$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa File: aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa (raw, json) Hash identifier: ieZR5odVaA10h1YlSrU4nw9kLuYg0g8dMNobOiGM+Ac= Subject key identifier: 5A:38:93:4C:1C:33:9F:5B:B3:AC:9D:3C:57:27:55:D9:42:75:D5:58 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE445BC9528AEE1DB1B5A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8a:7400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:44:5b:c9:52:8a:ee:1d:b1:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=03d8fcb6-61ed-4f16-bd08-94ea45bb7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:8d:a4:f9:50:9a:36:9d:69:76:c6:37:82: dd:4f:78:78:e3:61:e0:8c:12:96:94:60:a3:56:d7: cd:71:36:3c:a2:27:4c:90:db:9d:71:e9:3f:ca:f9: 85:88:e4:a7:64:cb:ad:ab:18:6b:b4:a7:ec:b1:e6: 2f:7b:f6:94:ed:5d:44:ac:59:36:78:a3:2a:68:fd: 41:c4:59:67:7b:ed:04:99:da:d4:25:89:c1:22:cc: b7:33:d9:86:af:a0:29:b0:e9:c4:d9:99:4f:75:e4: 0d:8c:c7:01:cd:d6:a7:64:b4:4b:00:e7:01:50:b4: ad:aa:53:c9:af:e6:5b:b2:0d:5b:e9:13:f7:9a:b3: ca:df:15:fd:67:53:28:3b:8a:a0:88:fa:7b:7e:9e: c0:c1:28:13:02:2f:41:ec:57:99:45:88:c5:69:6e: f5:ff:b4:77:a3:20:b6:6e:7e:d3:44:1c:c0:f1:5e: 1f:f2:a8:6e:30:52:0a:d9:e4:ef:ab:81:9b:09:0f: 01:2b:43:b2:d0:f3:98:15:72:ef:e1:7b:ad:a1:11: bf:14:a5:41:58:60:39:1d:7e:82:2a:13:38:fe:2b: d5:ee:f1:86:bf:ec:2f:22:e5:fd:e0:d2:1a:de:5b: d4:ae:d6:4a:c3:88:ea:03:21:06:3f:c1:6c:78:19: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:38:93:4C:1C:33:9F:5B:B3:AC:9D:3C:57:27:55:D9:42:75:D5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa0f5431-5fce-36d0-84a8-0a19f7a03198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8a:7400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f2:41:92:c4:8e:3f:aa:0a:4e:fc:6b:d5:74:68:2a:0e:bf: 61:24:34:66:6a:4f:21:7c:a5:bb:c3:18:f5:74:fb:b0:ae:5a: a2:5b:83:60:59:f0:b5:10:ea:e8:3d:e4:2f:1c:80:69:f9:fb: 8a:e6:e8:b9:c0:6e:22:6f:a0:a3:88:18:be:10:65:49:8a:43: 28:83:e1:71:71:76:63:b2:78:76:83:fe:f8:38:b8:99:0e:23: b5:27:6f:26:bf:08:73:c7:0c:e2:97:68:72:20:29:a7:3d:03: 0f:e1:b5:f8:5e:55:99:7c:82:01:75:bc:15:a0:dd:92:39:62: 1f:80:ff:e6:16:6e:dc:87:24:11:81:93:39:6a:43:12:96:7c: 56:68:34:3c:f0:82:62:53:f8:c1:14:60:0e:70:50:ee:19:b6: a2:c9:06:a1:22:a2:fb:c3:8c:ba:e5:24:c2:db:fc:10:cd:6c: d5:11:b5:90:cf:1d:e6:b3:c0:df:0f:79:97:96:74:b1:66:f6: 27:32:ef:53:f8:91:e7:1f:76:31:f0:e1:9c:c0:a7:20:0f:04: 40:03:6e:19:80:84:a6:f3:88:da:ef:a0:22:92:8f:0d:88:c2: 23:05:0c:69:9a:7d:54:e7:9f:da:24:ee:60:38:bd:93:92:1e: 5a:54:29:6f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzkRbyVKK7h2xtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDNkOGZjYjYtNjFlZC00ZjE2LWJkMDgtOTRlYTQ1YmI3YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/eNpPlQmjadaXbGN4LdT3h442HgjBKWlGCj VtfNcTY8oidMkNudcek/yvmFiOSnZMutqxhrtKfsseYve/aU7V1ErFk2eKMqaP1B xFlne+0EmdrUJYnBIsy3M9mGr6ApsOnE2ZlPdeQNjMcBzdanZLRLAOcBULStqlPJ r+Zbsg1b6RP3mrPK3xX9Z1MoO4qgiPp7fp7AwSgTAi9B7FeZRYjFaW71/7R3oyC2 bn7TRBzA8V4f8qhuMFIK2eTvq4GbCQ8BK0Oy0POYFXLv4XutoRG/FKVBWGA5HX6C KhM4/ivV7vGGv+wvIuX94NIa3lvUrtZKw4jqAyEGP8FseBlXbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFo4k0wcM59bs6ydPFcnVdlCddVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEwZjU0MzEtNWZjZS0z NmQwLTg0YTgtMGExOWY3YTAzMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuinQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABPJBksSOP6oKTvxr1XRoKg6/YSQ0ZmpPIXylu8MY9XT7sK5aoluD YFnwtRDq6D3kLxyAafn7iuboucBuIm+go4gYvhBlSYpDKIPhcXF2Y7J4doP++Di4 mQ4jtSdvJr8Ic8cM4pdociAppz0DD+G1+F5VmXyCAXW8FaDdkjliH4D/5hZu3Ick EYGTOWpDEpZ8Vmg0PPCCYlP4wRRgDnBQ7hm2oskGoSKi+8OMuuUkwtv8EM1s1RG1 kM8d5rPA3w95l5Z0sWb2JzLvU/iR5x92MfDhnMCnIA8EQANuGYCEpvOI2u+gIpKP DYjCIwUMaZp9VOef2iTuYDi9k5IeWlQpbw== -----END CERTIFICATE-----Generated at Sat Oct 11 07:22:11 2025 by rpki-client