$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa File: fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa (raw, json) Hash identifier: zA3KrAoKIwLuyyygeOJ5s1SiEE/PsQfPXSfuBzGNyZA= Subject key identifier: 05:95:5B:2A:57:7F:7C:9F:A6:8C:1F:71:9F:73:79:02:E3:25:2A:07 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B475D021657D17B656FA4C080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa Signing time: Mon 22 Sep 2025 11:57:30 +0000 ROA not before: Mon 22 Sep 2025 11:57:30 +0000 ROA not after: Sun 21 Dec 2025 12:57:30 +0000 asID: 19905 IP address blocks: 2604:2e88:3c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5d:02:16:57:d1:7b:65:6f:a4:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 22 11:57:30 2025 GMT Not After : Dec 21 12:57:30 2025 GMT Subject: CN=14b21087-b9f1-4f66-9efe-801924b7d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:cf:ad:84:41:31:29:a2:e6:88:e1:43:08: 83:67:18:90:df:e4:74:91:75:67:87:ff:e8:66:c8: 56:4e:ad:5b:29:dc:bb:6f:3e:01:99:df:9e:4a:75: 8a:64:6e:41:6d:9e:6b:6e:ab:be:aa:a5:f1:a2:16: b5:df:0c:75:e5:ba:ad:4a:73:59:de:67:9d:6d:9d: 3b:5d:ea:e1:d1:65:33:91:c0:9d:bd:66:00:f2:61: ba:ac:88:21:4f:23:af:b3:d2:18:83:fd:4f:23:49: 6d:27:e5:01:7f:86:b0:8e:d7:0e:31:f0:7f:84:c1: 5d:89:eb:9a:55:1b:42:46:10:1d:0a:cb:ab:e5:dd: c7:08:3b:a6:d4:bc:5a:a0:55:82:3f:68:72:ce:c9: 4a:90:0d:09:aa:42:98:5d:63:cd:1f:27:d2:ab:74: 26:65:22:bb:ad:cd:72:55:05:55:72:25:66:a3:91: 8e:23:fa:04:7c:8f:15:d7:c4:a2:ee:d0:70:46:ab: b7:96:52:b5:13:d3:8e:7a:20:fc:44:66:73:97:cf: 6f:c8:10:95:44:db:e3:57:6a:0b:44:22:23:64:ba: bd:fc:85:32:53:fd:9d:74:11:cc:13:0a:04:1e:fa: 83:ab:10:15:f1:6e:fc:da:6f:63:e9:81:ed:03:bd: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:95:5B:2A:57:7F:7C:9F:A6:8C:1F:71:9F:73:79:02:E3:25:2A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fa2da882-4d83-35f8-8c4f-9a45d0c1cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:3c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:50:58:1c:bb:ca:88:c2:35:5a:db:de:ef:35:5f:bc:ec:24: c4:f2:ee:79:ed:b4:c3:1d:10:92:fa:9f:bb:16:41:94:d7:20: e1:46:9f:a4:9a:e0:1e:86:92:49:db:53:18:eb:ab:8a:5c:79: dd:11:ba:b2:ac:23:00:52:b2:4a:7b:00:9d:90:27:8f:9f:9c: 88:53:57:7e:11:a4:df:d3:ad:87:61:73:54:f1:63:99:6c:3e: 48:f9:a4:f9:60:04:f0:17:1b:27:1b:bc:b9:21:e8:32:e4:cf: 33:39:f4:d3:68:42:cd:56:83:32:a2:2b:4b:39:f9:84:94:f8: f3:c9:d2:39:d9:92:d8:fb:36:f6:6d:18:32:6e:31:7e:db:f1: 10:fb:3e:2f:0a:4a:36:4d:96:0a:b7:3a:c7:5c:12:ff:9c:39: c5:15:a2:8f:66:70:62:5a:d8:02:99:0c:d3:b7:89:fe:b6:2f: 66:3f:13:f7:19:98:a7:4b:0f:09:ad:45:ff:ea:50:30:44:77: a8:e8:f0:04:02:c8:9c:df:21:95:31:20:27:9c:1d:bd:c8:a3: 1a:01:9b:f0:ca:9c:2c:b9:37:8f:ea:bd:41:e0:e6:ff:ca:f5: 98:37:97:56:82:37:55:6b:54:07:a5:e7:bf:09:09:3a:90:29: aa:d9:07:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtHXQIWV9F7ZW+kwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkyMjExNTczMFoXDTI1MTIyMTEyNTczMFowLzEtMCsGA1UEAxMk MTRiMjEwODctYjlmMS00ZjY2LTllZmUtODAxOTI0YjdkOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRzPrYRBMSmi5ojhQwiDZxiQ3+R0kXVnh//o ZshWTq1bKdy7bz4Bmd+eSnWKZG5BbZ5rbqu+qqXxoha13wx15bqtSnNZ3medbZ07 Xerh0WUzkcCdvWYA8mG6rIghTyOvs9IYg/1PI0ltJ+UBf4awjtcOMfB/hMFdieua VRtCRhAdCsur5d3HCDum1LxaoFWCP2hyzslKkA0JqkKYXWPNHyfSq3QmZSK7rc1y VQVVciVmo5GOI/oEfI8V18Si7tBwRqu3llK1E9OOeiD8RGZzl89vyBCVRNvjV2oL RCIjZLq9/IUyU/2ddBHMEwoEHvqDqxAV8W782m9j6YHtA713MQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAWVWypXf3yfpowfcZ9zeQLjJSoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmEyZGE4ODItNGQ4My0z NWY4LThjNGYtOWE0NWQwYzFjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiDww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXFBYHLvKiMI1Wtve7zVfvOwkxPLuee20wx0QkvqfuxZBlNcg4Uaf pJrgHoaSSdtTGOurilx53RG6sqwjAFKySnsAnZAnj5+ciFNXfhGk39Oth2FzVPFj mWw+SPmk+WAE8BcbJxu8uSHoMuTPMzn002hCzVaDMqIrSzn5hJT488nSOdmS2Ps2 9m0YMm4xftvxEPs+LwpKNk2WCrc6x1wS/5w5xRWij2ZwYlrYApkM07eJ/rYvZj8T 9xmYp0sPCa1F/+pQMER3qOjwBALInN8hlTEgJ5wdvcijGgGb8MqcLLk3j+q9QeDm /8r1mDeXVoI3VWtUB6XnvwkJOpApqtkHcA== -----END CERTIFICATE-----Generated at Sat Oct 11 07:11:38 2025 by rpki-client