$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa File: 68c68e79-1c47-3078-9917-47c5d37abb24.roa (raw, json) Hash identifier: hoJxljQGcsXGEYEsWN6ZAml95+Nu4A6WGAG+bkDxP68= Subject key identifier: 26:C6:BA:E6:96:4C:06:F9:D0:11:5A:59:A7:31:8A:11:4E:28:DF:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6201FA6404993051996ADF40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 2604:2e89:f000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:fa:64:04:99:30:51:99:6a:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=599ef83f-e848-47de-a8c6-5be60f7aea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:8d:92:27:d7:63:78:7b:15:e0:52:d9:00: 2a:d6:b7:5c:26:22:2a:98:c4:4f:04:a2:6d:d4:68: a0:da:a3:a5:7b:03:d4:55:f3:1b:52:81:8d:91:fd: 2d:db:c0:1b:9d:28:38:ad:1c:2b:c1:ff:dd:d2:43: 69:dc:70:23:92:b1:b3:28:2d:9a:f0:5f:1e:00:8e: 0a:57:64:ca:af:a1:f4:47:90:55:74:82:00:74:ed: 83:65:80:bf:39:42:95:b2:9a:3e:cb:6b:83:d4:23: 7a:ca:36:0b:b0:b8:7c:70:d3:d7:b3:0d:01:65:b9: 6d:61:4e:cb:a8:c0:15:47:9e:dc:13:e8:81:96:1c: 58:46:53:bb:52:47:0f:37:6b:14:e2:85:bf:40:57: ba:f5:6b:cc:66:2d:7b:3f:7f:a2:33:9c:b4:94:ed: 56:34:8d:b6:f5:de:8c:91:d0:91:b6:cf:c6:4a:03: 21:af:cc:a3:d1:e2:1f:51:af:df:03:ee:32:ce:28: e3:6d:f8:9d:9e:de:0e:75:32:7a:1e:f8:4c:a3:ff: b8:31:ef:0c:fc:dd:e1:32:d7:3b:30:7c:4b:0e:8d: da:d8:cd:9f:58:d9:6e:1b:c2:bd:73:1e:87:16:f4: d4:73:f4:8a:13:8d:c5:c2:e1:72:b8:9e:04:2b:fa: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:BA:E6:96:4C:06:F9:D0:11:5A:59:A7:31:8A:11:4E:28:DF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/68c68e79-1c47-3078-9917-47c5d37abb24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:f000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9a:41:e5:ce:0c:97:8f:f0:66:43:59:19:ac:e0:7d:6b:18: 98:d8:c5:d7:78:f8:ed:c6:af:2e:37:6b:ac:29:11:ab:06:99: b6:e7:e7:c1:27:f2:e2:99:7c:ba:7d:2c:4f:6f:99:8b:78:58: 6e:0b:76:6c:66:a2:ab:5c:74:f1:48:dd:88:35:dd:dd:08:8e: c8:63:3d:05:d7:71:dd:a8:de:55:ff:60:64:03:a3:ec:e5:4e: 85:99:00:d6:c3:2d:ab:43:d2:34:7f:cd:33:68:01:e0:db:d3: b7:4e:1a:90:cf:ba:e9:36:92:90:a9:3a:f2:5e:6c:10:74:d7: 0b:3d:ea:c4:cd:05:e9:99:2e:d2:ed:c1:b0:9e:1f:12:f5:76: 3c:4e:69:66:87:2c:b0:d0:cf:03:93:27:e0:08:22:09:7e:50: 14:57:fc:45:c9:fa:3f:54:72:69:b2:03:b2:c0:7d:8d:d0:cc: 57:19:20:88:39:c0:23:85:5f:28:2b:d4:ec:a2:ab:a0:f0:ae: 7c:74:07:b2:e9:b6:73:a2:e2:89:de:02:2c:8a:65:d6:b1:9f: 0e:b6:5c:ab:49:0f:e1:c7:87:ad:27:3b:e3:63:b5:3b:d6:65: 6b:8e:34:3d:65:02:74:f7:e4:a0:ad:d9:60:2a:3d:76:4d:86: 4e:07:2d:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAfpkBJkwUZlq30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTk5ZWY4M2YtZTg0OC00N2RlLWE4YzYtNWJlNjBmN2FlYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR2NkifXY3h7FeBS2QAq1rdcJiIqmMRPBKJt 1Gig2qOlewPUVfMbUoGNkf0t28AbnSg4rRwrwf/d0kNp3HAjkrGzKC2a8F8eAI4K V2TKr6H0R5BVdIIAdO2DZYC/OUKVspo+y2uD1CN6yjYLsLh8cNPXsw0BZbltYU7L qMAVR57cE+iBlhxYRlO7UkcPN2sU4oW/QFe69WvMZi17P3+iM5y0lO1WNI229d6M kdCRts/GSgMhr8yj0eIfUa/fA+4yzijjbfidnt4OdTJ6HvhMo/+4Me8M/N3hMtc7 MHxLDo3a2M2fWNluG8K9cx6HFvTUc/SKE43FwuFyuJ4EK/pOHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCbGuuaWTAb50BFaWacxihFOKN9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjhjNjhlNzktMWM0Ny0z MDc4LTk5MTctNDdjNWQzN2FiYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuifAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAJpB5c4Ml4/wZkNZGazgfWsYmNjF13j47cavLjdrrCkRqwaZtufn wSfy4pl8un0sT2+Zi3hYbgt2bGaiq1x08UjdiDXd3QiOyGM9Bddx3ajeVf9gZAOj 7OVOhZkA1sMtq0PSNH/NM2gB4NvTt04akM+66TaSkKk68l5sEHTXCz3qxM0F6Zku 0u3BsJ4fEvV2PE5pZocssNDPA5Mn4AgiCX5QFFf8Rcn6P1RyabIDssB9jdDMVxkg iDnAI4VfKCvU7KKroPCufHQHsum2c6Liid4CLIpl1rGfDrZcq0kP4ceHrSc742O1 O9Zla440PWUCdPfkoK3ZYCo9dk2GTgctyg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:54 2025 by rpki-client