$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa File: bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa (raw, json) Hash identifier: BSntzQbhDCkEHsJ5jACJwGrLu6wWywWMbotMGCaNiRQ= Subject key identifier: B4:19:DA:68:73:DD:39:24:8E:5E:92:40:83:D3:1D:B3:DD:EC:24:78 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D71829E4FFF1038C50A000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e88:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:18:29:e4:ff:f1:03:8c:50:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=d934653f-99d8-411f-845d-ed2511181fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:a9:59:c2:fb:52:18:a9:a4:c2:3f:de:1f: 11:1c:30:2f:c2:6c:eb:d5:3a:d1:c1:a6:c3:e0:07: 26:46:5e:b5:97:cf:25:d1:19:02:c1:48:47:fd:de: 7c:4b:14:7b:f1:10:eb:55:5c:54:72:30:1e:3d:d7: 19:fd:88:3a:2d:c1:12:3c:e5:b1:a4:8a:0e:3b:b0: 76:95:de:8f:2d:fa:03:69:b2:f9:ca:19:9a:c3:5c: a4:74:6a:77:30:40:5b:cc:2a:fb:7e:f5:20:b1:5a: d1:c5:69:26:eb:77:cd:6c:6c:79:0a:c0:96:18:68: 16:fd:bf:fc:64:89:ab:ec:a4:00:5f:33:a3:c0:28: d9:33:fb:17:33:4c:a6:29:b0:d3:37:c6:cc:87:9a: b6:5d:65:b1:1f:73:88:76:2c:b1:2a:3a:d0:01:97: 3a:02:ec:06:ec:93:a2:75:0a:0c:50:f5:95:3f:91: e4:af:e1:9f:c3:87:22:0c:db:da:cb:83:5b:d5:7f: 70:b2:a3:67:f7:ad:21:64:50:1a:85:51:fc:45:f9: c0:49:4c:2c:46:d1:70:cf:27:62:5c:50:94:c5:bc: 7f:ba:2a:31:fe:57:bf:d6:9a:57:f4:cd:a2:07:ee: 01:98:64:de:17:d2:88:97:01:db:06:12:50:55:65: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:19:DA:68:73:DD:39:24:8E:5E:92:40:83:D3:1D:B3:DD:EC:24:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:8000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:38:e2:0b:96:9a:30:d9:51:7d:c2:6d:ac:22:ce:18:fe:58: f7:6a:02:86:65:2b:2d:1b:33:d3:6a:ce:1a:32:86:9e:d2:ad: ff:be:3d:55:df:6e:66:40:3d:a9:9d:53:22:d5:77:f3:50:80: bb:f5:00:3c:69:82:e6:af:1d:84:7c:46:83:5a:55:a7:44:ba: 4d:b2:c2:d8:fd:a2:7c:d1:59:aa:d7:6c:00:c9:0c:0f:b2:94: 1f:69:a2:62:03:af:a9:f9:99:53:45:25:d3:70:26:ab:27:5a: e6:ed:88:25:40:ef:f3:e9:cb:8e:1c:50:53:c3:be:c6:e7:bb: 7a:c2:9d:41:4c:b0:eb:c6:f6:38:21:1d:cd:c6:16:57:14:cf: ae:2b:f4:65:a7:a9:8e:c2:0b:f5:aa:86:55:6c:75:ae:a9:2b: bb:ae:7d:be:83:50:69:cd:99:ce:6c:cb:aa:ca:f1:2a:4d:8c: e8:e3:42:29:eb:c6:5d:23:e5:22:39:c5:4f:28:78:dc:98:d8: 94:5c:f6:39:90:d1:54:3f:b1:d3:2c:a2:e3:6c:e0:83:40:ac: 5b:ca:fd:85:0a:44:da:53:d7:11:af:98:9e:d4:da:ea:46:35: 83:a4:07:48:f1:aa:f8:72:4e:4e:23:36:f4:4f:2b:20:ba:4c: 60:fd:88:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW1xgp5P/xA4xQoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDkzNDY1M2YtOTlkOC00MTFmLTg0NWQtZWQyNTExMTgxZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAmpWcL7UhippMI/3h8RHDAvwmzr1TrRwabD 4AcmRl61l88l0RkCwUhH/d58SxR78RDrVVxUcjAePdcZ/Yg6LcESPOWxpIoOO7B2 ld6PLfoDabL5yhmaw1ykdGp3MEBbzCr7fvUgsVrRxWkm63fNbGx5CsCWGGgW/b/8 ZImr7KQAXzOjwCjZM/sXM0ymKbDTN8bMh5q2XWWxH3OIdiyxKjrQAZc6AuwG7JOi dQoMUPWVP5Hkr+Gfw4ciDNvay4Nb1X9wsqNn960hZFAahVH8RfnASUwsRtFwzydi XFCUxbx/uiox/le/1ppX9M2iB+4BmGTeF9KIlwHbBhJQVWURcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLQZ2mhz3Tkkjl6SQIPTHbPd7CR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY2MDBmZDYtOTgxYi0z YmFhLWEwYWUtMzBmMjcxYzZiYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOzjiC5aaMNlRfcJtrCLOGP5Y92oChmUrLRsz02rOGjKGntKt/749 Vd9uZkA9qZ1TItV381CAu/UAPGmC5q8dhHxGg1pVp0S6TbLC2P2ifNFZqtdsAMkM D7KUH2miYgOvqfmZU0Ul03Amqyda5u2IJUDv8+nLjhxQU8O+xue7esKdQUyw68b2 OCEdzcYWVxTPriv0ZaepjsIL9aqGVWx1rqkru659voNQac2ZzmzLqsrxKk2M6ONC KevGXSPlIjnFTyh43JjYlFz2OZDRVD+x0yyi42zgg0CsW8r9hQpE2lPXEa+YntTa 6kY1g6QHSPGq+HJOTiM29E8rILpMYP2Isw== -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:16 2025 by rpki-client