$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3abb7143-9996-32e2-a9c9-5bc7a2c6774a.roa File: 3abb7143-9996-32e2-a9c9-5bc7a2c6774a.roa (raw, json) Hash identifier: SvBS0TJVMdu6X9p06aJBKWFOhTP864xzFflNrnU8/wc= Subject key identifier: 7B:60:72:A6:46:39:97:89:45:07:47:CA:80:2C:06:F6:80:73:48:FC Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B0E4153ADA250E2F69945FE80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3abb7143-9996-32e2-a9c9-5bc7a2c6774a.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 30215 IP address blocks: 2620:101:200e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:53:ad:a2:50:e2:f6:99:45:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=cd0d5d33-6f29-4b86-ae0b-36af8e2c1dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:85:be:40:40:eb:8d:a5:5e:af:6b:2b:9a: 65:65:50:e9:d1:42:b0:ff:fe:45:d7:4e:30:9f:c2: 24:74:40:79:c6:b1:ee:0c:19:60:ba:31:5b:6c:37: 2a:4b:b1:a7:bb:1f:23:5d:23:bb:39:49:fe:6a:02: d6:17:46:a1:d0:d2:a1:39:0b:da:af:35:f1:01:77: 68:9c:af:d8:1d:68:75:ba:ba:e5:eb:94:f9:8c:b8: cd:03:09:56:77:46:49:f9:19:63:56:27:59:0d:d9: 9e:f2:57:a4:f4:0f:35:3f:a9:1c:90:85:bf:a5:df: be:d0:75:91:8b:e2:9e:cf:02:6a:f0:a8:16:7b:fe: 81:92:a4:e6:15:61:5f:c9:4c:5d:2e:db:70:78:56: 66:dc:ac:9c:33:f4:20:71:42:29:53:0c:1c:69:bf: a8:12:56:f2:75:79:8a:68:44:26:fc:a5:3d:4f:4e: 22:18:d6:4e:4f:7e:d4:32:23:af:7b:af:7a:d8:c1: d6:44:02:c9:79:1c:3d:ea:b7:4e:6e:68:cb:ec:1e: a2:96:66:6a:4d:73:f1:fb:a7:44:2b:6a:6c:ce:95: 3e:ca:08:63:36:e1:55:5c:9a:2b:e8:21:71:3e:27: 16:a0:1c:10:89:4a:c4:96:b8:3a:ea:27:6b:4c:e1: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:72:A6:46:39:97:89:45:07:47:CA:80:2C:06:F6:80:73:48:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3abb7143-9996-32e2-a9c9-5bc7a2c6774a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:200e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:13:54:49:ac:5f:df:68:e6:23:cf:dd:66:fc:c4:95:cc:e1: cb:cf:b7:2c:d4:16:0d:b7:d0:90:34:8a:69:76:a9:b6:a7:60: d1:88:68:51:0b:1d:80:03:bc:c4:5d:a4:48:89:39:dc:64:34: 68:f2:e9:8a:42:b8:6f:f3:74:2b:42:eb:eb:14:fc:e2:9f:d7: 31:f8:e3:9c:ff:6f:dc:97:ab:ae:fe:09:f2:de:ca:19:14:d1: e6:1f:5e:82:f7:94:61:5a:31:cf:32:64:7a:82:f3:e3:76:9d: db:81:8b:64:a1:c8:00:b8:63:d0:72:3e:b2:60:b5:9e:ae:a7: c7:d2:b4:e2:f5:de:d4:24:62:7b:1a:1c:24:bc:70:af:80:87: 36:34:8b:fb:f2:3e:a9:8b:5a:23:50:26:4d:a1:9e:9b:97:57: e6:4e:87:e0:eb:9a:5f:41:fb:5e:fe:b5:94:34:c8:30:4e:50: e9:3e:42:2f:73:3a:a4:7a:c4:d0:c0:40:88:76:06:96:06:63: a5:f7:5f:ba:01:38:ce:35:55:0f:cb:fd:6d:42:14:ec:47:d9: 49:c3:fc:ae:67:5b:8c:32:4e:a3:f9:3d:a6:57:24:62:cc:b2: 80:51:93:3c:34:4c:8a:79:3e:ae:23:3a:37:aa:3f:cf:ce:b8: 69:bd:25:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsOQVOtolDi9plF/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2QwZDVkMzMtNmYyOS00Yjg2LWFlMGItMzZhZjhlMmMxZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/iFvkBA642lXq9rK5plZVDp0UKw//5F104w n8IkdEB5xrHuDBlgujFbbDcqS7Gnux8jXSO7OUn+agLWF0ah0NKhOQvarzXxAXdo nK/YHWh1urrl65T5jLjNAwlWd0ZJ+RljVidZDdme8lek9A81P6kckIW/pd++0HWR i+KezwJq8KgWe/6BkqTmFWFfyUxdLttweFZm3KycM/QgcUIpUwwcab+oElbydXmK aEQm/KU9T04iGNZOT37UMiOve6962MHWRALJeRw96rdObmjL7B6ilmZqTXPx+6dE K2pszpU+yghjNuFVXJor6CFxPicWoBwQiUrElrg66idrTOHL/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtgcqZGOZeJRQdHyoAsBvaAc0j8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvM2FiYjcxNDMtOTk5Ni0z MmUyLWE5YzktNWJjN2EyYzY3NzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABATVEmsX99o5iPP3Wb8xJXM4cvPtyzUFg230JA0iml2qbanYNGI aFELHYADvMRdpEiJOdxkNGjy6YpCuG/zdCtC6+sU/OKf1zH445z/b9yXq67+CfLe yhkU0eYfXoL3lGFaMc8yZHqC8+N2nduBi2ShyAC4Y9ByPrJgtZ6up8fStOL13tQk YnsaHCS8cK+AhzY0i/vyPqmLWiNQJk2hnpuXV+ZOh+Drml9B+17+tZQ0yDBOUOk+ Qi9zOqR6xNDAQIh2BpYGY6X3X7oBOM41VQ/L/W1CFOxH2UnD/K5nW4wyTqP5PaZX JGLMsoBRkzw0TIp5Pq4jOjeqP8/OuGm9JbY= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:55 2025 by rpki-client