$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa File: b20c5d87-769b-3e5b-a67d-99594d32fb16.roa (raw, json) Hash identifier: yw7Viyo+EbWtMIijvumx5yCVoyDj+o44yFoWpjtI4HQ= Subject key identifier: F0:04:E4:A7:59:54:84:6E:22:6D:E3:45:B4:14:1D:F1:AB:F2:14:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B62021DC11BF6ADF08BA86740 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8c:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1d:c1:1b:f6:ad:f0:8b:a8:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7bb6d4c9-bd15-4581-ab78-8335990612ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:a1:60:0e:33:c1:7f:03:25:eb:5d:db:ad: f9:90:a5:58:0c:48:2c:29:ff:1e:c9:92:de:ec:93: db:e4:a1:81:a4:9e:c1:5d:d1:9d:e1:78:36:3d:05: c3:45:2e:35:c6:61:fc:6c:74:3b:7a:4a:f9:e7:d9: 6f:ce:46:40:c0:d8:be:78:19:8d:43:b7:ad:e6:7f: ea:f1:94:be:c7:1a:29:6f:94:09:3f:f1:e0:f4:04: a5:49:15:a0:9b:e2:db:84:a6:01:ff:b8:fa:7c:44: 80:1e:7a:d8:b0:36:a4:f9:5a:56:58:c0:01:8c:a4: bd:8e:e9:87:bf:6e:d1:b7:cf:f4:8d:ee:d8:8d:46: 5a:63:d6:7a:e3:5e:1e:96:c7:44:a1:4d:c9:37:36: 5a:40:0e:83:50:ae:1c:07:79:e9:aa:e1:24:08:e1: b4:3b:b1:20:ef:23:ad:0b:82:dc:93:2e:dd:ba:af: 96:02:d7:c8:2e:f1:cc:b4:ec:a1:ad:88:03:af:fc: 02:85:8d:f7:7e:78:17:5a:05:88:a3:1c:1b:ec:d5: 95:4d:25:e8:31:ff:5c:54:eb:fa:1c:94:4e:18:d9: 7d:54:d2:07:0c:2d:1c:1a:d4:01:56:1f:66:86:61: 52:d8:ee:49:ca:4b:c3:1d:a6:25:d3:a8:50:fe:e7: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:04:E4:A7:59:54:84:6E:22:6D:E3:45:B4:14:1D:F1:AB:F2:14:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:3000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:61:10:41:d0:4d:3a:3c:45:c3:54:0c:df:39:61:09:91:e3: 8c:97:e5:40:72:c7:5c:d2:e1:1f:58:4a:56:99:ec:cd:12:88: 6e:dd:18:ac:f5:38:30:90:2f:b6:03:23:33:89:97:7b:77:3a: c2:d2:b8:f8:6f:50:6e:01:dd:3e:5e:47:0c:7b:95:8f:1b:e9: f9:63:a4:09:9d:ac:04:06:65:8c:77:64:3d:d7:10:04:fc:11: ed:a8:2b:ae:4c:20:d7:0c:21:b5:84:d7:2f:81:92:e4:f2:a8: 90:ba:be:b6:79:82:c7:51:6e:63:9b:d9:e9:fb:0c:ee:61:71: 5e:e0:fb:e6:8e:d7:0c:be:1a:b3:74:1c:c9:a9:0d:36:ad:fe: 7b:f2:20:d1:ea:75:2d:aa:77:32:73:83:70:53:1d:d3:16:a2: db:02:37:10:cd:7c:4a:a6:70:05:81:04:21:8f:5a:3c:bf:ef: dd:d1:23:89:57:d2:cf:85:0c:3b:bb:c3:a5:de:21:4f:3e:4d: 1d:c3:b7:51:48:51:76:5c:cb:38:36:2d:0b:4f:85:90:2f:05: 90:d3:1c:fd:bd:fe:c9:a1:82:75:25:47:57:75:96:b5:8f:00: 7c:0d:e4:7a:ee:40:c0:c2:60:04:96:36:f6:29:1b:99:ab:1d: 68:5a:a6:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAh3BG/at8IuoZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2JiNmQ0YzktYmQxNS00NTgxLWFiNzgtODMzNTk5MDYxMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6WhYA4zwX8DJetd2635kKVYDEgsKf8eyZLe 7JPb5KGBpJ7BXdGd4Xg2PQXDRS41xmH8bHQ7ekr559lvzkZAwNi+eBmNQ7et5n/q 8ZS+xxopb5QJP/Hg9ASlSRWgm+LbhKYB/7j6fESAHnrYsDak+VpWWMABjKS9jumH v27Rt8/0je7YjUZaY9Z6414elsdEoU3JNzZaQA6DUK4cB3npquEkCOG0O7Eg7yOt C4Lcky7duq+WAtfILvHMtOyhrYgDr/wChY33fngXWgWIoxwb7NWVTSXoMf9cVOv6 HJROGNl9VNIHDC0cGtQBVh9mhmFS2O5JykvDHaYl06hQ/udRzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPAE5KdZVIRuIm3jRbQUHfGr8hQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjIwYzVkODctNzY5Yi0z ZTViLWE2N2QtOTk1OTRkMzJmYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujDAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg2EQQdBNOjxFw1QM3zlhCZHjjJflQHLHXNLhH1hKVpnszRKIbt0Y rPU4MJAvtgMjM4mXe3c6wtK4+G9QbgHdPl5HDHuVjxvp+WOkCZ2sBAZljHdkPdcQ BPwR7agrrkwg1wwhtYTXL4GS5PKokLq+tnmCx1FuY5vZ6fsM7mFxXuD75o7XDL4a s3QcyakNNq3+e/Ig0ep1Lap3MnODcFMd0xai2wI3EM18SqZwBYEEIY9aPL/v3dEj iVfSz4UMO7vDpd4hTz5NHcO3UUhRdlzLODYtC0+FkC8FkNMc/b3+yaGCdSVHV3WW tY8AfA3keu5AwMJgBJY29ikbmasdaFqmeQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:32 2025 by rpki-client