$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa File: 5e008c88-4df5-3bc9-99d8-14d10be04198.roa (raw, json) Hash identifier: zJc+AIVkUwJr/4L8zOgsmOEchK4wTlLQuWXjN0q6tyw= Subject key identifier: BB:74:E9:8B:38:5A:48:2A:A7:F5:69:19:C9:7D:B9:92:10:B0:21:FD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B821CBB3AB31951B2D69B5880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 30036 IP address blocks: 2604:2e80:c04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bb:3a:b3:19:51:b2:d6:9b:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=490d0e5a-2232-4cd7-972a-ada4ff93e50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:55:58:90:c3:05:7c:5f:c9:7c:44:5d:da: c2:7c:23:e4:c6:40:4f:09:19:4a:22:9f:ef:b3:52: b8:04:ca:bd:82:f8:f1:e7:a4:f5:5a:25:fa:fe:b3: 8c:2e:b4:fb:b8:f1:72:50:10:d7:1b:8c:53:83:9e: b6:6c:9e:d9:dc:e5:7e:84:30:4c:a8:38:12:80:9e: bf:de:7b:9b:59:d7:81:7a:8f:1f:af:45:f6:2b:9c: c8:33:d4:86:75:f3:b1:d6:b0:60:00:84:13:cc:be: 36:db:8a:90:ab:aa:7a:46:74:cf:70:c6:3d:c4:7d: 68:4d:b5:cd:e0:aa:cc:b7:6e:56:dc:47:7f:ff:63: a2:c9:21:47:53:f0:9c:17:7f:08:4f:83:5a:a8:01: 07:f6:7d:bf:a0:90:de:e7:76:aa:5c:30:a3:83:76: 60:7c:4d:82:fb:63:63:12:bc:85:e8:4b:2d:77:f8: 48:6a:ef:e1:27:fd:21:91:1f:88:2a:b5:aa:5f:14: 4c:5b:93:30:94:9b:7a:22:16:04:8a:1a:4e:0b:a5: a3:ee:43:46:a4:b7:95:b5:a5:f2:98:83:81:ac:16: 7a:4a:3b:30:54:72:3d:aa:a1:d0:af:15:c4:75:d0: 08:33:f1:3c:78:52:52:91:f1:0d:d2:9c:f0:18:58: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:E9:8B:38:5A:48:2A:A7:F5:69:19:C9:7D:B9:92:10:B0:21:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e80:c04::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:48:82:47:35:a1:ec:e5:c0:48:3f:09:20:24:5e:3e:b2:2e: b1:6a:74:ab:12:44:1a:a4:e7:af:bf:1c:e4:79:66:47:47:c8: 48:f5:f4:7a:2a:68:d3:5f:00:f0:56:b2:49:38:4f:80:c7:52: 55:48:ca:a1:65:bf:5b:45:13:b7:47:f2:44:53:44:5a:d3:c2: 82:4d:f4:b9:a5:a2:e4:bd:01:35:19:82:a6:74:51:eb:9e:a5: bf:9f:a7:63:e1:36:55:75:9e:bf:b9:ce:11:34:90:53:71:4a: da:e8:29:1c:48:a2:69:42:ae:05:e6:41:81:23:40:57:c5:46: 0d:a0:bb:93:7d:38:e3:35:3d:4b:15:cd:29:da:77:8f:03:01: 52:29:5d:40:29:ed:56:dc:a6:78:36:28:e3:0c:c8:d2:0f:fd: e6:d7:b9:b9:b2:31:92:78:cf:8d:dd:d0:7c:4d:3c:13:39:be: 9e:e8:b5:38:7c:fd:bc:bc:6e:24:5e:2b:09:db:a2:dd:3f:c8: a5:22:42:72:40:07:06:53:4f:e9:6a:1b:9f:90:c8:d0:e5:8c: bb:ad:23:7f:8f:4d:df:40:0b:eb:36:dd:05:7d:10:15:32:34: 61:f8:e3:86:89:77:7b:53:1f:58:b8:b3:e5:84:cb:90:ec:7d: a5:78:31:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHLs6sxlRstabWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NDkwZDBlNWEtMjIzMi00Y2Q3LTk3MmEtYWRhNGZmOTNlNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW5VWJDDBXxfyXxEXdrCfCPkxkBPCRlKIp/v s1K4BMq9gvjx56T1WiX6/rOMLrT7uPFyUBDXG4xTg562bJ7Z3OV+hDBMqDgSgJ6/ 3nubWdeBeo8fr0X2K5zIM9SGdfOx1rBgAIQTzL4224qQq6p6RnTPcMY9xH1oTbXN 4KrMt25W3Ed//2OiySFHU/CcF38IT4NaqAEH9n2/oJDe53aqXDCjg3ZgfE2C+2Nj EryF6Estd/hIau/hJ/0hkR+IKrWqXxRMW5MwlJt6IhYEihpOC6Wj7kNGpLeVtaXy mIOBrBZ6SjswVHI9qqHQrxXEddAIM/E8eFJSkfEN0pzwGFi11wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLt06Ys4Wkgqp/VpGcl9uZIQsCH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWUwMDhjODgtNGRmNS0z YmM5LTk5ZDgtMTRkMTBiZTA0MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQugAwE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI9Igkc1oezlwEg/CSAkXj6yLrFqdKsSRBqk56+/HOR5ZkdHyEj1 9HoqaNNfAPBWskk4T4DHUlVIyqFlv1tFE7dH8kRTRFrTwoJN9LmlouS9ATUZgqZ0 Ueuepb+fp2PhNlV1nr+5zhE0kFNxStroKRxIomlCrgXmQYEjQFfFRg2gu5N9OOM1 PUsVzSnad48DAVIpXUAp7Vbcpng2KOMMyNIP/ebXubmyMZJ4z43d0HxNPBM5vp7o tTh8/by8biReKwnbot0/yKUiQnJABwZTT+lqG5+QyNDljLutI3+PTd9AC+s23QV9 EBUyNGH444aJd3tTH1i4s+WEy5DsfaV4MQ4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:59:30 2025 by rpki-client