$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbeaa561-9743-391e-8507-26c03e119930.roa File: bbeaa561-9743-391e-8507-26c03e119930.roa (raw, json) Hash identifier: lXPKaeyca1Ul6/Rzx3elXqNdGiH7HEN3FIeMdszrOZw= Subject key identifier: CE:87:49:93:95:39:C0:04:FF:F5:A4:84:73:A7:A1:36:0E:67:A1:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A86DC01D0BA4F70DFB169C640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbeaa561-9743-391e-8507-26c03e119930.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 2604:2e8b:1c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:01:d0:ba:4f:70:df:b1:69:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=ce823611-af8c-4b05-88e0-5ca524894de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:8f:71:9a:4b:00:74:fc:f9:3c:9f:d6:5c: 11:6f:c0:f7:72:e9:c6:3e:d8:cc:ae:fb:fc:e9:df: 94:0b:81:be:d8:f8:1a:32:de:70:7a:d8:21:a4:e6: 49:11:63:b9:2d:d5:60:46:a4:32:37:f0:6c:c1:da: 69:18:e0:56:a5:45:64:da:88:75:6b:2c:ee:e0:8b: e9:72:46:b4:ee:c2:fb:6b:59:66:e7:34:80:e5:86: ab:16:aa:04:50:37:d2:6a:8d:71:4b:f6:e9:49:77: 61:2d:72:9e:1d:7b:e1:6e:cc:66:a6:33:be:50:0a: 50:2d:f7:8a:b3:10:b9:64:6b:2c:b8:c3:e5:34:55: 42:ee:eb:bb:ca:48:9d:c3:22:b8:d0:ad:07:fc:9b: 11:f0:2e:0a:c4:bf:aa:71:41:c7:af:b0:de:17:80: ab:ab:a4:c1:60:31:62:be:95:9d:aa:c6:86:64:89: 3e:fe:20:e1:fd:b5:a3:37:00:36:25:c6:80:fb:e0: af:05:7b:85:52:d4:54:38:65:27:c2:c4:17:9c:ad: e9:c5:25:1d:33:38:a5:2f:42:ba:fe:43:77:53:c1: 9d:eb:a8:59:c2:5d:1f:32:bc:83:59:64:5f:d7:fb: 92:40:9e:6a:ff:dc:6f:e8:20:21:05:ab:20:84:1b: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:49:93:95:39:C0:04:FF:F5:A4:84:73:A7:A1:36:0E:67:A1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbeaa561-9743-391e-8507-26c03e119930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b:1c00::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:23:e7:8e:b9:be:4f:5e:28:63:bb:f0:8a:23:0a:10:4e:35: 80:b1:55:1e:ff:f4:8e:8c:38:09:ba:1b:78:94:f1:ff:0b:e6: 1f:78:5d:02:2e:9a:2e:88:47:9f:a0:dd:35:39:c4:be:05:58: 71:70:5f:44:98:53:3a:93:e5:b1:65:d0:9b:d0:74:31:01:56: 8e:0a:09:c8:67:2d:2a:1f:a4:72:1c:a3:e0:df:27:82:61:bd: 01:e2:31:70:8e:ac:2d:12:27:1a:9c:6c:7a:5d:1e:28:00:f7: e9:bd:8d:8b:41:01:f2:43:7d:1f:a3:d5:94:b7:ea:bf:34:87: f0:b5:6e:01:89:f0:09:e6:53:e4:33:7c:3c:80:98:e8:dc:bc: 8b:af:5a:fd:54:0b:73:f9:93:65:28:8a:30:1c:43:13:b1:c6: c0:f4:60:7b:17:07:3f:8f:ba:13:04:ed:5e:d7:ed:91:f1:96: fb:91:50:ba:79:cd:f1:85:b6:91:12:52:f8:3e:c9:17:ac:f5: eb:86:36:39:02:84:52:29:1a:8a:c6:ff:bc:d9:35:fc:f4:b7: 24:4c:b8:c3:24:ff:87:c4:81:cd:d7:f1:95:d2:08:94:8b:0e: 22:2f:a8:d6:59:84:95:c3:5e:5d:94:f1:68:95:3e:d3:f2:40: 3e:47:23:76 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqG3AHQuk9w37FpxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk Y2U4MjM2MTEtYWY4Yy00YjA1LTg4ZTAtNWNhNTI0ODk0ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP6PcZpLAHT8+Tyf1lwRb8D3cunGPtjMrvv8 6d+UC4G+2PgaMt5wetghpOZJEWO5LdVgRqQyN/BswdppGOBWpUVk2oh1ayzu4Ivp cka07sL7a1lm5zSA5YarFqoEUDfSao1xS/bpSXdhLXKeHXvhbsxmpjO+UApQLfeK sxC5ZGssuMPlNFVC7uu7ykidwyK40K0H/JsR8C4KxL+qcUHHr7DeF4Crq6TBYDFi vpWdqsaGZIk+/iDh/bWjNwA2JcaA++CvBXuFUtRUOGUnwsQXnK3pxSUdMzilL0K6 /kN3U8Gd66hZwl0fMryDWWRf1/uSQJ5q/9xv6CAhBasghBuCQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM6HSZOVOcAE//WkhHOnoTYOZ6FSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmJlYWE1NjEtOTc0My0z OTFlLTg1MDctMjZjMDNlMTE5OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuixww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaSPnjrm+T14oY7vwiiMKEE41gLFVHv/0jow4CbobeJTx/wvmH3hd Ai6aLohHn6DdNTnEvgVYcXBfRJhTOpPlsWXQm9B0MQFWjgoJyGctKh+kchyj4N8n gmG9AeIxcI6sLRInGpxsel0eKAD36b2Ni0EB8kN9H6PVlLfqvzSH8LVuAYnwCeZT 5DN8PICY6Ny8i69a/VQLc/mTZSiKMBxDE7HGwPRgexcHP4+6EwTtXtftkfGW+5FQ unnN8YW2kRJS+D7JF6z164Y2OQKEUikaisb/vNk1/PS3JEy4wyT/h8SBzdfxldII lIsOIi+o1lmElcNeXZTxaJU+0/JAPkcjdg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:42 2025 by rpki-client