$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa File: b8eafb21-360c-3a19-bb7e-88d44624594b.roa (raw, json) Hash identifier: 0LDctRLDdsBKMADs4pdgTygmLnW4CNaZImRWitwGHmE= Subject key identifier: 27:BE:96:74:3C:1D:1E:09:15:5A:85:18:06:4B:7D:48:4F:45:B4:72 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584AC2E1072DF8E4DE43A42CA740 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30238 IP address blocks: 2620:101:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:07:2d:f8:e4:de:43:a4:2c:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=2d96180d-4a3d-4666-ad2c-6c341e1cb3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:6f:65:03:47:ca:6f:61:31:8d:83:bc:ef: 74:24:d5:c7:9b:ce:e6:04:f9:87:17:ed:09:07:76: de:ff:82:41:40:2f:3e:d4:d2:8c:c5:54:e0:0e:d2: 9c:46:2b:df:88:d6:a4:56:c1:b4:df:5d:6d:cd:4f: e9:74:ac:c9:84:43:73:5b:01:51:c8:be:d4:a6:a3: ad:81:9a:d1:bb:2c:17:4a:e1:60:04:c2:40:bc:c0: 80:cf:70:e7:67:5d:67:3b:11:63:2b:d9:e1:1c:d9: 51:63:b4:48:16:72:a3:8b:3b:a5:5e:9e:4b:ee:d9: 44:71:44:73:b6:b3:29:f4:5e:da:35:25:b3:bf:03: cd:57:93:a5:b0:a5:90:bd:74:2a:3f:69:83:d0:f0: 49:9f:06:ad:40:d3:4d:6c:02:bf:17:57:85:c9:2f: ab:a2:ad:5b:d4:c6:40:f9:b1:bb:94:52:d3:22:9d: 82:aa:db:2f:7b:17:60:55:53:c7:70:d9:dd:30:c9: 96:b0:92:07:b7:65:10:fd:ee:64:83:8d:c1:15:b6: 3a:16:56:e3:6f:29:fd:9a:1a:4b:95:7f:7e:88:dd: 2f:68:a4:eb:86:8c:c8:2e:f6:8a:ad:21:ba:47:d7: 31:01:f7:a2:98:e3:08:3b:9d:13:e3:2f:30:f2:d3: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:96:74:3C:1D:1E:09:15:5A:85:18:06:4B:7D:48:4F:45:B4:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b0:ca:93:52:02:b1:08:25:2e:eb:7e:03:04:9c:cf:8f:b2: ce:e4:80:9e:0e:f5:57:dc:b5:ab:ce:85:ea:1a:c3:af:12:14: de:da:12:15:ab:a9:19:f5:7b:c9:fb:b7:35:5d:23:2b:db:e4: 0d:3a:05:cc:b9:59:ba:ec:fe:02:23:9e:c4:b2:0d:7f:22:15: 66:39:bd:65:f2:a1:bc:48:bc:ec:0e:dd:2e:a9:62:61:10:c7: 7a:06:34:a6:5d:b8:93:68:4d:c4:33:59:57:9c:bd:38:29:9e: b8:58:f3:70:2a:85:ad:0b:cd:18:3d:94:eb:14:f5:60:0d:25: 09:12:63:69:81:04:2e:ff:82:cd:ab:9f:9d:31:eb:8c:7b:a3: 86:e7:d6:de:96:7d:37:4f:bd:ef:33:e9:5a:42:5c:86:22:86: ae:ad:ec:5e:56:99:36:c7:c6:16:24:a8:a9:07:10:30:28:d4: 1f:b9:c1:72:7e:ae:d2:bf:f7:1d:2b:51:c1:74:ff:b7:44:94: 31:68:a9:3a:96:2e:4e:0d:4d:6f:fc:d6:de:cc:1a:a5:5a:3c: b1:8d:75:62:7e:21:8d:91:3d:98:10:79:64:20:6e:6d:a9:17: 30:dc:66:a1:de:60:cd:48:5d:5b:14:eb:d5:f1:de:17:98:07: ea:9b:73:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4Qct+OTeQ6Qsp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmQ5NjE4MGQtNGEzZC00NjY2LWFkMmMtNmMzNDFlMWNiM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqhvZQNHym9hMY2DvO90JNXHm87mBPmHF+0J B3be/4JBQC8+1NKMxVTgDtKcRivfiNakVsG0311tzU/pdKzJhENzWwFRyL7UpqOt gZrRuywXSuFgBMJAvMCAz3DnZ11nOxFjK9nhHNlRY7RIFnKjizulXp5L7tlEcURz trMp9F7aNSWzvwPNV5OlsKWQvXQqP2mD0PBJnwatQNNNbAK/F1eFyS+roq1b1MZA +bG7lFLTIp2CqtsvexdgVVPHcNndMMmWsJIHt2UQ/e5kg43BFbY6Flbjbyn9mhpL lX9+iN0vaKTrhozILvaKrSG6R9cxAfeimOMIO50T4y8w8tN4kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCe+lnQ8HR4JFVqFGAZLfUhPRbRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjhlYWZiMjEtMzYwYy0z YTE5LWJiN2UtODhkNDQ2MjQ1OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOwypNSArEIJS7rfgMEnM+Pss7kgJ4O9VfctavOheoaw68SFN7a EhWrqRn1e8n7tzVdIyvb5A06Bcy5Wbrs/gIjnsSyDX8iFWY5vWXyobxIvOwO3S6p YmEQx3oGNKZduJNoTcQzWVecvTgpnrhY83Aqha0LzRg9lOsU9WANJQkSY2mBBC7/ gs2rn50x64x7o4bn1t6WfTdPve8z6VpCXIYihq6t7F5WmTbHxhYkqKkHEDAo1B+5 wXJ+rtK/9x0rUcF0/7dElDFoqTqWLk4NTW/81t7MGqVaPLGNdWJ+IY2RPZgQeWQg bm2pFzDcZqHeYM1IXVsU69Xx3heYB+qbc/U= -----END CERTIFICATE-----Generated at Sun Aug 24 04:21:58 2025 by rpki-client