$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa File: a8d358ea-3a34-332d-8ea9-0d891492c16a.roa (raw, json) Hash identifier: cnKu3B033bPC0/0DgRio/vDCCdSS8ebp8g1OAX1HZ00= Subject key identifier: 18:82:FA:35:AE:CD:80:F2:09:77:1C:EC:2D:78:CA:F6:30:BE:C7:20 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B3FC5069560FE404142ABF1A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa Signing time: Fri 19 Sep 2025 18:40:36 +0000 ROA not before: Fri 19 Sep 2025 18:40:36 +0000 ROA not after: Thu 18 Dec 2025 19:40:36 +0000 asID: 19905 IP address blocks: 2604:2e88:bc00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:c5:06:95:60:fe:40:41:42:ab:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 19 18:40:36 2025 GMT Not After : Dec 18 19:40:36 2025 GMT Subject: CN=3aee1dc0-0337-4d7b-b9e4-7a8644d05011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:f3:d8:9d:70:4b:66:89:a8:8a:34:b7:59: ec:55:43:e2:28:61:5e:d3:4f:89:0a:81:fd:b1:aa: a6:19:64:a5:ee:48:b1:60:96:47:66:87:c5:47:87: 28:ae:0e:07:a8:cb:e5:31:27:e2:64:ed:3c:c8:73: 6c:07:a5:58:07:1b:5b:6b:6d:2d:37:50:27:f3:36: 54:ad:49:0d:ad:41:69:a6:b0:b0:f1:bc:05:2b:92: ea:67:94:9a:95:22:49:69:54:c6:da:a9:4e:84:34: f5:35:01:d2:ca:ec:0f:5a:96:36:6c:20:09:ae:e1: ca:88:97:d8:35:6e:26:a3:6f:70:1e:2e:65:7e:12: 7b:3d:61:46:18:51:d8:d0:88:7b:6a:19:7b:5c:f2: 2a:15:ac:1a:a0:69:4a:7e:ef:4b:8a:b5:e1:68:9d: 56:d2:dd:d7:a2:72:6a:81:f7:02:7c:c5:3b:60:83: 8e:13:8c:33:e9:54:42:b5:a0:51:5e:c6:fd:0b:44: 0d:f1:6a:29:de:d1:47:96:77:92:5c:da:3a:6a:4b: 8a:44:57:93:86:ff:39:6c:da:9d:60:dc:a0:c7:f8: f9:a5:a3:0d:82:58:3f:0d:35:2a:37:25:63:72:05: da:ab:51:38:c2:3f:74:3d:c9:e2:3d:b9:17:d7:40: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:82:FA:35:AE:CD:80:F2:09:77:1C:EC:2D:78:CA:F6:30:BE:C7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8d358ea-3a34-332d-8ea9-0d891492c16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:bc00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:76:d8:67:e6:56:16:56:bc:02:95:4b:f1:b4:e3:0a:0a:b2: 27:fb:03:5a:69:bb:b4:2f:5b:9e:e5:2b:f7:36:25:42:43:23: 86:61:18:f5:95:39:89:95:e4:25:d4:ed:d4:67:e2:09:a8:20: 45:90:bd:cd:77:3e:74:db:99:be:a2:97:8a:2c:00:01:29:6c: 86:17:fd:ca:2a:bb:3a:a8:9d:e5:e5:7d:e1:55:0b:ed:c9:9a: a4:48:c1:ac:36:83:e4:c2:f8:c7:1e:a0:3e:d3:b0:e7:6c:e7: 45:8e:81:3e:07:c3:e0:4d:5e:59:90:2d:1c:00:e7:95:7a:e7: 6e:e9:17:9a:90:19:e6:3b:4d:f5:75:d6:b5:b2:1e:dd:a9:ef: ba:7c:d1:1d:e8:ca:f9:36:33:ff:7b:f4:e9:4e:ee:4b:11:d4: 98:04:1c:a0:31:59:35:d2:ee:84:4f:04:10:1b:38:75:76:46: 65:f4:81:1f:5c:ca:3a:1f:e7:af:83:62:6b:40:8d:7d:9d:63: 38:0c:98:c9:dc:ca:2e:ba:1f:06:f3:cb:80:3e:51:4f:55:8a: e6:4e:92:28:db:21:68:df:72:24:1e:66:7f:f1:29:1a:f3:af: e4:86:43:e2:ae:0a:80:63:5f:ad:45:55:5c:cb:22:f9:93:5d: 42:87:f1:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs/xQaVYP5AQUKr8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkxOTE4NDAzNloXDTI1MTIxODE5NDAzNlowLzEtMCsGA1UEAxMk M2FlZTFkYzAtMDMzNy00ZDdiLWI5ZTQtN2E4NjQ0ZDA1MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIvz2J1wS2aJqIo0t1nsVUPiKGFe00+JCoH9 saqmGWSl7kixYJZHZofFR4corg4HqMvlMSfiZO08yHNsB6VYBxtba20tN1An8zZU rUkNrUFpprCw8bwFK5LqZ5SalSJJaVTG2qlOhDT1NQHSyuwPWpY2bCAJruHKiJfY NW4mo29wHi5lfhJ7PWFGGFHY0Ih7ahl7XPIqFawaoGlKfu9LirXhaJ1W0t3XonJq gfcCfMU7YIOOE4wz6VRCtaBRXsb9C0QN8Wop3tFHlneSXNo6akuKRFeThv85bNqd YNygx/j5paMNglg/DTUqNyVjcgXaq1E4wj90PcniPbkX10A04wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBiC+jWuzYDyCXcc7C14yvYwvscgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYThkMzU4ZWEtM2EzNC0z MzJkLThlYTktMGQ4OTE0OTJjMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjHbYZ+ZWFla8ApVL8bTjCgqyJ/sDWmm7tC9bnuUr9zYlQkMjhmEY 9ZU5iZXkJdTt1GfiCaggRZC9zXc+dNuZvqKXiiwAASlshhf9yiq7Oqid5eV94VUL 7cmapEjBrDaD5ML4xx6gPtOw52znRY6BPgfD4E1eWZAtHADnlXrnbukXmpAZ5jtN 9XXWtbIe3anvunzRHejK+TYz/3v06U7uSxHUmAQcoDFZNdLuhE8EEBs4dXZGZfSB H1zKOh/nr4Nia0CNfZ1jOAyYydzKLrofBvPLgD5RT1WK5k6SKNshaN9yJB5mf/Ep GvOv5IZD4q4KgGNfrUVVXMsi+ZNdQofxAg== -----END CERTIFICATE-----Generated at Sat Oct 11 07:11:37 2025 by rpki-client