$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa File: bf56dedf-58f6-3a50-a772-a07b6c69189c.roa (raw, json) Hash identifier: shKXIoWIUqXb68AGIO80F/2/2Rdnfjy33b4g+ftVY1s= Subject key identifier: A9:18:A5:9B:48:12:8E:50:08:EE:08:67:A1:3A:69:51:1A:3D:D4:E1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6202061E3120629678082FC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e89:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:06:1e:31:20:62:96:78:08:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=23572221-76be-4717-896f-c6f958fbc08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fb:02:f1:02:46:bf:c4:1a:31:db:a0:f5:b9: e2:04:5b:f4:17:19:cf:6c:5b:07:4f:59:12:3e:fb: 90:c3:d3:4b:49:31:fd:18:94:12:25:6d:80:5b:6c: 72:da:68:75:89:89:a0:e8:d5:0b:5a:ac:75:a4:35: 0e:bf:4a:c3:79:ca:f9:9d:af:81:63:0e:34:13:32: 0e:5c:76:7b:d6:ef:1f:bb:e1:ce:c8:3c:3e:db:f7: 55:5e:d8:e4:99:c4:82:88:cd:08:d6:df:bc:2d:7b: d7:95:c3:9a:f7:f7:68:30:83:11:54:47:c8:c0:33: b6:f6:70:02:c4:1c:a0:46:ff:de:42:e9:2f:d1:0f: ad:14:16:8e:89:ae:ae:9a:4f:c8:59:b1:03:91:05: 31:21:5e:97:74:ca:11:53:78:08:d6:b9:5d:77:93: 29:b4:00:64:52:cb:ad:29:18:65:8b:10:3d:4b:27: bb:f2:e0:ce:60:ec:25:13:d4:aa:ce:15:18:2a:63: bb:34:5a:dd:b8:6c:1a:71:44:cc:fc:36:75:15:83: 59:d5:fc:d9:96:66:ec:e8:ac:64:e9:c3:ad:95:5d: 8d:4c:04:0f:f6:c7:7e:8e:8b:8a:3e:5e:48:ad:ff: a5:bb:50:6a:de:af:be:5f:37:2f:47:12:a8:3e:74: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:18:A5:9B:48:12:8E:50:08:EE:08:67:A1:3A:69:51:1A:3D:D4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b6:d8:6d:3f:4e:36:7b:f7:08:30:50:17:ac:4d:2a:4d:73: 1f:8e:71:67:60:f4:26:ce:f2:a4:35:c4:b3:d0:52:fb:5f:19: 7f:ff:dd:b4:8c:91:a5:4e:40:41:41:e3:74:89:52:e1:5a:17: 75:c1:c0:7f:53:18:13:d3:97:df:96:39:78:db:dd:8b:84:92: 41:d4:b1:86:31:82:8f:e9:88:76:74:91:50:4b:58:6b:2b:ac: 35:e8:5a:70:2e:ea:45:d0:6f:95:83:7d:5e:5f:b8:1a:2b:3a: 39:a7:cd:41:37:fa:fb:28:09:f0:10:bb:21:13:bb:32:e1:b5: e9:61:6d:55:58:d8:29:f8:59:84:52:10:7f:e0:72:34:ef:26: 31:ae:2d:8a:64:00:91:77:94:02:43:b1:0d:81:1b:65:b8:53: f1:1b:de:d5:05:ec:44:c5:31:a4:b2:85:19:2d:3c:2c:04:98: dc:35:e8:8a:5e:fe:22:48:5f:0c:c6:99:99:e5:98:8d:7c:51: f1:fe:59:3b:c6:7a:90:e2:af:42:21:7a:ac:fb:3f:47:f8:31: 0a:d5:1a:0e:a4:f9:2c:5c:dc:8e:85:5d:3c:be:80:5a:9b:c5: 30:79:80:d7:11:6b:6e:c7:11:60:52:cd:e0:a7:20:dd:2d:db: 4f:68:4c:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAgYeMSBilngIL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MjM1NzIyMjEtNzZiZS00NzE3LTg5NmYtYzZmOTU4ZmJjMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/sC8QJGv8QaMdug9bniBFv0FxnPbFsHT1kS PvuQw9NLSTH9GJQSJW2AW2xy2mh1iYmg6NULWqx1pDUOv0rDecr5na+BYw40EzIO XHZ71u8fu+HOyDw+2/dVXtjkmcSCiM0I1t+8LXvXlcOa9/doMIMRVEfIwDO29nAC xBygRv/eQukv0Q+tFBaOia6umk/IWbEDkQUxIV6XdMoRU3gI1rldd5MptABkUsut KRhlixA9Sye78uDOYOwlE9SqzhUYKmO7NFrduGwacUTM/DZ1FYNZ1fzZlmbs6Kxk 6cOtlV2NTAQP9sd+jouKPl5Irf+lu1Bq3q++XzcvRxKoPnTNXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKkYpZtIEo5QCO4IZ6E6aVEaPdThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY1NmRlZGYtNThmNi0z YTUwLWE3NzItYTA3YjZjNjkxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVrbYbT9ONnv3CDBQF6xNKk1zH45xZ2D0Js7ypDXEs9BS+18Zf//d tIyRpU5AQUHjdIlS4VoXdcHAf1MYE9OX35Y5eNvdi4SSQdSxhjGCj+mIdnSRUEtY ayusNehacC7qRdBvlYN9Xl+4Gis6OafNQTf6+ygJ8BC7IRO7MuG16WFtVVjYKfhZ hFIQf+ByNO8mMa4timQAkXeUAkOxDYEbZbhT8Rve1QXsRMUxpLKFGS08LASY3DXo il7+IkhfDMaZmeWYjXxR8f5ZO8Z6kOKvQiF6rPs/R/gxCtUaDqT5LFzcjoVdPL6A WpvFMHmA1xFrbscRYFLN4Kcg3S3bT2hMcA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:14:17 2025 by rpki-client