$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa File: 557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa (raw, json) Hash identifier: 5LsSmXY7VbdZ1iLZ2whmYd1eTYFEnR0DQas79uTSF2M= Subject key identifier: 0C:92:80:8F:07:04:67:8B:53:8E:CF:BC:81:0D:4A:C6:45:EE:B1:26 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B1F017658A6F51ABDF3A8B2E0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16417 IP address blocks: 2620:101:200c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:76:58:a6:f5:1a:bd:f3:a8:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=05d8e7e3-ad5c-4e4a-abea-2b742b678f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:76:2f:3d:f3:84:84:c4:95:82:2a:33:e6: 64:e9:72:75:a8:2f:fc:ce:7b:24:7f:1a:ab:d6:eb: 00:83:00:5d:5b:7f:03:9d:3f:63:9e:d1:77:b3:54: e1:a5:e0:23:4b:67:63:78:c0:45:67:a4:8e:07:c5: 4a:e1:ee:bf:1f:bd:81:33:26:cc:92:39:c2:6d:3e: d2:1a:33:c9:09:ce:d7:8a:2b:38:52:ef:80:95:8f: ed:39:58:85:a6:0c:aa:73:7f:00:17:6e:c2:d5:58: b5:c9:16:77:2b:92:c1:a7:0a:01:8d:b2:98:4c:39: ad:2a:d1:c0:cc:16:dc:42:df:de:5f:63:4d:3b:1d: 07:30:23:13:29:08:9b:ab:d2:d0:ef:d0:ad:bb:b0: 20:0a:f3:f7:d8:49:5a:2f:39:e3:7f:c3:e4:de:5d: 7d:87:78:25:6f:e6:02:15:f1:46:f9:95:31:5d:d1: bd:13:25:49:27:d8:0a:6f:45:58:eb:3b:96:68:41: eb:9c:9e:b3:58:35:3c:8d:13:e3:71:f1:11:96:5b: de:a2:19:c2:55:82:63:f8:17:30:c0:36:b2:81:4e: a9:69:75:b7:a2:01:39:fd:a0:b4:26:e5:5b:e6:9f: c9:4e:c6:31:b1:39:c7:b8:cc:ca:e8:5a:d8:15:90: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:80:8F:07:04:67:8B:53:8E:CF:BC:81:0D:4A:C6:45:EE:B1:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/557dbdc0-f0ba-3acc-8972-3be50d73ecc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:200c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:24:77:3e:65:61:32:01:20:82:f1:42:85:25:52:3c:1c:82: a1:db:5b:26:e4:15:1c:b9:bc:bf:8c:46:e1:61:5f:5d:80:36: 44:0a:cb:f2:b3:85:8c:ed:e6:22:4d:7d:96:d6:86:27:ca:94: 25:a8:d2:93:21:cd:5a:ef:3c:de:cf:c7:ef:00:94:16:e2:02: 21:94:fb:d5:5e:57:df:55:d6:7b:7e:af:d1:34:e7:a9:33:08: e8:2a:6f:c2:fe:5f:25:22:80:7f:4e:55:e5:98:4c:b5:e5:58: 7c:45:3f:ed:e2:ed:67:48:94:39:1b:c1:ba:18:4c:bc:1a:5e: 82:2b:28:2b:6c:b5:1c:d2:90:dd:fe:17:35:60:fb:d4:45:b1: a5:d8:af:9f:21:8b:00:cb:f3:bf:36:75:69:00:d6:59:d3:1d: a0:a6:2f:46:85:47:bd:1b:a0:ed:21:80:51:4f:c8:33:5c:60: a8:dc:a7:29:ee:b0:3d:2e:1c:2c:0a:a1:b9:66:3a:f8:e1:04: 9c:86:98:5b:1f:ce:20:54:c5:59:af:4f:73:44:fb:ed:17:a3: 20:4b:6a:9b:8c:a0:83:93:a0:b6:42:a9:80:de:9c:3c:cf:dc: c5:72:04:1d:0b:e8:4e:37:e8:50:8c:64:d6:70:79:42:63:8b: 3a:69:1a:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAXZYpvUavfOosuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDVkOGU3ZTMtYWQ1Yy00ZTRhLWFiZWEtMmI3NDJiNjc4ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRd2Lz3zhITElYIqM+Zk6XJ1qC/8znskfxqr 1usAgwBdW38DnT9jntF3s1ThpeAjS2djeMBFZ6SOB8VK4e6/H72BMybMkjnCbT7S GjPJCc7Xiis4Uu+AlY/tOViFpgyqc38AF27C1Vi1yRZ3K5LBpwoBjbKYTDmtKtHA zBbcQt/eX2NNOx0HMCMTKQibq9LQ79Ctu7AgCvP32ElaLznjf8Pk3l19h3glb+YC FfFG+ZUxXdG9EyVJJ9gKb0VY6zuWaEHrnJ6zWDU8jRPjcfERllveohnCVYJj+Bcw wDaygU6paXW3ogE5/aC0JuVb5p/JTsYxsTnHuMzK6FrYFZCdfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAySgI8HBGeLU47PvIENSsZF7rEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNTU3ZGJkYzAtZjBiYS0z YWNjLTg5NzItM2JlNTBkNzNlY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMkdz5lYTIBIILxQoUlUjwcgqHbWybkFRy5vL+MRuFhX12ANkQK y/KzhYzt5iJNfZbWhifKlCWo0pMhzVrvPN7Px+8AlBbiAiGU+9VeV99V1nt+r9E0 56kzCOgqb8L+XyUigH9OVeWYTLXlWHxFP+3i7WdIlDkbwboYTLwaXoIrKCtstRzS kN3+FzVg+9RFsaXYr58hiwDL8782dWkA1lnTHaCmL0aFR70boO0hgFFPyDNcYKjc pynusD0uHCwKoblmOvjhBJyGmFsfziBUxVmvT3NE++0XoyBLapuMoIOToLZCqYDe nDzP3MVyBB0L6E436FCMZNZweUJjizppGik= -----END CERTIFICATE-----Generated at Tue Sep 16 02:32:26 2025 by rpki-client