$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa File: e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa (raw, json) Hash identifier: oXJGJF5pIhvwoQJtrSHo2YE4So7MKzboQlM6YJixGGk= Subject key identifier: 47:B8:19:48:93:AA:90:02:FE:84:4A:0F:94:74:15:91:E4:63:AF:46 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B8D477A7DAE3F161ED2599680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 2604:2e87:2400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7a:7d:ae:3f:16:1e:d2:59:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=4a4bff07-517a-4727-aad7-19ef87a44c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:28:a9:ce:3b:74:69:1a:30:43:e4:30:87: c9:d9:5a:18:84:8e:73:42:c0:c0:8e:47:44:bd:7c: 1b:03:a6:e0:97:57:38:da:ee:17:99:69:bb:2f:98: 70:e7:b3:a9:f8:a1:93:91:fd:c0:f0:c1:63:e4:71: 71:6f:9a:77:58:20:8d:37:64:82:1d:d9:ce:21:90: 7c:02:c6:48:b1:f4:e9:eb:33:4b:18:7a:d1:d3:48: 27:1b:bf:79:47:62:95:b4:b8:94:a8:26:89:e3:4a: 0e:28:5e:4e:d2:07:32:3e:e2:15:43:ee:b0:f9:bb: 86:32:e2:29:43:c7:d2:d0:56:2e:05:87:96:81:28: d9:06:52:14:6b:e8:21:8f:c2:2a:44:90:2e:26:d2: 14:1d:11:23:f8:17:2c:b2:d4:ca:98:f1:fe:98:ab: 40:82:c3:92:62:65:59:b5:66:be:87:9c:f2:bd:db: 9d:e6:96:12:01:9a:57:15:61:aa:18:40:35:43:d4: 9a:43:ea:91:42:e9:c5:d9:f9:0a:7a:53:c2:e5:8a: 48:cb:5d:bc:cc:81:d4:1d:b0:ab:4b:78:a4:ff:22: e6:2e:45:5f:37:74:8e:9a:58:63:ec:57:7a:2f:8d: 07:8d:6e:38:1a:31:96:d0:1b:16:f8:ca:c4:0e:e4: e5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:19:48:93:AA:90:02:FE:84:4A:0F:94:74:15:91:E4:63:AF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e8f8cf6f-461d-33ff-a344-67d1492d3b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e87:2400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:83:7a:26:ab:53:3f:4d:14:ae:4f:13:51:dc:04:f1:9e: 2b:aa:cd:35:69:18:09:74:d2:f7:5b:57:62:ac:55:f8:73:3d: 1f:bc:b7:61:d1:2c:a9:38:6c:e8:ef:bb:41:fb:db:23:3d:1d: 5b:59:0d:30:40:eb:89:a8:a0:31:49:36:36:62:91:0b:91:df: 91:27:09:f4:10:45:a8:e0:35:a5:ab:32:f0:d6:83:2f:3e:71: 13:8e:41:a7:fc:51:c5:87:4b:50:88:fb:50:a9:d2:e1:e0:f8: ab:23:b8:37:1b:e3:d7:6c:ba:1f:65:42:a3:e5:09:3c:f7:4b: 81:2b:65:45:47:63:a6:12:8c:bd:f2:c5:81:2d:ad:58:05:ca: 6e:48:79:b3:33:fb:a1:1b:c1:e6:70:2c:84:64:7e:88:23:18: 2c:66:07:66:0f:5c:55:c4:c8:62:78:75:bd:24:bc:78:73:01: 92:01:59:9e:1a:c9:cf:c1:7d:c4:6a:4d:20:11:79:97:a0:c3: ca:28:24:7f:9a:e6:60:ff:86:98:4c:c3:51:ea:70:6c:1a:9f: 86:51:37:5d:47:18:75:84:a6:79:97:e6:aa:33:43:c6:cb:33: 63:e8:70:b6:e1:ff:9c:3b:14:ce:3a:40:17:fc:16:69:f5:fb: 39:c9:77:98 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuNR3p9rj8WHtJZloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk NGE0YmZmMDctNTE3YS00NzI3LWFhZDctMTllZjg3YTQ0YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HMoqc47dGkaMEPkMIfJ2VoYhI5zQsDAjkdE vXwbA6bgl1c42u4XmWm7L5hw57Op+KGTkf3A8MFj5HFxb5p3WCCNN2SCHdnOIZB8 AsZIsfTp6zNLGHrR00gnG795R2KVtLiUqCaJ40oOKF5O0gcyPuIVQ+6w+buGMuIp Q8fS0FYuBYeWgSjZBlIUa+ghj8IqRJAuJtIUHREj+BcsstTKmPH+mKtAgsOSYmVZ tWa+h5zyvdud5pYSAZpXFWGqGEA1Q9SaQ+qRQunF2fkKelPC5YpIy128zIHUHbCr S3ik/yLmLkVfN3SOmlhj7Fd6L40HjW44GjGW0BsW+MrEDuTl3QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEe4GUiTqpAC/oRKD5R0FZHkY69GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZThmOGNmNmYtNDYxZC0z M2ZmLWEzNDQtNjdkMTQ5MmQzYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuhyQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZEKDeiarUz9NFK5PE1HcBPGeK6rNNWkYCXTS91tXYqxV+HM9H7y3 YdEsqThs6O+7QfvbIz0dW1kNMEDriaigMUk2NmKRC5HfkScJ9BBFqOA1pasy8NaD Lz5xE45Bp/xRxYdLUIj7UKnS4eD4qyO4Nxvj12y6H2VCo+UJPPdLgStlRUdjphKM vfLFgS2tWAXKbkh5szP7oRvB5nAshGR+iCMYLGYHZg9cVcTIYnh1vSS8eHMBkgFZ nhrJz8F9xGpNIBF5l6DDyigkf5rmYP+GmEzDUepwbBqfhlE3XUcYdYSmeZfmqjND xsszY+hwtuH/nDsUzjpAF/wWafX7Ocl3mA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:58 2025 by rpki-client