$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa File: 89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa (raw, json) Hash identifier: PB9E85JEi/llVH9LvYlqndvS1fJFUZJYhY57GSAnDhE= Subject key identifier: 74:26:04:77:BE:45:87:CA:B6:C7:6F:CD:E9:23:33:51:8E:A4:11:20 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584AA85BA3CDACD1740D0B883B00 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14717 IP address blocks: 2607:fd90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a3:cd:ac:d1:74:0d:0b:88:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=e9c5a280-b6ca-49a8-be1c-9f0128cdaf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:63:d8:e5:90:b6:b4:76:34:61:9a:23:6d: 1b:19:0a:d3:1d:68:86:2c:a2:f3:6e:53:0d:1c:93: 0b:8f:0a:c5:df:e3:72:7a:51:e1:22:c0:d3:79:34: 61:a0:42:8d:bb:67:64:e0:c4:93:63:aa:3b:c7:a3: e0:a6:a8:e3:1d:82:3e:f2:3d:97:61:cc:c4:d5:06: f9:99:47:7c:b2:9d:e6:c7:05:33:ac:06:64:bd:0d: 8e:ef:1c:e0:39:c3:08:fd:a5:6f:47:a0:e1:68:ad: 8c:16:16:db:cb:0a:9e:f4:f3:28:0c:e2:74:5d:c6: 8e:91:25:ad:b6:ec:a0:ef:bd:13:2c:05:da:33:1e: 25:55:cf:11:d5:75:9c:b8:aa:5a:40:2f:8b:0f:03: d0:c0:c0:6d:7b:d7:72:d1:85:9f:17:35:f6:fd:09: 09:be:5e:e9:1e:43:c0:8b:99:67:fd:7e:19:3d:bf: ea:ea:e2:3b:37:9b:ed:aa:18:13:74:1d:de:f8:6a: d7:32:ea:86:d9:16:4a:cf:c5:e4:03:a6:44:c2:35: f1:9c:4b:c7:60:47:d7:18:da:f8:f6:69:0e:36:c5: 82:2d:a5:5d:5d:d1:a1:2d:1f:b0:56:84:45:bf:5d: 9d:50:72:62:65:c6:be:5e:7a:fa:70:b4:31:f2:08: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:04:77:BE:45:87:CA:B6:C7:6F:CD:E9:23:33:51:8E:A4:11:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd90::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9b:16:67:81:da:fc:2d:f8:07:09:01:9b:8e:a4:13:e8:4d: 84:09:7e:61:f4:67:21:a3:67:d9:83:f0:0c:9c:8c:2e:ff:fd: 43:4e:d2:56:2b:26:e0:96:75:9e:df:c9:89:81:75:1c:9d:61: 90:5f:fe:e3:cd:16:77:c4:33:fe:68:be:b5:2f:d6:58:60:85: a8:7d:f8:3b:fb:3c:90:d7:4f:0d:75:e9:92:89:a0:e3:f4:f8: c6:30:9a:ee:35:6e:94:16:cb:40:d7:6d:9a:65:0c:5b:2f:ff: c8:fa:35:35:04:7a:3f:89:bb:8f:3e:7e:9e:bc:24:b7:94:6a: 4e:b5:a1:6f:7a:ff:15:1a:24:c1:52:df:54:65:44:99:25:ab: 83:be:e1:14:3b:61:04:00:d9:39:2d:03:06:e0:50:fe:87:d5: 13:b6:1f:83:10:28:0d:bf:66:55:7f:a5:96:1c:ec:4d:38:70: c9:95:21:9e:ba:df:31:91:3b:09:14:c7:84:d7:d5:79:ae:8b: dd:aa:7d:01:d2:4c:78:28:c5:0c:f1:d5:91:64:2e:45:9f:1f: 4d:46:f8:30:7f:59:11:c5:db:7f:b0:bc:87:57:b5:96:85:7a: 0a:37:9b:ed:7c:10:18:b1:07:0a:28:f1:60:ba:84:67:9d:35: 98:da:7f:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqoW6PNrNF0DQuIOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZTljNWEyODAtYjZjYS00OWE4LWJlMWMtOWYwMTI4Y2RhZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifZj2OWQtrR2NGGaI20bGQrTHWiGLKLzblMN HJMLjwrF3+NyelHhIsDTeTRhoEKNu2dk4MSTY6o7x6PgpqjjHYI+8j2XYczE1Qb5 mUd8sp3mxwUzrAZkvQ2O7xzgOcMI/aVvR6DhaK2MFhbbywqe9PMoDOJ0XcaOkSWt tuyg770TLAXaMx4lVc8R1XWcuKpaQC+LDwPQwMBte9dy0YWfFzX2/QkJvl7pHkPA i5ln/X4ZPb/q6uI7N5vtqhgTdB3e+GrXMuqG2RZKz8XkA6ZEwjXxnEvHYEfXGNr4 9mkONsWCLaVdXdGhLR+wVoRFv12dUHJiZca+Xnr6cLQx8girmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHQmBHe+RYfKtsdvzekjM1GOpBEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvODljZWI3M2MtYjNmNy0z Y2YzLWE3MDctYTU4MWU1M2FmZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJmxZngdr8LfgHCQGbjqQT6E2ECX5h9Gcho2fZg/AMnIwu//1DTtJW KybglnWe38mJgXUcnWGQX/7jzRZ3xDP+aL61L9ZYYIWoffg7+zyQ108NdemSiaDj 9PjGMJruNW6UFstA122aZQxbL//I+jU1BHo/ibuPPn6evCS3lGpOtaFvev8VGiTB Ut9UZUSZJauDvuEUO2EEANk5LQMG4FD+h9UTth+DECgNv2ZVf6WWHOxNOHDJlSGe ut8xkTsJFMeE19V5rovdqn0B0kx4KMUM8dWRZC5Fnx9NRvgwf1kRxdt/sLyHV7WW hXoKN5vtfBAYsQcKKPFguoRnnTWY2n8k -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:46 2025 by rpki-client