$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa File: b8eafb21-360c-3a19-bb7e-88d44624594b.roa (raw, json) Hash identifier: KQ8WMwHGIM/vC34PS2zPETbOHBgwvRfGT8n0V+ICRhA= Subject key identifier: 54:E9:D8:10:59:E3:A3:DA:10:E5:19:ED:BC:C4:CA:70:5F:07:C0:E1 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584BA39D230BCEE1514EB06F0E80 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30238 IP address blocks: 2620:101:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:23:0b:ce:e1:51:4e:b0:6f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=549a2595-01d6-48b6-8a43-24228febc2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:7c:59:cf:da:3e:42:97:1e:8e:98:05:1f: 4b:47:ed:2c:21:94:56:c7:8d:51:3a:f1:58:eb:37: a8:36:43:4f:79:26:76:94:49:8f:08:31:31:12:f4: 6b:21:5e:68:2d:07:ad:ed:5b:f7:da:e4:72:f5:d8: d2:68:24:7c:f6:a2:aa:51:05:a1:9e:39:9d:68:54: e4:af:75:03:cd:bd:41:f9:d3:3d:48:c3:ba:20:c4: 4a:7a:72:f6:22:35:d0:29:e1:fe:1a:38:c7:f7:c8: 1c:75:55:b8:0c:eb:f0:d2:f8:bc:30:be:22:02:99: 85:e0:f4:1d:14:55:ef:6c:bc:9c:2d:de:54:b3:ec: 41:c2:7c:f8:dc:dc:8e:44:a1:42:36:a0:8b:0b:34: 3f:5f:ff:cf:1b:e8:c5:77:da:27:32:ae:43:dc:e8: 1f:f9:65:28:38:33:19:04:70:39:4c:92:32:f2:a3: 84:7c:49:e4:40:26:df:37:bd:80:fb:af:98:40:34: 4a:3d:b7:80:a9:db:4d:d0:4c:0c:68:af:5c:4f:8f: a4:64:0b:a2:e4:87:13:85:6d:2f:79:70:18:29:14: fd:d8:08:ff:08:fa:04:ae:4d:ab:1c:0d:0c:0e:55: 04:0a:ca:4b:c8:fc:a6:d0:3c:47:dc:63:95:57:fd: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:D8:10:59:E3:A3:DA:10:E5:19:ED:BC:C4:CA:70:5F:07:C0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/b8eafb21-360c-3a19-bb7e-88d44624594b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b0:bc:6b:2b:af:0a:13:0a:98:df:5d:12:e6:28:95:5d:12: a4:9b:70:6e:4a:3a:34:02:50:60:39:61:f1:59:b5:d4:6c:c1: 97:c2:16:f2:ff:ba:1a:59:b1:22:4a:ec:33:a3:cb:90:dc:42: b2:60:14:38:33:f5:b7:22:44:0d:d4:39:61:e9:1f:56:26:58: 29:c9:5b:ba:cd:5a:12:1d:e0:d9:dc:4b:d7:b1:0b:ab:7a:6b: cd:c9:ba:96:fb:68:da:11:ff:b9:7a:4b:27:51:4d:46:db:a4: 79:b6:c2:fa:d4:7e:03:5a:63:0a:6b:70:87:ef:d3:d9:cb:8b: ff:c0:d3:8c:89:5a:90:59:69:5f:70:e2:c6:b5:78:b2:f3:92: 49:69:ce:9d:7e:4b:d0:22:36:be:5a:28:f8:cb:86:d3:af:31: 72:f0:87:67:b1:3d:9c:4d:57:47:14:f8:0a:b2:ba:db:fe:d3: c1:3d:e0:97:3d:87:b3:a4:06:9d:39:a6:c4:45:ea:ea:46:f7: 74:83:d6:ff:2a:19:ac:0d:6c:11:cc:af:f3:52:0f:98:be:62: 02:6a:af:b0:a7:27:43:0c:83:f6:d0:3e:84:33:7c:c7:9c:1d: 7e:d9:40:e8:64:16:5a:59:0e:8f:18:48:38:d4:14:fd:b9:f8: 43:73:42:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEujnSMLzuFRTrBvDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTQ5YTI1OTUtMDFkNi00OGI2LThhNDMtMjQyMjhmZWJjMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt18Wc/aPkKXHo6YBR9LR+0sIZRWx41ROvFY 6zeoNkNPeSZ2lEmPCDExEvRrIV5oLQet7Vv32uRy9djSaCR89qKqUQWhnjmdaFTk r3UDzb1B+dM9SMO6IMRKenL2IjXQKeH+GjjH98gcdVW4DOvw0vi8ML4iApmF4PQd FFXvbLycLd5Us+xBwnz43NyORKFCNqCLCzQ/X//PG+jFd9onMq5D3Ogf+WUoODMZ BHA5TJIy8qOEfEnkQCbfN72A+6+YQDRKPbeAqdtN0EwMaK9cT4+kZAui5IcThW0v eXAYKRT92Aj/CPoErk2rHA0MDlUECspLyPym0DxH3GOVV/3tuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFTp2BBZ46PaEOUZ7bzEynBfB8DhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvYjhlYWZiMjEtMzYwYy0z YTE5LWJiN2UtODhkNDQ2MjQ1OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHuwvGsrrwoTCpjfXRLmKJVdEqSbcG5KOjQCUGA5YfFZtdRswZfC FvL/uhpZsSJK7DOjy5DcQrJgFDgz9bciRA3UOWHpH1YmWCnJW7rNWhId4NncS9ex C6t6a83Jupb7aNoR/7l6SydRTUbbpHm2wvrUfgNaYwprcIfv09nLi//A04yJWpBZ aV9w4sa1eLLzkklpzp1+S9AiNr5aKPjLhtOvMXLwh2exPZxNV0cU+Aqyutv+08E9 4Jc9h7OkBp05psRF6upG93SD1v8qGawNbBHMr/NSD5i+YgJqr7CnJ0MMg/bQPoQz fMecHX7ZQOhkFlpZDo8YSDjUFP25+ENzQqA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:42 2025 by rpki-client