$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa File: cd4bfe42-e547-395e-a177-c3a90f9b7116.roa (raw, json) Hash identifier: 81iKAWGhTawa9vib1QUTclD3yKpmi03tGyUGVZZRiOU= Subject key identifier: 06:18:37:58:7C:43:74:22:13:1E:20:2F:3B:27:C9:4F:9C:38:AC:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6201FBFD4CAF0FB13F542E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 2604:2e8b:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fb:fd:4c:af:0f:b1:3f:54:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=f42600da-b046-4808-b2fe-f1f7e58c427a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:c3:a7:3c:d1:b1:13:fa:f6:66:79:b4:e4: d3:15:76:fc:f3:77:88:25:79:1a:8d:9e:31:43:b4: 73:3e:22:29:b3:93:0b:03:fa:01:54:73:ab:af:e7: 27:7d:ee:8d:0b:00:e6:d6:f4:27:9e:70:30:28:4a: bd:dc:21:cc:d3:26:a9:8d:51:b0:45:48:c2:ec:f9: 23:d3:e8:5b:9d:52:d6:2f:54:b4:9e:44:06:65:29: f1:49:cb:bd:45:4f:94:c3:e0:89:78:c6:31:68:d3: 15:7a:e6:57:12:70:50:c6:51:47:cc:9a:50:56:d0: 36:a1:c2:d9:a7:74:09:d4:9f:4f:fe:e7:71:5d:45: 79:93:96:99:17:7e:47:8f:cf:34:47:fb:6f:5f:c2: 44:90:b9:c5:15:d1:47:ec:ce:11:04:82:c0:06:aa: e1:84:09:6a:d5:8b:c7:9e:b7:4d:d2:59:56:2b:98: e7:f2:bf:f7:cb:58:9d:ab:d9:8b:ca:a9:4c:39:fa: 01:f0:b7:f4:0a:f9:2b:5a:49:8c:d6:9b:11:ae:3c: 65:6a:52:b9:05:f8:4f:8e:98:be:cc:b6:a3:50:12: da:83:e7:6b:58:42:5b:fa:59:4b:09:47:db:9d:55: 08:7a:ae:01:07:2b:90:e8:e1:16:86:ac:92:46:e7: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:18:37:58:7C:43:74:22:13:1E:20:2F:3B:27:C9:4F:9C:38:AC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cd4bfe42-e547-395e-a177-c3a90f9b7116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:21:7c:b8:bb:80:54:24:11:b7:4b:b1:c9:b0:06:fa:6e:0b: e3:33:96:01:7e:c4:e8:d6:40:da:eb:f9:a0:81:7f:9a:0a:92: 0d:69:0b:a6:e5:12:10:22:3c:78:1a:e0:79:f6:9f:d2:95:ba: e0:68:2e:f3:93:49:54:14:f5:66:fb:7b:f6:ec:68:7e:e5:72: 79:79:74:b1:e3:09:f4:f1:94:8c:e0:a5:de:74:e1:3b:8d:2d: 2b:fd:a0:b0:35:e4:d9:56:d5:f0:da:68:7e:7f:11:d5:0d:b2: 3f:99:f8:d2:d0:85:7c:7d:b1:29:9e:a8:07:ea:e1:f2:f8:f4: a0:7f:2a:1d:ce:a1:45:aa:a7:c9:a4:7c:a4:78:32:16:f3:78: cf:e3:8c:b4:25:22:41:a8:a8:f4:aa:e5:49:32:6c:b9:38:73: 15:1f:b1:6d:03:cf:e5:c2:cc:ff:1d:8f:c3:d4:dc:6f:e0:5c: 82:6c:f5:0a:dd:65:fb:90:64:f0:cc:c6:1a:9d:4a:d4:0f:93: c1:90:42:79:69:a3:61:1f:e1:67:28:ae:7e:7d:e8:21:08:ce: c5:26:02:0b:d3:e0:dc:c6:59:ce:8e:da:4f:8b:c7:59:d1:a5: b0:28:aa:7a:42:71:3c:bf:79:26:cc:61:52:f1:53:68:3e:1b: d7:ae:ed:ad -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAfv9TK8PsT9ULoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZjQyNjAwZGEtYjA0Ni00ODA4LWIyZmUtZjFmN2U1OGM0MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6XDpzzRsRP69mZ5tOTTFXb883eIJXkajZ4x Q7RzPiIps5MLA/oBVHOrr+cnfe6NCwDm1vQnnnAwKEq93CHM0yapjVGwRUjC7Pkj 0+hbnVLWL1S0nkQGZSnxScu9RU+Uw+CJeMYxaNMVeuZXEnBQxlFHzJpQVtA2ocLZ p3QJ1J9P/udxXUV5k5aZF35Hj880R/tvX8JEkLnFFdFH7M4RBILABqrhhAlq1YvH nrdN0llWK5jn8r/3y1idq9mLyqlMOfoB8Lf0CvkrWkmM1psRrjxlalK5BfhPjpi+ zLajUBLag+drWEJb+llLCUfbnVUIeq4BByuQ6OEWhqySRucvcQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAYYN1h8Q3QiEx4gLzsnyU+cOKyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2Q0YmZlNDItZTU0Ny0z OTVlLWExNzctYzNhOTBmOWI3MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui/Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATSF8uLuAVCQRt0uxybAG+m4L4zOWAX7E6NZA2uv5oIF/mgqSDWkL puUSECI8eBrgefaf0pW64Ggu85NJVBT1Zvt79uxofuVyeXl0seMJ9PGUjOCl3nTh O40tK/2gsDXk2VbV8Npofn8R1Q2yP5n40tCFfH2xKZ6oB+rh8vj0oH8qHc6hRaqn yaR8pHgyFvN4z+OMtCUiQaio9KrlSTJsuThzFR+xbQPP5cLM/x2Pw9Tcb+Bcgmz1 Ct1l+5Bk8MzGGp1K1A+TwZBCeWmjYR/hZyiufn3oIQjOxSYCC9Pg3MZZzo7aT4vH WdGlsCiqekJxPL95JsxhUvFTaD4b167trQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:20:23 2025 by rpki-client