$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa File: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (raw, json) Hash identifier: vyZL/+9SA8yvqtKxpjN2yz27cmlj1oNLtCfKl5WaxBg= Subject key identifier: 35:05:22:43:59:69:58:9C:B1:E8:8C:43:D4:4E:88:9A:CB:13:3A:54 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584B0B76B476F9F2EAB03BE84400 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 17 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b4:76:f9:f2:ea:b0:3b:e8:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=c174bd96-48cd-42b5-a40c-cf3bb5549c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9a:cf:9b:6b:0e:1f:4b:e1:92:0c:cf:7a:99: ae:3a:33:35:0e:38:85:60:a2:cf:a4:75:2d:31:a5: 60:d3:98:02:b3:f8:30:d7:4a:7a:d1:c0:24:8b:fc: 7b:80:c0:26:43:56:8f:3a:d5:89:4f:c4:e7:21:30: 49:9c:0f:9e:82:f2:3d:ab:d9:41:7e:4a:48:a4:93: 97:89:ba:ed:70:4b:10:fe:61:d0:37:ef:fe:bd:fc: 76:40:b8:5d:b9:35:2f:fc:d4:c8:ac:63:49:2a:6f: e3:0d:08:78:c8:52:9a:18:9c:e9:e5:72:28:ea:cd: 8e:fa:41:5b:7d:18:71:68:cb:3e:4e:1d:0e:d1:34: 54:d9:d1:d0:d4:20:ed:61:fd:c0:e5:b8:30:0a:a4: f0:c4:45:93:80:f8:d3:a2:f0:17:bb:63:b4:c6:dd: c2:18:be:e1:d9:5e:2c:1c:1f:16:0f:30:d4:57:84: 0c:0b:74:2e:71:ba:ff:65:06:56:85:7b:b2:d8:a0: d5:db:97:1d:b0:e5:ee:88:e3:22:e1:93:62:36:81: 05:54:e7:81:69:bd:c6:79:0a:e4:ed:9b:25:cd:7c: 5e:12:c2:f6:01:66:84:c1:5e:86:78:ea:30:2c:52: d3:f4:c4:c8:aa:18:08:78:22:81:dd:d9:a2:79:a8: d0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:22:43:59:69:58:9C:B1:E8:8C:43:D4:4E:88:9A:CB:13:3A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a9:8b:2b:db:77:96:71:4d:b0:e5:e7:c4:f9:07:22:88:95: e2:6b:fe:6a:cd:fc:92:db:4b:43:0a:ad:7a:c0:56:30:6f:ce: 12:93:f6:1d:f4:68:5d:a5:ed:8d:ae:a0:27:34:0c:4e:39:72: ee:f3:ad:b5:95:6a:2c:4d:f9:97:be:02:9f:6f:bb:d6:00:39: 87:9d:9e:2a:ad:35:1f:53:47:64:0b:71:99:20:47:84:c7:91: bb:03:dc:4a:ce:95:3f:f3:14:8b:82:5b:7a:97:40:46:d4:7c: d7:40:61:20:c5:ba:1c:91:76:32:d0:9b:f2:11:83:43:d6:d0: 81:74:91:3a:23:88:ae:ef:2a:15:bd:59:c2:17:9e:3a:2f:11: 73:4c:32:74:00:d5:d1:cc:be:ce:30:3e:2b:22:6d:a0:2d:28: a4:e7:e3:9b:25:d0:9a:f4:cd:4a:7e:dc:6a:9d:ad:35:d9:7e: bc:2e:9e:80:fe:39:81:ad:5a:22:d6:1b:a9:c9:9a:1c:7a:34: 03:60:42:16:71:3e:50:aa:24:f5:37:f8:c2:12:a2:0a:c5:ae: fe:66:b3:e2:fb:af:7a:3b:b5:60:e4:e3:1e:f6:19:0a:65:2f: 16:da:42:83:ba:ce:b0:3f:81:a6:98:0d:d9:13:cd:1d:a5:84: 9b:37:96:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdrR2+fLqsDvoRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YzE3NGJkOTYtNDhjZC00MmI1LWE0MGMtY2YzYmI1NTQ5YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiprPm2sOH0vhkgzPepmuOjM1DjiFYKLPpHUt MaVg05gCs/gw10p60cAki/x7gMAmQ1aPOtWJT8TnITBJnA+egvI9q9lBfkpIpJOX ibrtcEsQ/mHQN+/+vfx2QLhduTUv/NTIrGNJKm/jDQh4yFKaGJzp5XIo6s2O+kFb fRhxaMs+Th0O0TRU2dHQ1CDtYf3A5bgwCqTwxEWTgPjTovAXu2O0xt3CGL7h2V4s HB8WDzDUV4QMC3Qucbr/ZQZWhXuy2KDV25cdsOXuiOMi4ZNiNoEFVOeBab3GeQrk 7ZslzXxeEsL2AWaEwV6GeOowLFLT9MTIqhgIeCKB3dmieajQiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDUFIkNZaVicseiMQ9ROiJrLEzpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvZTIzNGM1Y2YtNmFkNy0z NTBiLTkwMTgtYWVlZjQwMTk1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrqYsr23eWcU2w5efE+QciiJXia/5qzfyS20tDCq16wFYwb84Sk/Yd 9Ghdpe2NrqAnNAxOOXLu8621lWosTfmXvgKfb7vWADmHnZ4qrTUfU0dkC3GZIEeE x5G7A9xKzpU/8xSLglt6l0BG1HzXQGEgxbockXYy0JvyEYND1tCBdJE6I4iu7yoV vVnCF546LxFzTDJ0ANXRzL7OMD4rIm2gLSik5+ObJdCa9M1Kftxqna012X68Lp6A /jmBrVoi1hupyZocejQDYEIWcT5QqiT1N/jCEqIKxa7+ZrPi+696O7Vg5OMe9hkK ZS8W2kKDus6wP4GmmA3ZE80dpYSbN5Yc -----END CERTIFICATE-----Generated at Wed Sep 17 00:59:11 2025 by rpki-client