$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa File: d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa (raw, json) Hash identifier: I5YeU8CfrTg+PcpP2/Obv2QvNX9wQIqD4HReuFxaSZI= Subject key identifier: 4E:11:F2:EA:9C:7C:29:29:60:D2:AD:36:70:BF:66:8E:5F:91:50:DA Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B5571DCE08FEA1A011DEEEC80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 30238 IP address blocks: 2620:101:200a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:dc:e0:8f:ea:1a:01:1d:ee:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=a88ef17f-fb4a-44c0-ab51-a5a0e4caa3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:27:b2:eb:06:7f:84:22:64:a7:e4:bf:b1: f2:1d:16:8d:de:ed:7b:9e:5d:e2:e1:e6:d5:b5:78: cf:42:7c:e4:d8:43:10:da:75:b9:86:9e:8e:25:30: 3f:0f:25:a4:ef:36:ce:f5:0d:17:3f:c7:42:18:c2: a5:9f:1e:d5:7c:a0:b7:cd:7c:aa:15:fa:7d:d0:dd: 8d:25:b9:01:72:98:9d:e4:de:8a:cc:aa:e3:2a:b5: e9:91:49:34:e3:cb:54:9d:d3:c8:86:e2:b8:d1:1b: 1c:fd:01:3c:3d:3d:0a:de:66:a6:84:ec:09:c4:c0: 04:9a:6b:dd:f7:83:04:e4:3e:9d:88:92:58:24:f6: 83:f0:15:93:87:6a:a1:d7:81:22:9e:9e:e8:d9:88: a9:d5:f2:b7:75:7b:2a:98:82:ab:2a:41:e5:95:5b: bb:8a:07:51:7d:62:78:4f:7e:dd:6b:f9:67:cf:6f: b9:05:51:91:7c:68:bd:3d:1e:54:26:00:29:dc:6d: 2a:f5:05:c6:98:f9:4a:9d:f4:75:9c:81:cb:fb:2b: e7:16:04:19:08:da:ef:60:24:ea:21:8c:b1:02:93: fc:0a:6c:12:6c:63:e9:d7:d9:10:8a:e3:60:a9:45: 82:a9:d9:71:e8:6d:fd:60:16:ee:b0:08:d1:9d:31: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:11:F2:EA:9C:7C:29:29:60:D2:AD:36:70:BF:66:8E:5F:91:50:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:200a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:40:d2:62:87:48:02:f0:73:31:82:c4:0f:bb:1c:67:fb:53: 6f:0d:8c:90:64:5d:be:a3:ec:d9:37:06:56:b8:cd:12:70:20: 64:51:b0:6e:30:ea:df:5b:9c:89:73:5c:d5:35:37:19:dd:5a: 1e:78:e4:a7:d9:36:4b:7c:03:61:07:e3:f9:c0:b8:01:a1:87: 9b:27:38:83:a3:8c:0f:a9:d7:3a:c5:84:a8:44:41:4a:50:50: 40:11:ca:fa:68:2e:a8:e0:f4:85:14:70:0d:0e:c7:12:b1:34: 1d:64:c8:55:06:53:22:49:2a:ce:14:0b:a6:de:e6:e7:ef:60: 3b:19:ad:9f:3c:00:97:95:8a:98:de:ba:95:4a:f6:ae:07:ed: aa:96:3a:77:2e:3e:fd:1e:65:dd:a8:fc:35:47:80:78:56:2c: 71:5b:27:73:25:ea:c3:c5:60:4c:97:04:e4:5b:98:1f:67:80: a2:97:ff:fe:26:e0:af:28:1d:d1:cc:06:3e:a2:67:21:53:1d: 05:85:ba:79:f2:9c:93:94:96:53:59:bf:a8:87:40:10:47:24: c8:8c:20:68:1b:46:88:4c:7e:68:33:48:f7:98:f5:c8:78:40: 56:3a:fe:06:4c:9d:0e:7f:fb:bc:01:96:8f:4f:ec:54:15:90: 28:9c:44:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVcdzgj+oaAR3u7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YTg4ZWYxN2YtZmI0YS00NGMwLWFiNTEtYTVhMGU0Y2FhM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO0nsusGf4QiZKfkv7HyHRaN3u17nl3i4ebV tXjPQnzk2EMQ2nW5hp6OJTA/DyWk7zbO9Q0XP8dCGMKlnx7VfKC3zXyqFfp90N2N JbkBcpid5N6KzKrjKrXpkUk048tUndPIhuK40Rsc/QE8PT0K3mamhOwJxMAEmmvd 94ME5D6diJJYJPaD8BWTh2qh14Einp7o2Yip1fK3dXsqmIKrKkHllVu7igdRfWJ4 T37da/lnz2+5BVGRfGi9PR5UJgAp3G0q9QXGmPlKnfR1nIHL+yvnFgQZCNrvYCTq IYyxApP8CmwSbGPp19kQiuNgqUWCqdlx6G39YBbusAjRnTHiBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4R8uqcfCkpYNKtNnC/Zo5fkVDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZDI2Yjc2ZTktM2JkMi0z NzQ1LTliYzQtNjhlNTdmYmMyMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtA0mKHSALwczGCxA+7HGf7U28NjJBkXb6j7Nk3Bla4zRJwIGRR sG4w6t9bnIlzXNU1NxndWh545KfZNkt8A2EH4/nAuAGhh5snOIOjjA+p1zrFhKhE QUpQUEARyvpoLqjg9IUUcA0OxxKxNB1kyFUGUyJJKs4UC6be5ufvYDsZrZ88AJeV ipjeupVK9q4H7aqWOncuPv0eZd2o/DVHgHhWLHFbJ3Ml6sPFYEyXBORbmB9ngKKX //4m4K8oHdHMBj6iZyFTHQWFunnynJOUllNZv6iHQBBHJMiMIGgbRohMfmgzSPeY 9ch4QFY6/gZMnQ5/+7wBlo9P7FQVkCicRCQ= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:39 2025 by rpki-client