$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa File: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (raw, json) Hash identifier: EkCRGfwfm6LKpLY7kKSg+eoSxSaHyL5rXkCFjGXosy0= Subject key identifier: C1:FF:B6:B4:20:00:A9:ED:E2:0D:6A:BD:FC:5F:A4:83:F9:B2:68:D2 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584B0B76B4A487D7A3F5412FB800 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397501 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b4:a4:87:d7:a3:f5:41:2f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=33e3329b-7db7-40bc-9a9f-2e8ee51134fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:dc:7d:a3:b2:97:41:50:ac:6a:a3:70:16: da:97:08:b9:d3:92:56:23:83:de:90:92:41:12:c2: c0:7c:6f:93:01:73:6a:f0:34:99:77:ee:3d:e4:36: 76:69:cb:fb:7e:a5:12:a6:55:8e:68:e0:c9:c9:2b: fc:70:e5:62:8d:3b:30:06:d7:12:ba:df:96:92:83: 1b:72:97:50:2c:35:b7:d4:d0:c9:29:5e:df:5b:4b: 15:66:93:b0:10:94:8d:c1:a0:e5:0f:1b:89:68:73: ba:ee:98:67:c7:c0:24:2a:fb:4b:f0:7e:cd:be:44: 16:55:ae:ba:aa:4b:45:1d:45:9f:ce:ba:50:1d:4e: 94:b0:ad:88:a5:77:15:33:6c:9f:68:6a:23:3f:e3: 44:1a:10:61:2b:1e:97:0c:b7:b6:74:5a:2e:c9:04: 45:ba:74:9c:8c:8f:86:68:7b:02:62:3d:e1:4e:81: 54:af:01:e2:bb:8e:bc:e7:97:2b:98:a9:7f:4e:84: 61:01:d6:dc:2e:c4:00:3c:3e:9f:b3:04:ed:a4:d1: 32:1d:d1:be:f7:5e:6c:5e:c1:4d:8d:d3:34:6b:b7: 3c:58:4c:89:c6:a4:a8:23:e4:33:3d:12:98:e6:2a: d6:c5:e6:89:58:a6:5c:19:20:e3:3f:a6:57:c0:0f: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FF:B6:B4:20:00:A9:ED:E2:0D:6A:BD:FC:5F:A4:83:F9:B2:68:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:09:da:66:04:21:d7:64:36:14:71:80:ba:f3:e9:9b:36:a3: 51:86:b8:32:2f:3b:bf:e0:0b:45:8f:81:91:e3:c1:84:e7:c7: e7:b6:19:23:57:a9:ff:00:de:da:4a:6c:37:ee:e8:a3:a9:00: d8:b0:f1:67:66:bb:87:fb:2e:3e:f5:1c:31:e6:04:f9:58:2a: 76:7d:bb:f5:5d:00:15:83:d3:39:74:3d:96:48:d7:0e:ef:93: 12:0d:b9:e7:51:c0:21:56:45:d2:5e:6c:7b:89:01:cb:1e:15: 00:69:8a:1f:40:98:4d:86:94:e2:e5:6a:77:9b:ed:46:39:d9: 9a:87:1d:34:46:28:d3:71:19:27:ad:48:29:7d:d2:4a:c2:83: 20:e6:79:7a:14:26:be:61:b8:6b:92:cb:61:92:a4:e6:59:c7: 67:44:e4:2f:b9:0f:2b:84:84:1b:1d:71:48:e7:2e:d8:d2:fa: 9b:c9:f2:0f:88:ec:d3:1f:a6:d0:70:96:6a:73:54:3f:74:85: 99:1b:6c:2f:11:9f:f6:70:7b:f0:46:07:38:47:77:43:d6:c0: 50:db:ec:f1:ab:c9:47:7e:48:38:e9:6a:4f:07:e3:79:1b:9f: 44:7f:75:af:b1:4c:81:12:c9:b6:e3:bd:8a:fd:b0:97:35:e5: 4d:06:a3:c4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdrSkh9ej9UEvuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzNlMzMyOWItN2RiNy00MGJjLTlhOWYtMmU4ZWU1MTEzNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiencfaOyl0FQrGqjcBbalwi505JWI4PekJJB EsLAfG+TAXNq8DSZd+495DZ2acv7fqUSplWOaODJySv8cOVijTswBtcSut+WkoMb cpdQLDW31NDJKV7fW0sVZpOwEJSNwaDlDxuJaHO67phnx8AkKvtL8H7NvkQWVa66 qktFHUWfzrpQHU6UsK2IpXcVM2yfaGojP+NEGhBhKx6XDLe2dFouyQRFunScjI+G aHsCYj3hToFUrwHiu46855crmKl/ToRhAdbcLsQAPD6fswTtpNEyHdG+915sXsFN jdM0a7c8WEyJxqSoI+QzPRKY5irWxeaJWKZcGSDjP6ZXwA+k4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMH/trQgAKnt4g1qvfxfpIP5smjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYjI3YjVmYzUtZjAwYS0z NGFhLWJiNGEtN2EyNDhhYTZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRCdpmBCHXZDYUcYC68+mbNqNRhrgyLzu/4AtFj4GR48GE58fnthkj V6n/AN7aSmw37uijqQDYsPFnZruH+y4+9Rwx5gT5WCp2fbv1XQAVg9M5dD2WSNcO 75MSDbnnUcAhVkXSXmx7iQHLHhUAaYofQJhNhpTi5Wp3m+1GOdmahx00RijTcRkn rUgpfdJKwoMg5nl6FCa+YbhrksthkqTmWcdnROQvuQ8rhIQbHXFI5y7Y0vqbyfIP iOzTH6bQcJZqc1Q/dIWZG2wvEZ/2cHvwRgc4R3dD1sBQ2+zxq8lHfkg46WpPB+N5 G59Ef3WvsUyBEsm2472K/bCXNeVNBqPE -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:34 2025 by rpki-client