$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa File: 39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa (raw, json) Hash identifier: /1R2+qy/1exXETjCjeOUKdVMoenfv0eNas3F3oTiNkk= Subject key identifier: A7:A0:C9:52:32:3E:71:BC:E4:03:49:6C:06:A5:BD:E0:C8:45:00:F6 Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584B2496C862669F4E50A4F7BB80 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 3754 IP address blocks: 2620:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c8:62:66:9f:4e:50:a4:f7:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=6b8aab3b-8c8f-44aa-a305-5df22ce491e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:1c:6e:43:9e:dc:f1:83:37:0e:ba:33:d0: 3d:5d:b1:87:77:fa:e0:02:c9:a0:2d:60:d6:df:09: 16:bf:ff:9b:07:35:48:59:6c:0b:1d:1a:14:f4:6b: a8:de:9c:3f:89:1b:f0:1a:9e:a8:c2:02:1e:58:97: be:35:4b:14:f1:cc:ee:91:6a:4a:c5:61:27:b2:df: 22:63:b5:d9:96:53:33:ae:93:40:46:76:4a:69:30: c6:73:95:c3:db:2d:af:91:62:fc:f3:08:1b:74:81: bf:e2:ab:9c:7d:0e:c9:b1:77:fe:85:57:c2:d7:ac: 2f:d9:2f:e4:46:85:58:67:52:9d:04:b5:77:15:e7: f8:07:fb:8e:81:ea:9f:5d:31:9b:1e:31:1b:ea:6f: f1:52:c5:1c:d3:b5:4b:16:ec:29:3b:e6:f8:11:48: 18:a3:e5:18:9d:46:39:73:06:e0:9c:cd:50:60:12: b1:8e:86:56:fc:29:68:9c:f2:89:a1:af:d9:38:fc: c4:f3:24:1c:3b:c0:68:cb:a5:dc:1a:a3:cc:5e:75: 1a:74:c6:c2:25:82:d5:e0:62:cd:04:05:2c:75:1c: bc:04:d7:23:68:99:3f:04:c6:51:9e:fd:a6:44:da: ee:e9:99:95:b4:19:5b:ba:29:66:18:49:05:c8:a9: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:C9:52:32:3E:71:BC:E4:03:49:6C:06:A5:BD:E0:C8:45:00:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:52:e0:25:fb:73:54:0a:f1:4d:91:55:f1:8b:40:35:de:71: 77:ea:3c:89:f7:b5:65:23:18:3d:ce:c3:01:f0:89:1d:9a:c4: 71:f1:9a:8e:74:1d:0e:e1:34:0e:ab:92:73:2e:90:9c:12:77: 55:75:9b:ce:14:da:fb:90:f0:32:bd:49:cb:98:8d:a3:5a:c1: 79:0e:8a:9a:c4:8b:62:f7:eb:bf:48:b9:fc:f7:c1:75:e2:79: 7c:00:6d:b5:a3:75:be:c2:b1:b0:d0:8b:84:f3:20:9f:f0:a1: 7d:dc:95:c9:be:6f:7b:65:1f:2b:11:83:9a:cb:c2:bc:19:d8: e6:ca:af:8e:fd:90:ca:01:71:c8:d4:4a:ca:0b:0d:f8:8a:ab: cb:83:91:8e:4a:ab:4d:be:87:65:9b:c5:96:10:34:ee:02:4a: 49:a7:73:fd:dc:64:80:f5:f0:b5:cb:b9:65:73:a3:18:28:a0: f4:76:f2:ea:64:97:54:e0:80:02:a4:e8:9e:95:86:e2:dd:e2: 0e:3b:63:bb:c6:a8:f1:66:2e:6a:29:96:b8:32:13:06:48:8f: 77:eb:d9:7f:54:84:01:14:ab:40:ea:a8:9f:6a:22:c0:93:e6: 12:39:1f:a8:42:b7:ac:ce:10:dd:e1:81:cb:80:f4:20:24:73: 4f:dd:75:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsklshiZp9OUKT3u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NmI4YWFiM2ItOGM4Zi00NGFhLWEzMDUtNWRmMjJjZTQ5MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrwcbkOe3PGDNw66M9A9XbGHd/rgAsmgLWDW 3wkWv/+bBzVIWWwLHRoU9Guo3pw/iRvwGp6owgIeWJe+NUsU8czukWpKxWEnst8i Y7XZllMzrpNARnZKaTDGc5XD2y2vkWL88wgbdIG/4qucfQ7JsXf+hVfC16wv2S/k RoVYZ1KdBLV3Fef4B/uOgeqfXTGbHjEb6m/xUsUc07VLFuwpO+b4EUgYo+UYnUY5 cwbgnM1QYBKxjoZW/ClonPKJoa/ZOPzE8yQcO8Boy6XcGqPMXnUadMbCJYLV4GLN BAUsdRy8BNcjaJk/BMZRnv2mRNru6ZmVtBlbuilmGEkFyKm0dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKegyVIyPnG85ANJbAalveDIRQD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvMzlkOGNlYmItNWUxYi0z NGQ3LTllYTctMDdiMWM2NjNkMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJS4CX7c1QK8U2RVfGLQDXecXfqPIn3tWUjGD3OwwHwiR2axHHx mo50HQ7hNA6rknMukJwSd1V1m84U2vuQ8DK9ScuYjaNawXkOiprEi2L3679Iufz3 wXXieXwAbbWjdb7CsbDQi4TzIJ/woX3clcm+b3tlHysRg5rLwrwZ2ObKr479kMoB ccjUSsoLDfiKq8uDkY5Kq02+h2WbxZYQNO4CSkmnc/3cZID18LXLuWVzoxgooPR2 8upkl1TggAKk6J6VhuLd4g47Y7vGqPFmLmoplrgyEwZIj3fr2X9UhAEUq0DqqJ9q IsCT5hI5H6hCt6zOEN3hgcuA9CAkc0/ddSw= -----END CERTIFICATE-----Generated at Thu Oct 9 01:22:50 2025 by rpki-client