$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa File: b8eafb21-360c-3a19-bb7e-88d44624594b.roa (raw, json) Hash identifier: J2Xm0eAeCbUjkzUIS2iQDAgaMbySgbhx9heHoP6iYQw= Subject key identifier: 23:91:86:90:51:1C:8C:AF:12:71:F1:B8:62:E4:A8:64:8A:22:EF:89 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584EE7BCBAFFDB1514F5A8DA9600 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30238 IP address blocks: 2620:101:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ba:ff:db:15:14:f5:a8:da:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=ce782840-7e37-491d-8945-3f4f708399f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:3b:d4:38:63:6b:67:24:8c:9b:39:f0:6d: 1f:61:fb:08:91:fe:b4:29:ae:9c:41:28:5d:61:f5: 7a:dd:ae:be:a7:81:a4:97:ec:75:af:09:a3:c9:14: d3:b9:55:2f:4d:c8:0c:79:93:9c:d0:60:73:6d:bf: b9:6b:66:2c:08:98:d4:27:0c:5f:8f:72:46:d5:d0: e4:45:c3:62:26:0c:bc:08:80:f9:0b:d6:03:ac:53: 79:dc:84:ad:0f:5f:7b:ea:93:de:c8:5b:58:1c:07: 50:ba:03:91:b4:a1:61:00:aa:ee:d0:20:50:4e:bf: eb:72:60:4a:35:8c:50:a9:42:a7:c6:ce:81:88:56: c4:e7:29:30:12:8e:18:4f:d2:36:48:bf:32:f2:a9: b9:07:7c:ed:9a:57:09:20:48:46:05:3c:36:3e:df: cf:33:1f:ec:20:c4:4e:66:2a:3e:e6:5c:66:40:f0: 27:16:dc:c3:41:e6:6a:1b:49:10:d6:bf:ff:9c:fc: 64:2a:67:24:85:6c:75:4e:b5:c8:cf:88:71:64:ac: 5b:26:5e:0b:7b:5e:03:ca:d0:eb:1f:d6:18:3b:b0: 7b:a3:ab:e3:9e:ff:1f:1b:18:30:d5:65:79:9d:f7: 91:b2:7d:98:2a:a6:11:e4:23:85:f9:1d:54:72:fc: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:91:86:90:51:1C:8C:AF:12:71:F1:B8:62:E4:A8:64:8A:22:EF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:90:44:b9:fe:4e:e9:f8:8e:6c:f2:68:ce:97:be:b8:d2:20: 73:5d:84:46:fd:ed:5a:d1:b9:ec:94:60:6c:03:fc:2b:5a:3d: a8:3d:fb:56:cc:08:e5:3a:15:a0:36:ce:8d:37:80:9e:47:13: 3c:04:31:54:47:98:bb:71:9d:bc:0f:60:02:fd:ea:0c:36:60: 36:1e:ed:d2:9e:b6:4c:3a:14:da:b7:c2:58:a1:c7:47:cb:6b: cd:be:0a:27:81:0d:0a:94:a7:06:a3:f0:22:e9:44:54:ea:be: 1f:85:ba:75:e0:64:f5:04:57:58:f3:0e:85:d5:7c:a2:6f:58: b0:4b:57:8d:ec:ce:a2:7e:17:2a:16:49:26:8d:a0:a4:a3:ac: ee:05:a2:7c:c2:74:9a:20:48:13:95:f3:9a:ee:93:e8:b3:4e: e8:12:6b:ea:67:98:3a:56:f5:ac:cd:5c:30:4a:23:f5:44:38: a5:de:aa:c4:93:00:3c:57:b5:9d:1e:0e:66:01:4f:e9:5b:62: 10:29:a1:73:9e:ce:00:15:71:6e:34:9b:9d:e8:f1:a4:af:bb: 5e:fa:60:c5:b5:7b:75:53:46:c2:8d:32:97:c7:14:fe:da:0e: af:ea:2f:08:64:c5:a7:ab:13:5b:e5:af:9e:c2:e5:bc:22:cb: 38:89:d3:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7nvLr/2xUU9ajalgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2U3ODI4NDAtN2UzNy00OTFkLTg5NDUtM2Y0ZjcwODM5OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCY71Dhja2ckjJs58G0fYfsIkf60Ka6cQShd YfV63a6+p4Gkl+x1rwmjyRTTuVUvTcgMeZOc0GBzbb+5a2YsCJjUJwxfj3JG1dDk RcNiJgy8CID5C9YDrFN53IStD1976pPeyFtYHAdQugORtKFhAKru0CBQTr/rcmBK NYxQqUKnxs6BiFbE5ykwEo4YT9I2SL8y8qm5B3ztmlcJIEhGBTw2Pt/PMx/sIMRO Zio+5lxmQPAnFtzDQeZqG0kQ1r//nPxkKmckhWx1TrXIz4hxZKxbJl4Le14DytDr H9YYO7B7o6vjnv8fGxgw1WV5nfeRsn2YKqYR5COF+R1UcvxyAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCORhpBRHIyvEnHxuGLkqGSKIu+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjhlYWZiMjEtMzYwYy0z YTE5LWJiN2UtODhkNDQ2MjQ1OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKuQRLn+Tun4jmzyaM6XvrjSIHNdhEb97VrRueyUYGwD/CtaPag9 +1bMCOU6FaA2zo03gJ5HEzwEMVRHmLtxnbwPYAL96gw2YDYe7dKetkw6FNq3wlih x0fLa82+CieBDQqUpwaj8CLpRFTqvh+FunXgZPUEV1jzDoXVfKJvWLBLV43szqJ+ FyoWSSaNoKSjrO4FonzCdJogSBOV85ruk+izTugSa+pnmDpW9azNXDBKI/VEOKXe qsSTADxXtZ0eDmYBT+lbYhApoXOezgAVcW40m53o8aSvu176YMW1e3VTRsKNMpfH FP7aDq/qLwhkxaerE1vlr57C5bwiyziJ03U= -----END CERTIFICATE-----Generated at Sat Sep 12 14:26:50 2026 by rpki-client