a:23:46:b4:ca:fa: 8d:97:06:87:c8:e6:7b:7a:7f:f5:bf:62:9b:a0:26:d4:b3:f5: 6d:b9:e7:7d:01:5f:01:4b:85:31:34:ad:af:60:fd:33:6b:7c: a4:27:7b:2b:a2:4e:7f:ab:99:e0:ec:d1:30:cc:fd:40:dd:ff: 6f:89:91:e5:9e:70:6e:69:90:30:71:26:21:09:b5:d9:c6:9d: 37:e0:ad:2e:cf:6a:e4:8c:60:8a:5d:8a:aa:17:b4:dc:b1:47: 6c:d6:ff:83:ed:1f:28:8b:b9:94:f2:41:5e:a9:54:16:8e:d4: fc:30:b1:9c:71:bf:d7:17:13:b1:b0:d5:6d:bb:69:45:69:28: 30:a9:bc:a1:a2:91:4b:c0:43:cf:5a:09:50:33:19:6c:0e:e2: e6:56:b6:6f:7d:8b:bf:42:4a:d0:d2:6b:51:1f:bc:c8:93:51: e9:ab:d6:be:f6:c4:16:ee:bc:cf:09:0f:9d:9f:c2:97:89:c1: 5f:4a:22:af:30:49:3b:2b:c6:99:4a:45:94:1f:b6:68:9c:2b: 2b:67:0d:63:94:7a:82:b8:2e:cd:29:11:64:f5:91:0a:7e:04: 21:79:52:33:45:25:fe:c4:c6:f1:39:44:3a:47:99:a2:52:d0: c4:50:d5:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt5yqFboZPUV0Yg+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMDEzMjg0N1oXDTI2MDEwODE0Mjg0N1owLzEtMCsGA1UEAxMk NDZjOTBkN2MtM2ZhOC00Nzk0LThjY2ItMWVmNGQ4OTg1YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3MM1rhkF+8LmGBu/6wLIsKi7TRjiCAlSB/b Ddoi84rB/AUDRj8naoCpgynE2iDeWqlaCWuIocOvlHSk4H2H2UzaAaLm0s8q0X0H DKGZGKaB9knKp4NTd7RKEfoj9CgB5LECo//xmDNErqNRx2eK7obqtVURAbudXtQL AJCE0tbfwL+IW/m17NqNVETtILT47zr/Ppclvm5ce92/oPA9+h5tO7B2puMWBOwY FrdGWDfcn+hg/RxChLhoZZtd0eD0fgm0knIzm0mdISxhF3yM3WWmS0zH0hcGm8Jj BlCOBwniHH5s36DGLRe3crpWtyvbcwQ0HrKNfkU6eEV2zQtfQQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMAZ1gf8C/gLWiPRZjo7vCQDioH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTAzOGY3M2YtMDMzNC0z OTFlLWJlMjQtYTlhYmI3MjkzZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuipQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALK0E5fxQR6jZLV/BKiNGtMr6jZcGh8jme3p/9b9im6Am1LP1bbnn fQFfAUuFMTStr2D9M2t8pCd7K6JOf6uZ4OzRMMz9QN3/b4mR5Z5wbmmQMHEmIQm1 2cadN+CtLs9q5Ixgil2Kqhe03LFHbNb/g+0fKIu5lPJBXqlUFo7U/DCxnHG/1xcT sbDVbbtpRWkoMKm8oaKRS8BDz1oJUDMZbA7i5la2b32Lv0JK0NJrUR+8yJNR6avW vvbEFu68zwkPnZ/Cl4nBX0oirzBJOyvGmUpFlB+2aJwrK2cNY5R6grguzSkRZPWR Cn4EIXlSM0Ul/sTG8TlEOkeZolLQxFDVTA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:11:37 2025 by rpki-client