$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d55401c6-2a27-3536-b03e-8e83af86a688.roa File: d55401c6-2a27-3536-b03e-8e83af86a688.roa (raw, json) Hash identifier: ydkOyYTlYa25SHQ0k0VTJE4D0r3h/fNb/uFd6GUQUec= Subject key identifier: 52:91:F1:34:C3:C7:FE:BF:8D:7C:5B:E1:2A:17:5D:C0:8D:E4:F0:23 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D74A73ADC29E16744BEE40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d55401c6-2a27-3536-b03e-8e83af86a688.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e8d:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4a:73:ad:c2:9e:16:74:4b:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=a1648ff7-7a6b-433d-bb19-c4d580bc70e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:70:43:d2:c0:cb:52:10:df:00:0c:e4:37: 92:7a:c0:26:51:e8:49:87:a8:15:a2:b5:5d:d7:d4: 36:ad:f2:29:14:88:1b:31:aa:ff:da:90:8d:0c:11: 58:64:b5:38:54:11:26:40:bb:64:c4:d6:b4:5b:61: 50:1d:78:01:81:cd:bd:df:ee:23:f6:e6:e0:1c:22: 3b:bc:de:8a:89:02:97:a8:ef:dc:d2:33:13:f5:48: d7:f0:28:22:c9:76:11:37:9c:6b:26:77:ee:e4:18: f9:a6:85:ee:c8:6f:e2:5a:68:2a:0c:3a:10:96:6d: 64:ef:aa:1c:ab:7a:7a:76:81:1f:be:a2:3c:c4:1e: 4a:74:68:5a:40:19:6e:0e:9b:66:0c:98:34:80:6b: b0:b0:db:c4:23:15:15:01:e8:d1:25:67:6d:f2:98: 7b:fe:be:a2:58:43:27:12:76:1c:23:a4:24:0d:cf: 07:7d:1f:e3:0b:aa:ad:29:a3:38:8c:6d:6d:9f:86: 56:67:2f:9a:f0:62:96:38:e4:ad:b4:9d:f4:d5:e9: 52:8e:50:25:2f:16:44:74:67:d0:09:ee:e5:01:b0: d4:99:34:d2:e6:38:d3:15:10:f6:1b:8d:02:2d:7e: c8:14:f1:8e:38:c8:76:e7:42:a6:9d:62:d0:7b:22: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:F1:34:C3:C7:FE:BF:8D:7C:5B:E1:2A:17:5D:C0:8D:E4:F0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d55401c6-2a27-3536-b03e-8e83af86a688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:8400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8d:0e:9d:90:ae:05:fb:bd:6d:bf:d7:5c:e9:df:e7:02:01: ff:d6:72:32:9c:1e:5a:54:93:4f:81:ae:98:30:55:78:a8:be: 40:5d:0c:a0:03:34:71:cf:4c:e0:26:7c:c9:9d:bd:2b:e8:8d: 19:7e:b7:84:d8:71:46:3f:3d:cb:e8:fc:ea:dc:c0:94:5f:11: 88:96:d3:17:1d:63:97:f9:1a:38:d3:90:7c:69:4b:95:33:a7: ab:a2:b2:6c:0b:73:3c:f8:bc:63:f6:82:76:5c:99:28:6e:65: 71:8e:78:e9:4f:49:e2:f0:f1:f5:22:9c:31:e8:85:8a:f6:98: af:03:24:2e:31:b7:e7:14:a5:c4:a6:f1:6d:01:a7:97:cc:ac: f2:5e:d0:c2:e3:76:21:f5:78:fc:3c:b8:af:02:01:a9:99:03: 22:f0:09:ed:1b:b3:05:dd:7c:11:54:90:f7:70:b1:f5:d8:59: fa:f7:f5:e9:6e:8f:2d:06:bb:28:7c:1c:3d:a2:63:fe:79:54: 72:64:7f:2f:e8:32:e4:d5:4c:8a:1e:c3:1c:38:91:ea:6b:df: ee:7b:ce:4a:54:4c:b1:c9:04:83:77:75:a5:6b:28:6e:3f:b9: a1:cc:46:50:79:c5:72:43:b8:c3:6f:3d:3f:de:41:7f:1d:e6: 02:f3:45:2a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW10pzrcKeFnRL7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YTE2NDhmZjctN2E2Yi00MzNkLWJiMTktYzRkNTgwYmM3MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/JwQ9LAy1IQ3wAM5DeSesAmUehJh6gVorVd 19Q2rfIpFIgbMar/2pCNDBFYZLU4VBEmQLtkxNa0W2FQHXgBgc293+4j9ubgHCI7 vN6KiQKXqO/c0jMT9UjX8CgiyXYRN5xrJnfu5Bj5poXuyG/iWmgqDDoQlm1k76oc q3p6doEfvqI8xB5KdGhaQBluDptmDJg0gGuwsNvEIxUVAejRJWdt8ph7/r6iWEMn EnYcI6QkDc8HfR/jC6qtKaM4jG1tn4ZWZy+a8GKWOOSttJ301elSjlAlLxZEdGfQ Ce7lAbDUmTTS5jjTFRD2G40CLX7IFPGOOMh250KmnWLQeyJ7PQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFKR8TTDx/6/jXxb4SoXXcCN5PAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDU1NDAxYzYtMmEyNy0z NTM2LWIwM2UtOGU4M2FmODZhNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujYQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB40OnZCuBfu9bb/XXOnf5wIB/9ZyMpweWlSTT4GumDBVeKi+QF0M oAM0cc9M4CZ8yZ29K+iNGX63hNhxRj89y+j86tzAlF8RiJbTFx1jl/kaONOQfGlL lTOnq6KybAtzPPi8Y/aCdlyZKG5lcY546U9J4vDx9SKcMeiFivaYrwMkLjG35xSl xKbxbQGnl8ys8l7QwuN2IfV4/Dy4rwIBqZkDIvAJ7RuzBd18EVSQ93Cx9dhZ+vf1 6W6PLQa7KHwcPaJj/nlUcmR/L+gy5NVMih7DHDiR6mvf7nvOSlRMsckEg3d1pWso bj+5ocxGUHnFckO4w289P95Bfx3mAvNFKg== -----END CERTIFICATE-----Generated at Sat Oct 11 07:15:26 2025 by rpki-client