$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa File: ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa (raw, json) Hash identifier: W3QiLcS52QXLxAQei3RCYPjpijCHk3/a0kkCaXH5B34= Subject key identifier: AB:B8:59:9D:74:41:D7:B0:42:2A:E1:E8:86:73:A8:61:A1:E3:7E:7B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B64CE57C28CCBE95EBE975900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 2604:2e8d:6800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:57:c2:8c:cb:e9:5e:be:97:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=019939f9-faf8-4928-8ac2-776dc8bccc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:69:93:b3:a7:96:9c:be:c2:ee:e0:4a:67: 29:52:09:61:0b:03:da:fe:69:08:81:ac:93:92:01: 2e:da:36:7a:3a:05:a5:43:31:33:58:58:82:7b:f8: 8e:50:c0:d5:5d:c5:97:f1:d3:24:25:fa:1d:a7:30: 15:52:f8:e4:e6:94:f5:d6:05:94:cb:41:d6:97:5d: 04:5b:44:26:32:89:c5:89:5b:9a:5d:aa:ab:f0:0a: c3:c2:e1:64:51:e4:ae:71:85:5b:7d:cd:59:01:d3: 45:b8:f3:b6:cb:83:bc:5c:28:a0:5c:f5:f7:6a:b4: 2c:bf:14:9a:ae:57:66:d6:52:a5:72:dc:de:3f:f6: b7:90:4b:72:b0:2e:5f:6c:e6:cb:56:08:7d:c0:a8: 69:08:30:64:c8:d6:72:ea:8a:49:36:0f:37:29:48: b4:16:38:de:f9:2a:74:fb:71:2a:29:87:da:73:a1: c6:23:73:11:88:11:60:47:99:cb:57:fd:be:fa:7e: db:e4:21:22:ed:eb:e2:4d:e6:85:3f:31:ef:1e:ef: c3:c4:88:a1:a3:a2:e5:fb:2e:87:76:b9:14:f0:5b: 32:c3:80:0e:d4:ec:9b:7f:cc:28:72:26:b0:01:36: 37:46:b7:35:0f:dc:76:10:35:38:08:b5:fc:56:a7: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B8:59:9D:74:41:D7:B0:42:2A:E1:E8:86:73:A8:61:A1:E3:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ff9576dd-906c-3b5c-9872-7bd37d17a60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:6800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:96:31:fa:50:3a:22:78:e9:a2:72:c8:0c:c6:82:fa:05:17: 30:90:b9:7e:2e:6a:7a:d8:cb:8c:8d:89:2a:87:78:f2:82:cd: 74:6f:48:32:70:1a:88:bc:4c:80:83:b9:9c:00:fc:d6:4d:55: 09:37:dc:ad:07:da:b8:1b:e4:25:89:c6:d0:90:77:4e:08:eb: a8:03:1e:cd:6d:c9:d2:ff:33:34:5b:90:e5:ad:38:72:07:13: f2:19:21:5a:54:36:e3:5c:f7:ec:57:bd:69:81:68:00:18:5a: b6:d9:9b:f7:57:b8:06:a9:9a:5b:4f:6f:a0:ee:c8:44:23:fa: 41:33:7e:65:2a:dd:f7:41:61:98:e7:ba:26:42:b6:a0:3b:58: 85:ab:dd:a1:41:03:28:b1:38:6c:71:36:e7:8d:6f:e1:14:91: 4b:16:22:e6:1b:d7:79:b1:42:e6:e3:6b:0c:84:de:6b:0f:8b: de:0a:04:3f:c7:ab:c9:88:d6:27:5e:35:cb:99:fc:5e:39:24: ea:99:b4:77:97:e3:2a:fa:de:0f:46:86:b9:8d:6d:be:43:2a: 53:37:66:98:21:c7:9f:bc:3e:83:35:40:44:e7:08:2b:9a:80: c6:e7:c4:52:e8:a9:e6:81:58:47:61:02:12:f2:e3:49:50:9b: 69:1d:51:bd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzlfCjMvpXr6XWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDE5OTM5ZjktZmFmOC00OTI4LThhYzItNzc2ZGM4YmNjYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWdpk7Onlpy+wu7gSmcpUglhCwPa/mkIgayT kgEu2jZ6OgWlQzEzWFiCe/iOUMDVXcWX8dMkJfodpzAVUvjk5pT11gWUy0HWl10E W0QmMonFiVuaXaqr8ArDwuFkUeSucYVbfc1ZAdNFuPO2y4O8XCigXPX3arQsvxSa rldm1lKlctzeP/a3kEtysC5fbObLVgh9wKhpCDBkyNZy6opJNg83KUi0Fjje+Sp0 +3EqKYfac6HGI3MRiBFgR5nLV/2++n7b5CEi7eviTeaFPzHvHu/DxIiho6Ll+y6H drkU8Fsyw4AO1Oybf8wociawATY3Rrc1D9x2EDU4CLX8VqcViwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKu4WZ10QdewQirh6IZzqGGh4357MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZmY5NTc2ZGQtOTA2Yy0z YjVjLTk4NzItN2JkMzdkMTdhNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujWgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUpYx+lA6InjponLIDMaC+gUXMJC5fi5qetjLjI2JKod48oLNdG9I MnAaiLxMgIO5nAD81k1VCTfcrQfauBvkJYnG0JB3TgjrqAMezW3J0v8zNFuQ5a04 cgcT8hkhWlQ241z37Fe9aYFoABhattmb91e4BqmaW09voO7IRCP6QTN+ZSrd90Fh mOe6JkK2oDtYhavdoUEDKLE4bHE2541v4RSRSxYi5hvXebFC5uNrDITeaw+L3goE P8eryYjWJ141y5n8Xjkk6pm0d5fjKvreD0aGuY1tvkMqUzdmmCHHn7w+gzVAROcI K5qAxufEUuip5oFYR2ECEvLjSVCbaR1RvQ== -----END CERTIFICATE-----Generated at Sat Oct 11 07:12:36 2025 by rpki-client