$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa File: f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa (raw, json) Hash identifier: 7NSKbS6PvdcXv54qp6JSiTRS9mZ+7CtoMhyUcF7IH/8= Subject key identifier: 40:B5:F3:EC:5F:E9:E1:69:C7:A4:C4:89:4C:5C:B7:09:14:B5:69:10 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B56D742BC49F0374C409BB7C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 2604:2e88:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:42:bc:49:f0:37:4c:40:9b:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=41cf3231-4aad-416f-9aca-85b25454f686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:57:33:75:ef:9b:65:96:6d:2f:11:c7:cc: c4:f6:5f:df:f1:7a:0a:80:d4:88:1c:e5:ce:1d:b9: 1c:4c:d7:e5:fc:e6:44:de:81:25:c9:80:e7:2c:1a: ab:5a:31:e6:57:a5:31:3d:29:5d:cc:ce:3b:29:64: 38:70:70:02:9d:4a:e0:02:dd:a2:34:40:fd:3f:ea: e7:f4:d0:da:07:6d:47:06:68:65:fa:4c:ac:37:f6: e9:96:95:09:29:fe:a1:68:7e:04:6e:09:09:28:7d: ec:77:e1:6e:2c:15:85:e7:5b:90:af:66:4d:e4:12: 57:4a:46:aa:11:95:c4:fa:e0:29:47:b3:dc:d9:1a: 53:d8:e5:d4:9d:49:0a:50:57:39:e4:78:b4:3c:f3: 18:78:dd:92:2a:d3:3f:d8:d9:80:f4:f6:24:a6:10: 4c:ba:a4:71:15:f9:99:a8:96:69:8f:ca:d2:3b:77: f5:0c:96:fe:a5:eb:93:2d:8b:39:d5:00:ec:e8:45: ab:68:12:ac:d4:21:e8:7a:10:d9:13:36:77:8a:57: 99:21:60:68:b7:4a:8e:2d:1f:fd:f1:d4:1b:4d:fe: fe:77:59:ca:99:8a:e5:08:c8:e6:cf:b2:c4:e9:5e: d1:15:b8:b7:83:69:fb:3f:b1:fd:d6:03:d5:b6:fb: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:F3:EC:5F:E9:E1:69:C7:A4:C4:89:4C:5C:B7:09:14:B5:69:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f7d0d4f9-e73c-37b1-9c74-4c0a37ae688e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:2c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fb:c4:62:8e:ff:86:21:e4:96:4a:cf:87:53:39:42:8e:81: 93:10:81:83:a3:db:0f:15:24:08:82:4d:fd:42:76:d5:f8:79: 60:b7:73:15:f6:5d:c1:06:e0:e4:76:c8:73:45:03:30:91:a8: f6:cc:58:e0:28:87:1f:c8:85:13:fc:97:17:5c:07:00:64:2f: bc:c3:db:98:d5:cf:57:03:00:f8:ed:0e:5f:23:88:bf:ed:37: a5:e2:7e:51:e3:ad:fb:be:68:e1:c8:56:a6:49:8b:86:a9:71: 63:1d:b0:5d:8a:8b:3e:65:b5:4f:ae:ed:cf:cb:4a:a0:29:34: 7c:f1:76:4e:e0:78:28:c9:d8:ab:a4:5a:02:4a:d7:69:1a:30: da:49:36:61:78:36:7a:f9:dc:53:14:6c:8b:ca:ff:99:80:7b: c4:7e:38:09:cb:a1:5a:79:a0:84:54:61:d0:61:1c:d9:99:92: 6c:25:db:be:6c:31:4c:56:62:db:db:b9:f7:9b:42:dd:53:7c: 0f:78:df:77:93:d4:ff:2a:59:18:4d:27:42:85:b3:54:9d:bd: be:4c:47:d3:6a:ed:8c:73:91:d4:dc:26:07:6e:74:8f:f3:32: df:6d:81:96:d3:a6:2c:1c:7d:84:52:20:b7:69:ea:3b:08:59: 25:cf:d3:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtW10K8SfA3TECbt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NDFjZjMyMzEtNGFhZC00MTZmLTlhY2EtODViMjU0NTRmNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xXM3Xvm2WWbS8Rx8zE9l/f8XoKgNSIHOXO HbkcTNfl/OZE3oElyYDnLBqrWjHmV6UxPSldzM47KWQ4cHACnUrgAt2iNED9P+rn 9NDaB21HBmhl+kysN/bplpUJKf6haH4EbgkJKH3sd+FuLBWF51uQr2ZN5BJXSkaq EZXE+uApR7Pc2RpT2OXUnUkKUFc55Hi0PPMYeN2SKtM/2NmA9PYkphBMuqRxFfmZ qJZpj8rSO3f1DJb+peuTLYs51QDs6EWraBKs1CHoehDZEzZ3ileZIWBot0qOLR/9 8dQbTf7+d1nKmYrlCMjmz7LE6V7RFbi3g2n7P7H91gPVtvvklQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEC18+xf6eFpx6TEiUxctwkUtWkQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjdkMGQ0ZjktZTczYy0z N2IxLTljNzQtNGMwYTM3YWU2ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiCww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIfvEYo7/hiHklkrPh1M5Qo6BkxCBg6PbDxUkCIJN/UJ21fh5YLdz FfZdwQbg5HbIc0UDMJGo9sxY4CiHH8iFE/yXF1wHAGQvvMPbmNXPVwMA+O0OXyOI v+03peJ+UeOt+75o4chWpkmLhqlxYx2wXYqLPmW1T67tz8tKoCk0fPF2TuB4KMnY q6RaAkrXaRow2kk2YXg2evncUxRsi8r/mYB7xH44CcuhWnmghFRh0GEc2ZmSbCXb vmwxTFZi29u595tC3VN8D3jfd5PU/ypZGE0nQoWzVJ29vkxH02rtjHOR1NwmB250 j/My322BltOmLBx9hFIgt2nqOwhZJc/TTA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:23:02 2025 by rpki-client