$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa File: c35e098e-b550-340e-8fcb-693dcd6370c6.roa (raw, json) Hash identifier: ch8XjNtXeE97uPx4ktKodf4++wb5St0dXAQZ6mBU0Po= Subject key identifier: 1B:B0:D8:9D:F4:25:F1:26:B4:80:8A:DA:82:5C:A0:0F:10:C8:C0:C1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B7C87694AFF718EB239F0F180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 2604:2e8d:c400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:69:4a:ff:71:8e:b2:39:f0:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=39e8b499-cadc-40f4-a3cf-d454d918a69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:a6:b0:13:97:87:a0:3b:e6:64:68:3a:32: 6c:09:cd:69:dc:67:ff:16:3f:0b:4a:dc:3c:3c:4f: be:28:97:d8:cb:e9:26:35:26:ce:3a:9a:d0:0e:b1: d6:da:2c:15:bb:1f:7c:d6:c2:76:ae:97:88:1e:77: 2d:47:0e:2d:a1:9c:08:5a:45:cf:93:cb:f1:40:0f: df:d8:49:81:3c:13:5d:2c:e2:4a:a7:88:3d:ff:6f: 3f:0b:0a:33:7a:10:88:bf:4f:2b:68:20:05:b3:25: 1e:15:7c:f8:87:e6:f8:6f:cb:c3:88:74:42:19:c4: 9b:87:4a:8d:c1:cd:3f:3d:ae:1b:16:66:08:96:4f: bd:0e:24:34:87:d0:e6:d4:5d:1e:b8:36:ba:9f:8f: af:81:81:52:b6:71:93:13:a6:a8:7c:23:1e:3b:dc: 28:eb:b9:a0:1f:c1:ed:8f:9d:61:c4:31:91:82:da: 26:17:fb:f7:2e:82:11:b4:ad:ec:96:f8:60:f7:7b: 47:b6:40:f4:b5:cf:fa:f1:a8:e1:30:7c:74:15:88: ca:dd:6b:d8:ea:1b:f5:4b:dc:13:27:30:90:28:b4: ab:1d:62:c7:6c:fa:4e:8b:31:f7:48:a3:90:4d:aa: 58:8b:60:05:97:b3:5f:bb:4e:c9:17:71:4b:d6:d0: 7b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:D8:9D:F4:25:F1:26:B4:80:8A:DA:82:5C:A0:0F:10:C8:C0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c35e098e-b550-340e-8fcb-693dcd6370c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8d:c400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:31:d6:9e:9c:53:54:44:27:30:c5:3a:91:c3:8a:94:72:8c: 06:74:65:82:cf:48:e7:8b:b0:cd:ba:16:06:9c:5d:73:16:16: 15:e4:e3:7f:9a:46:56:6e:5c:34:29:2d:37:5e:77:36:7c:98: a9:0e:1b:76:7c:bc:56:b8:27:88:26:9c:9e:e4:70:ef:d8:77: ae:77:d5:59:ca:88:53:99:95:c2:db:f9:9a:3d:5f:4e:28:ef: f9:2f:cc:9e:51:39:67:0b:b1:ff:f3:07:a5:af:49:a4:49:88: d7:23:97:15:ca:7c:98:6b:f2:80:e1:f4:72:30:70:a4:4d:f9: 75:02:f5:a5:05:73:1e:fe:99:05:14:59:0a:f1:8b:a6:b6:b7: aa:ec:54:61:1c:63:91:64:ba:d1:3f:7c:2d:4b:49:56:dc:a3: e0:38:f2:ac:09:6c:ec:98:36:ad:eb:71:88:fb:25:fe:6f:fc: 7b:93:59:fb:27:a1:06:2e:00:39:f7:bd:91:86:4e:65:10:bd: a8:b8:da:6c:5a:f3:62:0c:20:a9:05:90:c1:7a:5e:f9:5e:54: 27:45:86:84:23:81:11:5b:c8:8e:cf:19:a1:34:a1:3a:10:c2: b4:80:86:92:9e:27:24:fb:15:e2:bd:23:d7:34:97:64:76:bc: 15:69:52:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt8h2lK/3GOsjnw8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MzllOGI0OTktY2FkYy00MGY0LWEzY2YtZDQ1NGQ5MThhNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR2msBOXh6A75mRoOjJsCc1p3Gf/Fj8LStw8 PE++KJfYy+kmNSbOOprQDrHW2iwVux981sJ2rpeIHnctRw4toZwIWkXPk8vxQA/f 2EmBPBNdLOJKp4g9/28/CwozehCIv08raCAFsyUeFXz4h+b4b8vDiHRCGcSbh0qN wc0/Pa4bFmYIlk+9DiQ0h9Dm1F0euDa6n4+vgYFStnGTE6aofCMeO9wo67mgH8Ht j51hxDGRgtomF/v3LoIRtK3slvhg93tHtkD0tc/68ajhMHx0FYjK3WvY6hv1S9wT JzCQKLSrHWLHbPpOizH3SKOQTapYi2AFl7Nfu07JF3FL1tB7XQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBuw2J30JfEmtICK2oJcoA8QyMDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzM1ZTA5OGUtYjU1MC0z NDBlLThmY2ItNjkzZGNkNjM3MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQujcQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAezHWnpxTVEQnMMU6kcOKlHKMBnRlgs9I54uwzboWBpxdcxYWFeTj f5pGVm5cNCktN153NnyYqQ4bdny8VrgniCacnuRw79h3rnfVWcqIU5mVwtv5mj1f Tijv+S/MnlE5Zwux//MHpa9JpEmI1yOXFcp8mGvygOH0cjBwpE35dQL1pQVzHv6Z BRRZCvGLpra3quxUYRxjkWS60T98LUtJVtyj4DjyrAls7Jg2retxiPsl/m/8e5NZ +yehBi4AOfe9kYZOZRC9qLjabFrzYgwgqQWQwXpe+V5UJ0WGhCOBEVvIjs8ZoTSh OhDCtICGkp4nJPsV4r0j1zSXZHa8FWlSsw== -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:52 2025 by rpki-client