$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa File: d8139d9e-5227-3aa7-b104-a3988ca2a909.roa (raw, json) Hash identifier: 8WgCLXQ3FcHBU2DWypzm0Ym4EnXn7HFipFOBxCGtW7c= Subject key identifier: 09:32:22:F6:DE:77:29:BF:6D:5E:9B:98:CF:75:44:92:4C:9E:88:C7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6173F8CE53E3C250D3EADC40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa Signing time: Wed 01 Oct 2025 20:14:47 +0000 ROA not before: Wed 01 Oct 2025 20:14:47 +0000 ROA not after: Tue 30 Dec 2025 21:14:47 +0000 asID: 19905 IP address blocks: 2604:2e8b:ac00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:73:f8:ce:53:e3:c2:50:d3:ea:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 1 20:14:47 2025 GMT Not After : Dec 30 21:14:47 2025 GMT Subject: CN=889d03c2-e431-4007-93e7-806cb316983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:33:56:6b:71:c9:6e:52:37:b0:87:42:5b: ba:5b:34:d5:85:57:96:30:fc:86:fd:fa:00:12:aa: b7:9f:20:33:70:00:8d:94:21:4a:b5:36:7b:52:54: 63:6e:30:c5:7d:a5:8a:c7:23:00:07:81:e3:ce:01: 13:cb:bf:f8:b3:92:2e:3d:12:11:19:ce:5d:15:2c: 01:36:bc:eb:b2:a7:8d:85:a4:77:27:21:18:39:df: 31:0d:5b:40:20:0e:c5:67:be:2a:1a:27:39:95:eb: 19:16:99:c8:9a:53:b9:cd:49:d7:0c:2f:96:c6:e5: 0d:29:57:6b:c3:c5:de:ba:2f:40:7b:f8:57:6b:f5: 60:2e:3a:65:ba:43:cd:ae:bc:4e:ea:3b:0b:2b:4c: 94:c4:51:f6:34:f0:0d:8f:5d:44:27:b3:1c:57:f6: 5a:b9:46:dc:62:de:59:31:f0:d4:5f:0e:53:d6:60: 16:0a:df:7b:f7:78:a0:55:c0:f1:8d:e3:55:96:3b: 22:a4:ef:7f:44:60:d5:9d:c7:5e:3b:50:8f:d8:46: 41:06:16:ec:49:09:f3:a9:c7:a1:61:87:18:d4:fd: b9:cc:c2:e5:d6:bb:97:53:03:70:0b:3e:00:a3:2c: 81:68:6f:1e:ae:79:24:8b:40:99:bd:19:94:43:0a: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:22:F6:DE:77:29:BF:6D:5E:9B:98:CF:75:44:92:4C:9E:88:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d8139d9e-5227-3aa7-b104-a3988ca2a909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:ac00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b4:72:d7:78:91:99:ce:14:8f:85:1e:14:13:69:1e:26:6f: 23:4f:cf:a3:42:fa:a1:e2:55:78:de:b4:48:cb:03:96:96:4f: a4:40:c0:77:24:fe:cf:67:21:ac:60:ff:81:cd:c3:2f:f0:61: 36:40:7a:c3:b6:d8:35:53:38:c8:b2:7f:4d:49:16:16:f8:94: b3:5c:c7:d4:e0:09:43:72:28:ca:79:be:49:18:a3:b3:5a:7e: be:e3:8a:45:83:dc:8a:41:c3:17:5b:c1:45:e8:80:07:19:25: cd:8f:b1:4d:de:be:7b:d8:73:6a:93:8e:c3:fe:dd:a3:c6:e6: 5c:56:7b:31:d8:17:ae:00:c5:22:1d:c4:91:61:14:f3:81:52: bc:70:81:7a:00:a8:18:8e:35:fb:49:96:80:4b:db:fc:ef:dc: 5f:d4:44:69:cc:34:9a:e0:3d:93:71:0e:e8:98:d0:31:ab:26: eb:9f:b7:95:99:b8:d6:a2:6e:00:61:4f:d1:6f:a3:b8:47:0d: 84:37:36:9e:f2:59:61:5f:1b:6f:f6:19:e2:76:21:c4:38:66: b6:e6:e8:df:91:9b:d8:85:80:7f:28:95:48:07:a6:2f:b1:34: da:86:f0:56:dc:9d:5b:7a:df:c8:49:ee:08:ca:45:a9:0b:36: c9:71:6a:a9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEthc/jOU+PCUNPq3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMTIwMTQ0N1oXDTI1MTIzMDIxMTQ0N1owLzEtMCsGA1UEAxMk ODg5ZDAzYzItZTQzMS00MDA3LTkzZTctODA2Y2IzMTY5ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PwzVmtxyW5SN7CHQlu6WzTVhVeWMPyG/foA Eqq3nyAzcACNlCFKtTZ7UlRjbjDFfaWKxyMAB4HjzgETy7/4s5IuPRIRGc5dFSwB NrzrsqeNhaR3JyEYOd8xDVtAIA7FZ74qGic5lesZFpnImlO5zUnXDC+WxuUNKVdr w8Xeui9Ae/hXa/VgLjplukPNrrxO6jsLK0yUxFH2NPANj11EJ7McV/ZauUbcYt5Z MfDUXw5T1mAWCt9793igVcDxjeNVljsipO9/RGDVncdeO1CP2EZBBhbsSQnzqceh YYcY1P25zMLl1ruXUwNwCz4AoyyBaG8ernkki0CZvRmUQwrTOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAkyIvbedym/bV6bmM91RJJMnojHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDgxMzlkOWUtNTIyNy0z YWE3LWIxMDQtYTM5ODhjYTJhOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui6ww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXrRy13iRmc4Uj4UeFBNpHiZvI0/Po0L6oeJVeN60SMsDlpZPpEDA dyT+z2chrGD/gc3DL/BhNkB6w7bYNVM4yLJ/TUkWFviUs1zH1OAJQ3Ioynm+SRij s1p+vuOKRYPcikHDF1vBReiABxklzY+xTd6+e9hzapOOw/7do8bmXFZ7MdgXrgDF Ih3EkWEU84FSvHCBegCoGI41+0mWgEvb/O/cX9REacw0muA9k3EO6JjQMasm65+3 lZm41qJuAGFP0W+juEcNhDc2nvJZYV8bb/YZ4nYhxDhmtubo35Gb2IWAfyiVSAem L7E02obwVtydW3rfyEnuCMpFqQs2yXFqqQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:11:33 2025 by rpki-client