$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa File: 123f721a-ef6b-3594-aee1-809863a3160b.roa (raw, json) Hash identifier: lHZ1De1rpE7sYmWiAiZy4pqWUVsgd1E5kz5FG8FSNME= Subject key identifier: 3A:81:21:74:B0:3A:35:7D:34:D3:0C:22:1F:EC:8A:85:B9:E9:BA:69 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A761B59331C2F441280618300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e8c:a000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:59:33:1c:2f:44:12:80:61:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=e09bbd38-6e27-42bf-bb02-011777cd01f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:bc:74:98:fe:31:2a:2a:fa:6e:70:5a:ab: f3:ad:27:3e:4b:90:03:8d:31:54:ea:10:34:66:4a: ea:a4:0a:21:e2:77:0a:1f:f6:69:c0:41:32:d9:bb: bb:2c:75:3d:f1:27:f8:fc:35:25:d2:a8:2e:c9:79: 0b:10:63:be:c1:27:a1:03:75:52:8d:d5:e8:7d:0c: 1d:11:60:11:a4:80:cd:d6:a0:53:85:ea:4e:c4:19: 0a:a8:61:99:4f:90:48:00:cd:ba:e3:4c:e9:a9:a9: 3b:6d:07:56:ec:ad:47:29:bc:50:fb:15:b1:68:de: 58:a1:86:0f:54:04:ad:6f:7b:b7:ae:ec:00:7f:1e: 24:6d:a1:24:58:61:b1:4d:33:46:2c:c4:82:5b:14: 06:54:83:56:0b:8a:42:a4:ab:d5:bf:6b:fd:82:7f: 55:5b:f0:7c:92:e5:16:8b:84:f0:f1:02:ef:89:1e: 17:ac:b4:ed:60:5f:81:7f:37:19:86:46:5b:c6:24: 81:2c:81:8e:fb:53:5c:9b:3f:6d:77:b0:9e:2d:9f: 7e:00:fb:cf:85:ca:ef:46:a1:6b:23:85:2c:fe:df: ac:e7:ec:89:a9:44:87:c3:22:c6:cd:8e:07:21:99: 1b:c8:9f:08:31:db:08:5a:38:15:80:be:18:9c:cc: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:81:21:74:B0:3A:35:7D:34:D3:0C:22:1F:EC:8A:85:B9:E9:BA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/123f721a-ef6b-3594-aee1-809863a3160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8c:a000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0d:e4:7c:48:e5:4c:eb:b5:cd:06:9b:0c:24:09:f1:8e:8e: 20:58:d0:45:d0:f5:b4:22:e0:6a:8d:5a:45:93:e7:3e:3a:6c: df:c3:56:39:79:c7:60:59:bb:ac:06:77:b0:2e:c8:7f:3b:30: 61:2d:c9:89:d1:3b:36:fb:14:8d:5e:dd:4f:0e:d9:76:38:21: 7f:c1:ad:ef:53:a1:35:63:f9:e1:d9:7d:fe:70:4f:54:48:42: 49:e3:fe:bd:03:35:63:1c:66:47:75:44:50:98:a3:60:6c:13: 9d:72:03:52:dc:ab:54:71:89:57:e3:90:fb:0e:8e:59:4c:b3: b9:1e:3a:1d:d8:8d:c3:81:6c:a0:09:b9:63:3c:8c:5d:7c:23: 5e:00:90:ec:f1:af:6e:4f:de:22:5d:b0:81:1a:a4:0d:f2:fc: ae:f6:e1:e0:01:bb:8b:0f:5e:41:82:72:3a:1b:7e:20:c0:10: 89:c5:ba:27:9c:9d:fa:55:f6:1c:20:01:0d:3c:da:b8:e0:92: 32:e6:58:4c:e5:b8:bd:bb:07:44:c4:d8:c7:a7:5a:70:72:92: 8a:30:0c:17:ed:0f:ca:42:ce:f1:c3:68:bb:9c:f4:2c:10:17: c8:81:25:33:de:0a:00:19:dd:9d:46:67:87:b8:f9:92:78:f2: f4:1f:eb:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp2G1kzHC9EEoBhgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZTA5YmJkMzgtNmUyNy00MmJmLWJiMDItMDExNzc3Y2QwMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsC8dJj+MSoq+m5wWqvzrSc+S5ADjTFU6hA0 ZkrqpAoh4ncKH/ZpwEEy2bu7LHU98Sf4/DUl0qguyXkLEGO+wSehA3VSjdXofQwd EWARpIDN1qBThepOxBkKqGGZT5BIAM2640zpqak7bQdW7K1HKbxQ+xWxaN5YoYYP VAStb3u3ruwAfx4kbaEkWGGxTTNGLMSCWxQGVINWC4pCpKvVv2v9gn9VW/B8kuUW i4Tw8QLviR4XrLTtYF+BfzcZhkZbxiSBLIGO+1Ncmz9td7CeLZ9+APvPhcrvRqFr I4Us/t+s5+yJqUSHwyLGzY4HIZkbyJ8IMdsIWjgVgL4YnMy46wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDqBIXSwOjV9NNMMIh/sioW56bppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTIzZjcyMWEtZWY2Yi0z NTk0LWFlZTEtODA5ODYzYTMxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujKAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAVA3kfEjlTOu1zQabDCQJ8Y6OIFjQRdD1tCLgao1aRZPnPjps38NW OXnHYFm7rAZ3sC7IfzswYS3JidE7NvsUjV7dTw7Zdjghf8Gt71OhNWP54dl9/nBP VEhCSeP+vQM1YxxmR3VEUJijYGwTnXIDUtyrVHGJV+OQ+w6OWUyzuR46HdiNw4Fs oAm5YzyMXXwjXgCQ7PGvbk/eIl2wgRqkDfL8rvbh4AG7iw9eQYJyOht+IMAQicW6 J5yd+lX2HCABDTzauOCSMuZYTOW4vbsHRMTYx6dacHKSijAMF+0PykLO8cNou5z0 LBAXyIElM94KABndnUZnh7j5knjy9B/r/g== -----END CERTIFICATE-----Generated at Thu Jul 10 08:25:53 2025 by rpki-client