$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cccdc71d-b3de-3718-ab6e-0d8663917fc9.roa File: cccdc71d-b3de-3718-ab6e-0d8663917fc9.roa (raw, json) Hash identifier: 5xcCP7iWdEO+c8HQmXAUzb0YIFv0Nsjz4+3ZXwMTzn4= Subject key identifier: 5F:FF:D6:7A:C8:58:9F:88:BF:5B:96:4E:C6:71:68:11:9D:B7:3C:8C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B0FDFB99DE1DE38D741447480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cccdc71d-b3de-3718-ab6e-0d8663917fc9.roa Signing time: Tue 02 Sep 2025 14:55:36 +0000 ROA not before: Tue 02 Sep 2025 14:55:36 +0000 ROA not after: Mon 01 Dec 2025 15:55:36 +0000 asID: 30036 IP address blocks: 2604:2e87:d800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:df:b9:9d:e1:de:38:d7:41:44:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 2 14:55:36 2025 GMT Not After : Dec 1 15:55:36 2025 GMT Subject: CN=089df3a2-e566-4beb-87fc-bb74c8f6fc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:9a:28:4c:16:92:95:ec:9d:bf:29:06:12: 53:65:14:7d:09:26:e8:29:19:bd:78:65:ce:0d:0e: a1:9f:ea:16:57:d1:28:75:5c:dd:2b:ef:04:33:30: e8:79:56:67:57:11:cb:8d:5b:18:da:7c:a5:b5:d4: 86:f6:4b:2c:86:b2:5f:53:71:ca:31:1d:a2:c6:f2: 3c:1b:13:26:0a:9a:14:b6:f0:79:82:6f:7d:9f:f3: 9e:3b:da:6b:fe:5a:e2:6c:24:78:10:09:09:12:23: 27:6c:3f:b1:48:a7:9d:76:30:07:30:80:3c:55:2d: ce:cc:0c:74:a0:d0:13:6c:da:10:19:b9:04:e2:9c: 38:42:49:c6:76:de:1b:bc:58:62:ef:1b:89:b1:d5: 9d:06:56:a7:16:b5:96:f6:4e:42:05:c7:84:b4:35: c8:58:1a:17:89:f3:7b:e3:5b:15:c1:b6:81:11:dc: 98:a1:69:38:43:29:52:6c:e2:44:ba:00:53:c8:bb: cd:3a:5f:ab:e9:62:18:4c:73:f6:4a:a2:8b:5b:89: e9:17:5a:3f:2e:80:9b:c9:d1:76:4b:6c:9a:c2:19: 9b:08:58:0c:8c:0d:0c:5a:a0:28:f9:3a:5b:c8:bf: 63:03:1c:6e:7c:92:b8:dc:79:7e:a4:0c:4f:40:8c: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:D6:7A:C8:58:9F:88:BF:5B:96:4E:C6:71:68:11:9D:B7:3C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cccdc71d-b3de-3718-ab6e-0d8663917fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:d800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:aa:c3:87:6d:53:a1:af:1c:a3:da:2b:95:4f:83:24:4d:c0: d9:ef:16:4f:f9:46:55:88:1e:ac:29:fe:65:53:35:3d:85:b1: ee:7d:32:31:57:a6:06:d9:f0:47:b8:79:f1:61:8d:9d:b3:1a: 68:9d:bb:90:4f:81:33:6d:99:77:aa:e8:65:a2:92:e8:c4:23: 03:27:41:fd:fb:0e:ad:f8:d5:5f:72:fc:1f:33:f0:21:03:6c: ca:92:42:1e:ec:9c:d2:72:c6:bd:b1:b9:83:03:81:43:80:a9: 65:4f:d0:5d:a6:5d:f7:1f:fd:be:2f:e3:bb:15:57:75:28:f0: 77:32:ff:59:36:a1:00:02:44:6e:31:df:cd:b1:e2:26:88:f6: 77:a1:8b:e8:fb:5d:55:59:15:5e:8a:14:e1:a1:a5:4d:d9:fd: 0b:4f:90:69:e0:1d:e6:4e:e4:35:75:8d:97:1e:5d:0e:76:3c: bd:40:20:b1:f9:29:50:a6:76:10:34:ed:0d:d2:5f:9c:95:40: da:e0:3b:4e:ea:36:81:9a:bd:83:c5:fb:21:d6:3c:94:d4:ea: 03:59:1c:22:22:1d:a8:c0:5b:45:6b:ad:1b:c7:8d:7c:62:d0: fc:ec:a0:29:29:83:61:04:1c:c1:33:ba:72:63:c8:36:ad:c7: dc:69:c4:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsP37md4d4410FEdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkwMjE0NTUzNloXDTI1MTIwMTE1NTUzNlowLzEtMCsGA1UEAxMk MDg5ZGYzYTItZTU2Ni00YmViLTg3ZmMtYmI3NGM4ZjZmYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqouaKEwWkpXsnb8pBhJTZRR9CSboKRm9eGXO DQ6hn+oWV9EodVzdK+8EMzDoeVZnVxHLjVsY2nyltdSG9ksshrJfU3HKMR2ixvI8 GxMmCpoUtvB5gm99n/OeO9pr/lribCR4EAkJEiMnbD+xSKeddjAHMIA8VS3OzAx0 oNATbNoQGbkE4pw4QknGdt4bvFhi7xuJsdWdBlanFrWW9k5CBceEtDXIWBoXifN7 41sVwbaBEdyYoWk4QylSbOJEugBTyLvNOl+r6WIYTHP2SqKLW4npF1o/LoCbydF2 S2yawhmbCFgMjA0MWqAo+TpbyL9jAxxufJK43Hl+pAxPQIzlwwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF//1nrIWJ+Iv1uWTsZxaBGdtzyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2NjZGM3MWQtYjNkZS0z NzE4LWFiNmUtMGQ4NjYzOTE3ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh9gw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnarDh21Toa8co9orlU+DJE3A2e8WT/lGVYgerCn+ZVM1PYWx7n0y MVemBtnwR7h58WGNnbMaaJ27kE+BM22Zd6roZaKS6MQjAydB/fsOrfjVX3L8HzPw IQNsypJCHuyc0nLGvbG5gwOBQ4CpZU/QXaZd9x/9vi/juxVXdSjwdzL/WTahAAJE bjHfzbHiJoj2d6GL6PtdVVkVXooU4aGlTdn9C0+QaeAd5k7kNXWNlx5dDnY8vUAg sfkpUKZ2EDTtDdJfnJVA2uA7Tuo2gZq9g8X7IdY8lNTqA1kcIiIdqMBbRWutG8eN fGLQ/OygKSmDYQQcwTO6cmPINq3H3GnEFA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:11:32 2025 by rpki-client