$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec263e21-fc87-38c0-a806-d358ef929c1f.roa File: ec263e21-fc87-38c0-a806-d358ef929c1f.roa (raw, json) Hash identifier: TMBnc86+TVswDxk4kyfsz7LGoLwCnUKvwDVxr+2/yus= Subject key identifier: EA:F1:09:3D:63:30:67:6A:22:3F:0D:9D:87:9E:49:16:9D:9F:F8:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B0B76D79B1C574143BB6A3DD0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec263e21-fc87-38c0-a806-d358ef929c1f.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 2604:2e87:5000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d7:9b:1c:57:41:43:bb:6a:3d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=d10d980d-3faa-4d81-bc3f-ca7361db02a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:65:f4:81:b8:b9:82:17:94:06:ec:d4:73: b9:6f:b7:75:c5:7c:97:9c:aa:2a:5e:4b:a6:18:65: d4:a2:30:26:37:e9:55:a6:5b:59:d1:5d:41:63:05: 26:25:ce:82:ed:80:03:1b:f5:14:aa:e0:06:7f:9e: ff:39:65:15:f1:92:f9:60:ca:dc:12:9d:5b:e2:9e: 23:c9:a4:2a:b0:bb:ab:80:b8:71:25:1e:6f:78:36: ef:63:3e:7b:07:f7:4e:0d:41:49:37:24:e6:1d:fb: eb:fc:e5:80:b9:df:fb:77:f5:f0:ad:b4:d4:1e:27: a2:5d:e2:27:a2:3a:dc:ac:26:a9:13:1a:37:36:17: d9:ab:eb:4d:ca:f7:83:04:19:5f:0d:c0:e3:0d:d2: c5:1f:19:67:de:95:da:6b:92:40:17:dd:04:a3:37: d6:a6:2a:06:67:36:c5:1e:06:f8:f7:5e:c5:37:3b: 90:39:10:41:54:0d:85:b8:02:ce:41:ee:f2:67:f6: ca:29:6e:30:8d:cb:1b:7f:c6:e7:7c:10:af:bc:57: 73:b9:4d:a2:80:a9:f4:33:9b:85:69:76:37:3a:0d: 8c:86:ad:5b:ac:23:74:19:16:9b:ca:89:9a:b6:35: 56:7a:ac:b7:e0:85:37:16:ce:67:b4:49:0a:10:d9: fd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:09:3D:63:30:67:6A:22:3F:0D:9D:87:9E:49:16:9D:9F:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ec263e21-fc87-38c0-a806-d358ef929c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:5000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:63:d3:53:96:b3:68:b6:27:e0:ab:a5:71:95:5e:18:2f:d6: 6a:fa:66:26:02:7d:bb:6f:b2:c0:86:51:2e:27:65:f3:fc:f4: 5f:de:4e:1a:e8:44:d3:c2:07:3a:4c:64:c5:65:0c:01:f6:2d: f2:36:2a:9b:d1:ad:60:2d:24:e4:94:3d:b9:b2:5d:b4:9e:0b: 21:ee:31:92:d1:f8:42:65:2e:04:d4:fb:4d:88:68:21:16:22: 1c:2e:92:e7:89:d8:b0:74:ad:78:70:3d:c7:c9:b8:0f:c2:9e: 71:d5:b6:02:29:56:19:40:44:01:fb:fa:70:48:f9:b5:d8:f2: 88:c2:20:62:1e:29:31:20:71:c5:91:c1:8e:09:15:9d:82:a9: 57:0c:f4:59:3b:2f:c4:a2:1f:0f:28:08:05:fa:55:da:4b:35: 54:07:e6:44:10:b3:e7:47:99:44:a0:b2:1e:d7:a8:74:17:88: e7:fb:95:b0:46:e5:34:c4:0e:71:6e:c2:95:3e:dc:b2:5e:37: 96:1d:ab:7f:9f:15:01:2e:22:86:c9:b8:fe:45:ee:11:0c:9a: 10:4b:5b:1d:54:94:3c:28:20:b9:d7:9f:bb:9d:d6:1f:d8:60: 19:01:35:65:d1:cc:5e:bc:90:a1:5f:38:20:5e:fc:b4:15:92: 40:b9:0b:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsLdtebHFdBQ7tqPdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZDEwZDk4MGQtM2ZhYS00ZDgxLWJjM2YtY2E3MzYxZGIwMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSFl9IG4uYIXlAbs1HO5b7d1xXyXnKoqXkum GGXUojAmN+lVpltZ0V1BYwUmJc6C7YADG/UUquAGf57/OWUV8ZL5YMrcEp1b4p4j yaQqsLurgLhxJR5veDbvYz57B/dODUFJNyTmHfvr/OWAud/7d/XwrbTUHieiXeIn ojrcrCapExo3NhfZq+tNyveDBBlfDcDjDdLFHxln3pXaa5JAF90EozfWpioGZzbF Hgb4917FNzuQORBBVA2FuALOQe7yZ/bKKW4wjcsbf8bnfBCvvFdzuU2igKn0M5uF aXY3Og2Mhq1brCN0GRabyomatjVWeqy34IU3Fs5ntEkKENn9aQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOrxCT1jMGdqIj8NnYeeSRadn/ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWMyNjNlMjEtZmM4Ny0z OGMwLWE4MDYtZDM1OGVmOTI5YzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuh1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACWPTU5azaLYn4KulcZVeGC/WavpmJgJ9u2+ywIZRLidl8/z0X95O GuhE08IHOkxkxWUMAfYt8jYqm9GtYC0k5JQ9ubJdtJ4LIe4xktH4QmUuBNT7TYho IRYiHC6S54nYsHSteHA9x8m4D8KecdW2AilWGUBEAfv6cEj5tdjyiMIgYh4pMSBx xZHBjgkVnYKpVwz0WTsvxKIfDygIBfpV2ks1VAfmRBCz50eZRKCyHteodBeI5/uV sEblNMQOcW7ClT7csl43lh2rf58VAS4ihsm4/kXuEQyaEEtbHVSUPCggudefu53W H9hgGQE1ZdHMXryQoV84IF78tBWSQLkL9A== -----END CERTIFICATE-----Generated at Sat Sep 6 08:03:09 2025 by rpki-client