$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa File: 28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa (raw, json) Hash identifier: uqC4z8SGPkXsX2NOQEYN3P6gCEu2+JPy8UgL503wi4Y= Subject key identifier: 3E:EE:F9:59:D8:E9:5A:80:96:55:08:15:63:C4:D0:71:DC:C4:90:03 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AE94D7CA89088D7B11BDF51C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa Signing time: Tue 19 Aug 2025 19:20:14 +0000 ROA not before: Tue 19 Aug 2025 19:20:14 +0000 ROA not after: Mon 17 Nov 2025 20:20:14 +0000 asID: 19905 IP address blocks: 2604:2e87:a400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:4d:7c:a8:90:88:d7:b1:1b:df:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 19 19:20:14 2025 GMT Not After : Nov 17 20:20:14 2025 GMT Subject: CN=4ec72dbf-fb78-4c9c-bf88-9a78f8b6ada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:4e:b1:7d:43:43:63:f1:35:68:99:cd:9a: f6:b9:16:85:f3:c2:a5:5d:81:55:51:76:a4:8f:53: c2:84:9d:af:ad:73:c4:c6:bd:13:55:f1:ed:45:db: 54:5f:36:10:53:39:6b:72:46:26:22:cf:11:a3:9c: 3c:05:f8:c9:31:05:d9:2b:ea:9d:9d:1d:c6:5a:ae: 09:12:67:04:69:17:41:a8:eb:d0:5f:6c:da:c5:09: ae:0f:ce:d0:db:b7:3e:b2:72:75:1c:18:c3:51:55: 88:ee:64:24:19:45:67:8f:23:06:b6:eb:7d:d4:dc: 3b:ca:ae:8a:fe:67:c6:46:b9:76:01:85:90:23:fb: 69:15:b5:e1:84:18:80:79:e5:05:2c:17:27:85:ff: 73:51:fb:6d:1a:f9:01:53:c4:00:29:60:93:26:70: db:36:7b:6e:96:0b:52:63:ef:67:2e:fd:fb:06:f3: d8:2c:a3:80:88:75:fe:75:c1:5d:8b:a4:5e:25:b9: 11:cd:41:aa:4b:c5:d9:77:74:fc:be:b5:d3:1f:ce: 82:c7:5b:6b:9a:79:79:b7:82:46:e1:ef:e0:14:b7: 05:ec:72:75:96:96:65:d0:a1:0a:ac:8c:6a:b9:e3: 71:e3:51:ba:b3:7e:38:64:31:26:28:b4:9e:a9:d5: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:F9:59:D8:E9:5A:80:96:55:08:15:63:C4:D0:71:DC:C4:90:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/28a5470f-f034-3a3f-ac49-9b49b6bd08b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:a400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3d:fe:1c:8a:f0:74:97:38:91:a9:c4:84:e9:ac:08:62:09: 18:01:c9:f6:b4:9a:91:7a:fa:12:35:28:e3:13:1a:56:6f:51: e9:fc:68:ac:27:b7:36:21:72:20:c5:bd:55:13:4e:46:7e:6c: 64:bb:d1:01:09:f6:e5:fc:75:4a:c1:1d:2b:d6:79:6b:1b:6c: 7a:fd:f9:cb:66:13:ff:b7:58:4a:ae:e2:6c:4c:2a:e7:8f:33: 30:16:0a:c6:05:fa:c5:a7:35:d1:43:9b:20:c9:87:41:81:36: ac:8c:39:db:ef:d1:3c:79:a0:85:26:7a:2f:83:27:45:7e:7b: 9e:b9:28:08:0d:86:96:66:51:9e:94:f7:d0:b1:8e:00:5c:80: 90:42:43:3d:31:66:9e:b4:f0:0c:4d:3c:59:19:91:71:c3:9a: 22:e0:4f:77:71:fe:85:a0:37:72:24:5b:35:52:ed:4b:7b:93: 87:3c:9f:e1:43:bb:96:13:f0:3f:51:03:26:de:77:ca:cd:b2: f8:ac:b9:27:72:b9:04:7c:93:5a:e1:3d:ab:b9:59:8e:10:95: 7c:a8:88:d5:e0:c3:66:24:08:f8:b1:98:36:4c:a7:40:09:89: 75:09:6c:44:59:82:65:68:d5:53:23:68:e5:2a:63:a2:ec:6c: a0:58:99:07 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErpTXyokIjXsRvfUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxOTE5MjAxNFoXDTI1MTExNzIwMjAxNFowLzEtMCsGA1UEAxMk NGVjNzJkYmYtZmI3OC00YzljLWJmODgtOWE3OGY4YjZhZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXBOsX1DQ2PxNWiZzZr2uRaF88KlXYFVUXak j1PChJ2vrXPExr0TVfHtRdtUXzYQUzlrckYmIs8Ro5w8BfjJMQXZK+qdnR3GWq4J EmcEaRdBqOvQX2zaxQmuD87Q27c+snJ1HBjDUVWI7mQkGUVnjyMGtut91Nw7yq6K /mfGRrl2AYWQI/tpFbXhhBiAeeUFLBcnhf9zUfttGvkBU8QAKWCTJnDbNntulgtS Y+9nLv37BvPYLKOAiHX+dcFdi6ReJbkRzUGqS8XZd3T8vrXTH86Cx1trmnl5t4JG 4e/gFLcF7HJ1lpZl0KEKrIxqueNx41G6s344ZDEmKLSeqdXvjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFD7u+VnY6VqAllUIFWPE0HHcxJADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjhhNTQ3MGYtZjAzNC0z YTNmLWFjNDktOWI0OWI2YmQwOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh6Qw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUz3+HIrwdJc4kanEhOmsCGIJGAHJ9rSakXr6EjUo4xMaVm9R6fxo rCe3NiFyIMW9VRNORn5sZLvRAQn25fx1SsEdK9Z5axtsev35y2YT/7dYSq7ibEwq 548zMBYKxgX6xac10UObIMmHQYE2rIw52+/RPHmghSZ6L4MnRX57nrkoCA2GlmZR npT30LGOAFyAkEJDPTFmnrTwDE08WRmRccOaIuBPd3H+haA3ciRbNVLtS3uThzyf 4UO7lhPwP1EDJt53ys2y+Ky5J3K5BHyTWuE9q7lZjhCVfKiI1eDDZiQI+LGYNkyn QAmJdQlsRFmCZWjVUyNo5SpjouxsoFiZBw== -----END CERTIFICATE-----Generated at Thu Aug 21 11:57:27 2025 by rpki-client