$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa File: a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa (raw, json) Hash identifier: nFB+1VP0otLWLcQfxKwU2AYypWvxZQIoIeWVKdZHRdk= Subject key identifier: 15:6E:AB:36:05:3B:6A:41:94:E6:F7:8B:9C:C6:D8:FC:1B:A3:0F:3D Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B609C8C9DE727A11FA9FA8F6C Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 2604:2e87:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8c:9d:e7:27:a1:1f:a9:fa:8f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=5c42b81a-3cdc-4ae3-a70e-dcd1d53cdfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:ca:e9:85:39:38:4a:ce:05:c8:df:fb:32: 61:b7:ca:98:0a:8b:1c:b1:53:d6:95:9b:64:eb:b0: e9:79:60:4c:fd:2f:44:3e:71:56:57:90:2f:83:ff: 87:b5:51:18:ed:d3:96:8c:6e:e7:74:b5:18:f7:0f: 62:3a:95:8e:cc:79:c9:30:95:2c:aa:ce:ad:81:e9: 41:b8:90:20:98:b7:40:94:03:d4:18:8f:1a:c4:1d: f5:01:09:7b:97:65:aa:7e:5a:e5:54:21:2c:8b:b1: c7:cb:a8:ee:2b:dd:e9:41:7b:2c:4b:86:b9:38:24: 0f:79:9f:78:1a:d2:9c:45:92:d8:0d:02:77:43:f4: f3:a3:f0:db:43:87:2f:64:8e:51:4f:da:e5:c8:8b: 63:5c:16:36:d2:cb:37:3a:52:44:90:8b:bb:ec:c6: d3:06:15:db:25:5c:68:0b:ef:e1:6c:71:76:a1:b8: 43:b7:e3:87:04:c7:90:40:fd:d9:d8:25:23:de:74: 4c:8d:c9:1d:fd:bb:01:08:1a:45:7e:89:5e:c4:90: 2f:95:80:41:f5:2d:e1:d9:de:14:c1:d9:e6:86:65: fa:cc:ef:41:83:e9:17:af:ee:b9:1a:73:e8:b8:7e: fd:01:d5:a4:28:7b:c6:ed:46:18:cb:0f:cb:84:f0: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:AB:36:05:3B:6A:41:94:E6:F7:8B:9C:C6:D8:FC:1B:A3:0F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a33c77a2-3c1f-38ed-b7eb-6756b9d07655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:24:be:b8:40:77:34:fc:60:59:f1:37:99:ea:5d:1a:5c:2e: 96:e3:65:f3:70:27:a2:07:38:6f:7e:e5:32:36:c8:bb:71:c8: 33:a9:9f:43:ac:83:d8:f1:5d:f8:87:a1:06:d8:c9:b5:85:b0: fc:fb:70:8a:72:c8:63:ad:9a:cd:b7:36:8f:9c:cb:25:4d:f1: f0:63:49:cd:a4:ca:89:8d:e2:c2:af:bd:39:47:12:0a:0b:6c: 1c:f6:7b:c9:ff:a8:6f:79:cb:0d:71:af:a2:9b:fb:c2:30:10: 93:7e:32:e2:5e:f0:87:31:3a:e1:ab:80:9f:4e:7f:f2:31:5b: 1a:2d:3f:72:f6:d1:57:37:59:f5:93:e6:86:d7:42:09:1b:0f: 16:1a:92:38:4f:aa:ca:9d:7d:c4:23:05:43:8d:4a:d9:19:1f: d0:b7:2f:51:aa:eb:ea:f6:f7:94:c8:ed:8c:ea:2a:ea:4e:71: 31:81:43:e3:b9:26:1d:da:e1:23:82:8e:a6:4a:14:a0:ff:d1: 85:4b:5c:cc:28:6a:21:38:11:13:9f:19:0d:b6:3b:38:44:2e: d5:f3:32:16:4c:01:e8:73:16:04:ef:9b:35:02:e7:92:57:69: 6a:69:ad:0d:c6:2b:d7:df:da:d7:e3:89:01:47:6f:29:e5:32: 35:c2:a2:b5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtgnIyd5yehH6n6j2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NWM0MmI4MWEtM2NkYy00YWUzLWE3MGUtZGNkMWQ1M2NkZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFbK6YU5OErOBcjf+zJht8qYCoscsVPWlZtk 67DpeWBM/S9EPnFWV5Avg/+HtVEY7dOWjG7ndLUY9w9iOpWOzHnJMJUsqs6tgelB uJAgmLdAlAPUGI8axB31AQl7l2WqflrlVCEsi7HHy6juK93pQXssS4a5OCQPeZ94 GtKcRZLYDQJ3Q/Tzo/DbQ4cvZI5RT9rlyItjXBY20ss3OlJEkIu77MbTBhXbJVxo C+/hbHF2obhDt+OHBMeQQP3Z2CUj3nRMjckd/bsBCBpFfolexJAvlYBB9S3h2d4U wdnmhmX6zO9Bg+kXr+65GnPouH79AdWkKHvG7UYYyw/LhPD5bQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBVuqzYFO2pBlOb3i5zG2Pwbow89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTMzYzc3YTItM2MxZi0z OGVkLWI3ZWItNjc1NmI5ZDA3NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMSS+uEB3NPxgWfE3mepdGlwuluNl83Anogc4b37lMjbIu3HIM6mf Q6yD2PFd+IehBtjJtYWw/PtwinLIY62azbc2j5zLJU3x8GNJzaTKiY3iwq+9OUcS CgtsHPZ7yf+ob3nLDXGvopv7wjAQk34y4l7whzE64auAn05/8jFbGi0/cvbRVzdZ 9ZPmhtdCCRsPFhqSOE+qyp19xCMFQ41K2Rkf0LcvUarr6vb3lMjtjOoq6k5xMYFD 47kmHdrhI4KOpkoUoP/RhUtczChqITgRE58ZDbY7OEQu1fMyFkwB6HMWBO+bNQLn kldpammtDcYr19/a1+OJAUdvKeUyNcKitQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:21:53 2025 by rpki-client