$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa File: 59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa (raw, json) Hash identifier: Oms2rgpC9M3fYcGp5L6lNPQfLJm+XBT9nYjkMp3Fkl4= Subject key identifier: 99:5F:B3:AE:B2:DA:91:5F:AB:2E:14:A6:D4:55:A7:F9:DF:DB:89:88 Certificate issuer: /CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Certificate serial: 010D0C9F4328584AF18CD9825A9556791E116A00 Authority key identifier: DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa Signing time: Fri 22 Aug 2025 18:14:22 +0000 ROA not before: Fri 22 Aug 2025 18:14:22 +0000 ROA not after: Thu 20 Nov 2025 19:14:22 +0000 asID: 396973 IP address blocks: 2620:112:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:8c:d9:82:5a:95:56:79:1e:11:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Validity Not Before: Aug 22 18:14:22 2025 GMT Not After : Nov 20 19:14:22 2025 GMT Subject: CN=711dcec7-7bf1-4815-baa0-bc05570835c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:8d:b1:da:49:01:74:41:67:56:e0:a6:85: 06:d7:03:48:e8:78:43:49:f0:0f:d8:7b:0a:e2:47: b5:52:a6:9e:08:9a:25:7a:b8:3c:f9:e5:48:67:4e: e8:df:79:d3:81:93:c8:34:9d:c7:01:ee:50:53:30: c2:45:a8:28:f4:8a:17:fc:f5:6f:56:12:f5:f7:1f: 28:46:39:6b:0c:52:8a:7c:15:d9:a8:d3:91:53:99: 6d:50:1d:06:03:69:1f:54:20:55:04:93:d8:a4:af: e4:39:64:40:c0:06:9f:b7:1a:c9:19:b0:21:2c:21: 8a:03:01:c9:4a:94:af:12:ae:13:9c:85:75:16:8b: a2:e5:d4:e6:90:13:7e:6e:00:55:5c:a5:cc:61:a9: 69:3d:54:cb:38:a1:fe:42:da:ac:36:6a:35:21:c2: c0:4b:c1:d2:03:02:41:6a:b0:1b:6a:7b:af:7c:68: bc:3a:de:d4:98:b5:1c:6b:35:e6:b4:ad:91:05:9c: e4:c0:1a:5b:9b:65:73:bb:2a:e4:41:58:71:ce:ef: c4:7d:14:04:85:09:b6:d7:0d:d3:f7:8c:17:4b:30: 41:5f:b4:99:ed:73:1a:0b:f7:ed:06:b4:a1:80:7a: d0:dd:46:97:95:6f:4f:72:10:be:50:ef:a7:7a:b4: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:B3:AE:B2:DA:91:5F:AB:2E:14:A6:D4:55:A7:F9:DF:DB:89:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl X509v3 Authority Key Identifier: keyid:DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer sbgp-ipAddrBlock: critical IPv6: 2620:112:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:dd:a2:6b:87:34:8d:e6:7b:be:08:08:62:24:b9:19:de:57: 25:ce:2c:c7:15:c3:88:61:23:b1:42:ee:eb:ab:f5:e6:c2:21: a6:f3:46:bf:83:a1:9a:91:24:95:7c:e0:83:d2:1f:96:ef:61: 45:e4:71:a1:52:03:01:b8:a7:b1:63:13:fc:8a:03:36:9e:84: 26:c8:41:e7:05:94:d1:5c:0f:31:4f:e9:0d:87:4a:6f:9e:e0: c8:e6:d5:8c:7e:bb:60:4c:ee:80:be:2f:95:61:45:fa:a6:13: 41:2a:ec:6b:c6:08:72:7d:6e:32:9c:eb:7a:ec:2d:a9:06:37: 85:eb:48:34:8f:5d:2a:51:77:67:54:7e:04:a5:ea:7e:af:9e: b0:be:8e:ac:29:b0:84:7c:a9:eb:a8:5d:60:6a:0e:1a:6c:b0: c4:d3:40:ac:19:d6:81:b8:81:47:71:68:54:85:29:89:80:29: 90:d9:c3:f5:ed:cf:97:78:76:a9:44:23:29:1f:40:ff:72:bf: 1a:e5:26:07:ca:73:05:74:1e:74:03:01:14:90:3f:f6:30:29: 96:5c:fe:d4:dd:79:96:cb:0d:74:d7:ca:4b:f8:ea:4c:89:e5: 28:8e:20:38:a7:2e:e3:57:e6:5b:33:84:a2:62:bc:99:6a:65: 3e:6e:63:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErxjNmCWpVWeR4RagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljOGI2MTYtMWE5NS00YjFhLTg0OGYtZjc1NWZlZDVl MjNkMB4XDTI1MDgyMjE4MTQyMloXDTI1MTEyMDE5MTQyMlowLzEtMCsGA1UEAxMk NzExZGNlYzctN2JmMS00ODE1LWJhYTAtYmMwNTU3MDgzNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArraNsdpJAXRBZ1bgpoUG1wNI6HhDSfAP2HsK 4ke1UqaeCJolerg8+eVIZ07o33nTgZPINJ3HAe5QUzDCRago9IoX/PVvVhL19x8o RjlrDFKKfBXZqNORU5ltUB0GA2kfVCBVBJPYpK/kOWRAwAaftxrJGbAhLCGKAwHJ SpSvEq4TnIV1Foui5dTmkBN+bgBVXKXMYalpPVTLOKH+QtqsNmo1IcLAS8HSAwJB arAbanuvfGi8Ot7UmLUcazXmtK2RBZzkwBpbm2VzuyrkQVhxzu/EfRQEhQm21w3T 94wXSzBBX7SZ7XMaC/ftBrShgHrQ3UaXlW9PchC+UO+nerRU6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJlfs66y2pFfqy4UptRVp/nf24mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4 YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1ZmVkNWUyM2QvNTlmY2Y4Y2MtNjdiOC0z MDlmLWFkMGEtMmVjODA5MzFiODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDljOGI2MTYtMWE5NS00YjFhLTg0 OGYtZjc1NWZlZDVlMjNkLzA5YzhiNjE2LTFhOTUtNGIxYS04NDhmLWY3NTVmZWQ1 ZTIzZC5jcmwwHwYDVR0jBBgwFoAU2pJIOTTSp/2qjQei997CgwpEsyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1 ZmVkNWUyM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABElAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF7domuHNI3me74ICGIkuRneVyXOLMcVw4hhI7FC7uur9ebCIabz Rr+DoZqRJJV84IPSH5bvYUXkcaFSAwG4p7FjE/yKAzaehCbIQecFlNFcDzFP6Q2H Sm+e4Mjm1Yx+u2BM7oC+L5VhRfqmE0Eq7GvGCHJ9bjKc63rsLakGN4XrSDSPXSpR d2dUfgSl6n6vnrC+jqwpsIR8qeuoXWBqDhpssMTTQKwZ1oG4gUdxaFSFKYmAKZDZ w/Xtz5d4dqlEIykfQP9yvxrlJgfKcwV0HnQDARSQP/YwKZZc/tTdeZbLDXTXykv4 6kyJ5SiOIDinLuNX5lszhKJivJlqZT5uYxA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:17 2025 by rpki-client