$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa File: 359caaca-1c8d-3044-b68d-1e9baf9a7283.roa (raw, json) Hash identifier: 8sUMzTfYRRZEszGbnFkdxDiZkCAEiqctJ4S7DPKOg/M= Subject key identifier: 0D:F0:89:57:27:5E:25:B1:29:CF:25:FF:73:21:B8:37:AD:63:3C:61 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584B21CC1DA3783ED6A26AD08200 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 3629 IP address blocks: 2620:f:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1d:a3:78:3e:d6:a2:6a:d0:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=58d4ed87-77c5-41c3-9bdb-88304132af9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:05:55:72:d8:0e:3f:13:a8:6d:00:78:05: b2:72:3e:0a:30:d8:b7:e1:c5:94:68:46:a6:ca:8c: 4e:aa:c1:06:a7:ad:a7:62:f8:da:a7:6c:d2:3e:f7: d8:71:c9:40:e3:66:ba:74:80:97:64:41:98:ba:0a: f1:ff:87:e8:fe:64:29:ea:71:71:02:51:6d:8b:53: 37:ae:9b:4b:fb:fa:7c:68:d9:e9:0f:d1:ac:2c:6d: 77:d0:b9:5e:6c:62:aa:46:6c:d5:0f:24:41:30:68: 84:06:fc:e2:b6:35:11:27:84:9a:0c:d2:ed:73:f7: 1b:2f:89:66:31:b6:ad:1c:5b:ad:d2:9e:30:1d:00: 74:1e:bb:22:fa:84:bf:42:ef:9a:c8:d6:50:0b:19: 85:36:c5:95:63:60:0b:dc:75:4c:a0:9b:4e:e2:f7: cf:25:e7:48:db:60:f2:29:97:93:70:fc:83:ad:0b: cd:d0:69:3e:09:35:78:45:b5:51:f3:c7:0c:40:9a: f9:9e:0d:56:97:20:37:85:02:c9:47:5f:53:47:9c: cc:4a:ff:ba:77:c6:b6:bd:42:79:99:d3:3e:9d:97: e2:c2:ca:3f:65:01:0f:b7:23:4b:24:db:13:a1:df: 2e:cc:56:43:ab:0c:e8:ba:64:7a:06:13:90:67:37: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F0:89:57:27:5E:25:B1:29:CF:25:FF:73:21:B8:37:AD:63:3C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:11:0e:2d:5c:98:21:96:0e:72:fc:1c:fe:6c:33:76:40:88: 22:63:17:8e:21:e5:d3:5f:a3:3f:08:10:bf:a5:54:4d:c6:d9: 2b:76:83:8a:bb:e2:15:bb:50:71:9d:66:8e:f1:7b:91:c1:ba: 8a:c5:fb:1d:f8:74:21:b4:fd:82:41:87:f0:c5:e3:84:f8:cd: 15:19:f7:47:23:04:84:d0:83:61:4b:cd:fb:0d:aa:e6:cd:1f: 66:85:1b:0f:c4:e5:e5:10:d9:68:f9:9e:92:48:7e:86:b5:fb: 59:39:a6:37:5c:3e:d7:0a:a0:c7:17:f7:32:6c:dc:73:b5:20: 00:1f:c8:ac:c0:11:60:5e:73:84:cc:da:6b:4d:34:29:1d:e4: 3e:36:c6:b2:d5:5d:80:4b:82:63:0f:0e:36:8d:f6:dc:c0:b2: 5d:af:a4:b7:e4:c3:59:48:c4:bc:0f:a5:45:24:3c:1b:71:11: 58:5a:cf:d5:80:52:37:e9:76:95:6e:ee:cb:4f:ea:0c:37:93: 74:12:ad:e1:08:92:87:ea:f5:01:72:15:5e:d5:52:e2:82:f6: 29:aa:b3:12:9b:9b:e1:dd:b1:18:26:96:37:89:8f:a6:05:a9: c9:6b:45:99:2f:82:b6:b9:80:ed:c1:c2:a3:24:85:dc:7c:6a: 1a:3d:7c:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEshzB2jeD7WomrQggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NThkNGVkODctNzdjNS00MWMzLTliZGItODgzMDQxMzJhZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3oFVXLYDj8TqG0AeAWycj4KMNi34cWUaEam yoxOqsEGp62nYvjap2zSPvfYcclA42a6dICXZEGYugrx/4fo/mQp6nFxAlFti1M3 rptL+/p8aNnpD9GsLG130LlebGKqRmzVDyRBMGiEBvzitjURJ4SaDNLtc/cbL4lm MbatHFut0p4wHQB0Hrsi+oS/Qu+ayNZQCxmFNsWVY2AL3HVMoJtO4vfPJedI22Dy KZeTcPyDrQvN0Gk+CTV4RbVR88cMQJr5ng1WlyA3hQLJR19TR5zMSv+6d8a2vUJ5 mdM+nZfiwso/ZQEPtyNLJNsTod8uzFZDqwzoumR6BhOQZzegiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3wiVcnXiWxKc8l/3MhuDetYzxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvMzU5Y2FhY2EtMWM4ZC0z MDQ0LWI2OGQtMWU5YmFmOWE3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8RDi1cmCGWDnL8HP5sM3ZAiCJjF44h5dNfoz8IEL+lVE3G2St2 g4q74hW7UHGdZo7xe5HBuorF+x34dCG0/YJBh/DF44T4zRUZ90cjBITQg2FLzfsN qubNH2aFGw/E5eUQ2Wj5npJIfoa1+1k5pjdcPtcKoMcX9zJs3HO1IAAfyKzAEWBe c4TM2mtNNCkd5D42xrLVXYBLgmMPDjaN9tzAsl2vpLfkw1lIxLwPpUUkPBtxEVha z9WAUjfpdpVu7stP6gw3k3QSreEIkofq9QFyFV7VUuKC9imqsxKbm+HdsRgmljeJ j6YFqclrRZkvgra5gO3BwqMkhdx8aho9fBM= -----END CERTIFICATE-----Generated at Thu Oct 9 01:39:21 2025 by rpki-client