$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: Uir1xJ19fg1eQTWgcKWDHcPsHb6UxUneanbs78qz4zQ= Subject key identifier: 59:9B:5E:72:AF:7A:57:7A:65:6A:A9:6A:87:CE:62:22:04:B5:0B:AC Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584B0B76B486B19C9FBD49F0BB00 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b4:86:b1:9c:9f:bd:49:f0:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=1ea3a4ab-7bdb-4d7d-8eb2-9160c7c59393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:fd:f6:17:72:ad:e3:88:c4:4e:9b:25:1e: 5b:15:68:c6:fb:05:d3:84:ae:7b:14:77:c8:9f:86: ae:d4:68:fe:87:50:80:00:04:e9:be:b3:e5:49:c1: de:67:71:1a:0f:52:7c:87:1d:bc:20:08:d8:3b:c2: 19:39:ed:39:dd:ad:d3:1d:a3:11:33:77:45:51:67: ca:2e:b1:d6:78:eb:f0:5f:d3:12:87:73:63:0e:c3: 9a:10:f3:b9:14:6e:77:7c:3e:93:e6:32:17:f7:1e: 5d:7d:85:9b:65:57:ad:17:3c:70:5f:44:2f:8f:d2: 78:f5:c0:19:dd:d1:be:42:7b:81:3d:33:ef:2d:e6: 79:8e:29:9a:2a:59:4f:a5:87:db:a0:51:7f:36:bd: da:ea:c0:9a:74:c4:30:c9:0b:60:51:6a:1e:ae:15: 15:29:3b:5e:2a:50:c2:78:dd:e4:89:1e:73:65:4a: 2d:3e:49:bc:21:e2:b4:b5:76:8a:ae:0a:fc:83:9a: d0:f1:a0:12:ff:28:7a:9c:9a:23:0e:0c:62:b5:6c: a9:68:73:de:e7:bc:ea:69:80:36:c8:c4:54:fb:b9: 99:31:48:d2:e4:48:7f:a8:06:19:ed:5c:4e:ec:0f: 69:52:3b:3f:ce:02:71:87:25:9d:30:30:e3:0b:79: 40:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:5E:72:AF:7A:57:7A:65:6A:A9:6A:87:CE:62:22:04:B5:0B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d9:30:c6:b4:de:c1:89:4c:14:fb:09:23:83:d1:09:34:8e: b4:54:35:5e:92:63:61:d7:d6:01:0f:e9:82:45:ee:f4:9f:15: 32:0d:ad:5a:b2:61:08:ae:5b:54:44:96:6e:c6:92:24:71:2e: 71:bb:b1:f5:90:72:ad:d9:8b:29:65:81:90:28:90:c2:d0:a0: 89:1b:27:9b:e6:71:18:a7:24:63:5a:6e:0f:06:52:9d:0d:4b: 55:b3:44:9e:1d:e5:d3:e0:6f:2d:fe:86:3d:b0:47:55:93:5e: b6:7d:7c:dd:a9:8c:f0:4f:20:89:3a:d1:e2:8c:c8:51:e3:f7: 12:c9:5f:76:20:63:22:d0:d9:9b:31:1b:c2:d0:e7:14:e4:c1: 1b:df:14:40:ed:6c:fa:fa:32:f1:44:5a:60:f2:7a:93:87:e0: 65:66:b3:7a:57:c0:b8:1b:46:de:8a:76:91:3e:5f:6b:f9:08: 0a:c6:2c:71:98:a5:fe:31:6a:4d:84:47:b1:07:5d:9f:29:2b: 59:e0:66:42:c2:5b:40:ac:26:04:7b:14:aa:e9:0b:97:0c:f2: 2a:67:29:ac:81:f3:df:8c:40:83:5a:75:07:d6:ce:d2:0a:c8: a6:18:8e:e0:81:0e:67:00:b0:44:dc:1c:44:26:ff:61:10:dc: 76:72:52:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdrSGsZyfvUnwuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MWVhM2E0YWItN2JkYi00ZDdkLThlYjItOTE2MGM3YzU5MzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsab99hdyreOIxE6bJR5bFWjG+wXThK57FHfI n4au1Gj+h1CAAATpvrPlScHeZ3EaD1J8hx28IAjYO8IZOe053a3THaMRM3dFUWfK LrHWeOvwX9MSh3NjDsOaEPO5FG53fD6T5jIX9x5dfYWbZVetFzxwX0Qvj9J49cAZ 3dG+QnuBPTPvLeZ5jimaKllPpYfboFF/Nr3a6sCadMQwyQtgUWoerhUVKTteKlDC eN3kiR5zZUotPkm8IeK0tXaKrgr8g5rQ8aAS/yh6nJojDgxitWypaHPe57zqaYA2 yMRU+7mZMUjS5Eh/qAYZ7VxO7A9pUjs/zgJxhyWdMDDjC3lAFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmbXnKveld6ZWqpaofOYiIEtQusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBe2TDGtN7BiUwU+wkjg9EJNI60VDVekmNh19YBD+mCRe70nxUyDa1a smEIrltURJZuxpIkcS5xu7H1kHKt2YspZYGQKJDC0KCJGyeb5nEYpyRjWm4PBlKd DUtVs0SeHeXT4G8t/oY9sEdVk162fXzdqYzwTyCJOtHijMhR4/cSyV92IGMi0Nmb MRvC0OcU5MEb3xRA7Wz6+jLxRFpg8nqTh+BlZrN6V8C4G0beinaRPl9r+QgKxixx mKX+MWpNhEexB12fKStZ4GZCwltArCYEexSq6QuXDPIqZymsgfPfjECDWnUH1s7S CsimGI7ggQ5nALBE3BxEJv9hENx2clJk -----END CERTIFICATE-----Generated at Tue Oct 21 03:02:59 2025 by rpki-client