$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa File: a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa (raw, json) Hash identifier: IctvMGuEX6A8vZ/ZjEcTYKTB7CXtJOp4U6RJdTcJK68= Subject key identifier: 24:60:79:5E:DB:92:8D:1E:9C:B2:5D:C3:A3:41:77:2A:BC:90:C9:84 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CCA66138AE38699ECEAE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8c:1000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a6:61:38:ae:38:69:9e:ce:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=70f5fca3-94d6-4e7a-85f7-c7a9c0043d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:0d:e0:38:37:7a:10:f5:02:d5:fa:87:91: 1c:a7:2d:42:5b:5f:7d:b4:e3:a7:39:ef:4a:34:68: f9:00:37:b4:2d:7b:2e:28:ce:f4:c9:92:67:7f:c7: d9:36:d2:c3:da:66:e7:8c:9f:f9:4c:7e:8d:b9:cd: 01:0d:85:49:30:0b:d6:8b:c0:c4:df:3e:79:5c:a1: bf:e6:5b:45:ed:1c:b1:de:84:64:c4:2f:b7:a3:05: e9:d4:4c:d2:c5:59:f2:14:c4:f3:84:27:ab:cf:d8: 72:54:db:d7:9b:35:49:c4:9a:c6:d0:f6:d4:2b:d8: 26:e8:c6:7e:0c:e5:73:c2:4a:e0:d1:26:e9:d5:41: 9d:ae:e1:d5:e1:8a:c2:5a:4a:2d:87:0a:2e:e8:0e: ed:fc:bb:4f:cd:3a:e9:63:e4:b7:50:10:9d:3e:a7: 49:5e:46:9e:a6:95:42:a6:3c:90:ae:09:db:30:a1: d6:fb:50:c4:de:e0:e7:85:a6:b5:22:14:0e:ec:c2: 1e:7b:cb:3f:ac:d5:bc:d8:48:4b:e2:c8:5f:a0:db: 0b:a3:3e:ee:a5:8b:92:42:48:84:55:1b:68:bf:39: 5c:04:4b:89:a2:ca:27:82:9b:2c:c8:70:da:22:1d: 2a:c8:d4:40:f5:b5:d1:0c:49:0e:de:26:57:ca:07: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:79:5E:DB:92:8D:1E:9C:B2:5D:C3:A3:41:77:2A:BC:90:C9:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a2fc50a9-0b31-3adb-b217-7340b0237f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:1000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bf:7b:70:2d:64:0a:a6:e1:8f:c1:d0:d5:9b:3a:f0:78:ee: a3:7e:71:d8:2d:6e:c3:ef:51:1c:df:26:b2:3c:84:ed:25:cd: 51:9c:f7:46:57:93:ad:a2:e4:66:44:a9:2a:2f:05:18:10:ed: ed:f5:61:36:5f:6b:f9:a8:37:14:33:29:3e:0c:e3:9b:09:b1: 16:3f:32:83:73:2a:2b:66:70:d0:60:2f:33:b3:76:d8:9c:7e: 18:63:ca:11:f0:4c:32:fd:2a:53:74:ab:6c:1e:16:8d:7e:86: 95:31:23:e8:dd:d0:11:e8:80:cc:f1:26:88:2b:30:11:b3:c9: dd:4b:f2:95:26:99:8d:8a:ca:07:45:8d:17:a7:a3:48:c2:bf: f8:d3:09:8d:81:0b:fb:4e:15:80:40:b0:8e:b7:2e:f0:0e:96: 84:7b:8c:bd:47:73:62:e4:ad:75:aa:ee:16:59:c3:91:40:f0: 27:3f:f1:47:6c:d2:5c:5f:1f:73:e6:63:a3:23:c3:bf:51:24: 27:7e:3e:88:ab:3b:35:19:86:e3:52:b0:71:fb:8f:6f:b0:cc: b4:6e:5d:c9:f0:96:a1:35:5a:48:d7:70:da:0d:78:0b:55:d7: 60:f8:e9:4b:54:af:a4:9d:72:9c:67:f5:60:26:97:c0:27:69: ee:10:c8:71 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzKZhOK44aZ7OrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzBmNWZjYTMtOTRkNi00ZTdhLTg1ZjctYzdhOWMwMDQzZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+sN4Dg3ehD1AtX6h5Ecpy1CW199tOOnOe9K NGj5ADe0LXsuKM70yZJnf8fZNtLD2mbnjJ/5TH6Nuc0BDYVJMAvWi8DE3z55XKG/ 5ltF7Ryx3oRkxC+3owXp1EzSxVnyFMTzhCerz9hyVNvXmzVJxJrG0PbUK9gm6MZ+ DOVzwkrg0Sbp1UGdruHV4YrCWkothwou6A7t/LtPzTrpY+S3UBCdPqdJXkaeppVC pjyQrgnbMKHW+1DE3uDnhaa1IhQO7MIee8s/rNW82EhL4shfoNsLoz7upYuSQkiE VRtovzlcBEuJosongpssyHDaIh0qyNRA9bXRDEkO3iZXygd7FwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCRgeV7bko0enLJdw6NBdyq8kMmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTJmYzUwYTktMGIzMS0z YWRiLWIyMTctNzM0MGIwMjM3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWb97cC1kCqbhj8HQ1Zs68Hjuo35x2C1uw+9RHN8msjyE7SXNUZz3 RleTraLkZkSpKi8FGBDt7fVhNl9r+ag3FDMpPgzjmwmxFj8yg3MqK2Zw0GAvM7N2 2Jx+GGPKEfBMMv0qU3SrbB4WjX6GlTEj6N3QEeiAzPEmiCswEbPJ3UvylSaZjYrK B0WNF6ejSMK/+NMJjYEL+04VgECwjrcu8A6WhHuMvUdzYuStdaruFlnDkUDwJz/x R2zSXF8fc+ZjoyPDv1EkJ34+iKs7NRmG41KwcfuPb7DMtG5dyfCWoTVaSNdw2g14 C1XXYPjpS1SvpJ1ynGf1YCaXwCdp7hDIcQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:21:53 2025 by rpki-client