$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa File: cde4ef19-0ad5-390d-95c9-95ab139449fd.roa (raw, json) Hash identifier: 3klQtW0nH1S8tetJDpMYk2dwFak39o4qqDBF5acRY7A= Subject key identifier: 17:A6:91:FB:3B:BA:FA:A2:74:0C:D9:39:2E:6E:41:C3:0D:85:CE:44 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B5571E00B03672C026927B600 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 30238 IP address blocks: 2620:101:2012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e0:0b:03:67:2c:02:69:27:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=59b08ddd-1f13-4431-9601-57d6b69322f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:3c:61:30:5a:e8:1f:41:ae:c8:7e:48:b8: 0b:15:47:fb:35:56:48:5e:a0:ea:d9:91:a4:18:69: 9e:c5:04:63:8b:e3:92:57:46:f1:eb:32:f9:0e:03: 8e:5d:20:da:44:25:ac:6a:a2:e3:22:7a:36:5f:3d: 4b:10:b5:9e:57:e9:99:44:fe:d8:76:75:ef:48:ba: d8:a8:22:b8:85:f9:c4:8d:a8:4b:1e:bb:a7:70:ec: fa:00:67:b9:8f:49:a9:7f:fe:8f:f3:e0:30:02:42: 85:73:41:b8:c1:9f:b1:cc:e0:4a:16:93:bb:89:06: ea:b4:45:80:1c:36:51:95:94:d7:16:5d:42:de:8f: 1f:25:ec:80:54:79:40:9d:e4:ee:e0:15:31:32:a7: bf:c5:bb:92:93:4f:2e:7d:71:97:5f:4a:78:00:a0: 49:a2:04:df:20:99:0d:42:e1:73:3e:67:f9:13:6a: b0:6e:c5:22:22:3a:51:29:9b:fb:d8:39:0e:32:43: b8:8f:17:46:79:54:6b:fc:ac:7d:80:c9:cb:a1:6c: 01:2d:c4:c6:29:1e:94:3b:f1:a6:95:d3:57:7c:5e: 25:8b:0f:6b:41:58:06:90:64:0d:7c:df:6e:d8:16: a3:79:dc:3d:7d:0f:ba:58:18:b0:6c:9b:7b:11:d2: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A6:91:FB:3B:BA:FA:A2:74:0C:D9:39:2E:6E:41:C3:0D:85:CE:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/cde4ef19-0ad5-390d-95c9-95ab139449fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:2012::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:28:a8:ae:24:05:20:a8:f7:ee:2a:41:5c:a0:36:7f:24:90: be:ad:dd:bb:e1:01:1f:d5:aa:e6:cd:0e:c6:02:30:b3:4a:0f: 86:0e:94:7f:d8:1f:1d:63:f3:b2:21:c8:d9:7f:7b:d2:b0:88: 95:e5:d2:ec:d7:61:4c:fa:ec:54:af:f1:c3:58:3c:e9:ee:e8: 7a:aa:fb:91:f9:d4:06:ec:89:c4:6d:ec:64:ec:10:a6:5d:8d: f1:e8:36:c0:9d:36:66:0c:fd:2a:2b:8b:1e:4b:84:d5:79:c9: 71:60:df:13:d6:78:fd:bc:b0:e1:84:4d:3b:65:88:e0:a5:2d: 04:ae:1c:ce:65:db:ff:dc:04:91:18:52:6f:b8:57:52:75:7f: 73:7d:89:bc:c9:62:cc:e1:27:a3:59:14:bb:cb:62:19:76:19: 5a:e6:5f:cd:9e:e1:b9:85:ef:99:d5:d1:3f:0e:3b:63:b7:0e: f5:28:aa:19:d2:53:de:31:cb:47:44:b5:29:90:11:62:b3:45: 06:77:4f:2b:47:fd:c2:a4:e5:7f:f9:09:40:8c:fa:46:33:19: 82:15:32:3e:18:31:53:2a:e4:b2:b6:15:70:65:c1:8c:7d:69: 32:36:55:8b:d7:a5:6d:ee:b7:d4:bb:59:f5:7c:02:e6:0b:1c: 7d:70:3d:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtVceALA2csAmkntgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NTliMDhkZGQtMWYxMy00NDMxLTk2MDEtNTdkNmI2OTMyMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtg8YTBa6B9Brsh+SLgLFUf7NVZIXqDq2ZGk GGmexQRji+OSV0bx6zL5DgOOXSDaRCWsaqLjIno2Xz1LELWeV+mZRP7YdnXvSLrY qCK4hfnEjahLHruncOz6AGe5j0mpf/6P8+AwAkKFc0G4wZ+xzOBKFpO7iQbqtEWA HDZRlZTXFl1C3o8fJeyAVHlAneTu4BUxMqe/xbuSk08ufXGXX0p4AKBJogTfIJkN QuFzPmf5E2qwbsUiIjpRKZv72DkOMkO4jxdGeVRr/Kx9gMnLoWwBLcTGKR6UO/Gm ldNXfF4liw9rQVgGkGQNfN9u2Bajedw9fQ+6WBiwbJt7EdK68QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBemkfs7uvqidAzZOS5uQcMNhc5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvY2RlNGVmMTktMGFkNS0z OTBkLTk1YzktOTVhYjEzOTQ0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwoqK4kBSCo9+4qQVygNn8kkL6t3bvhAR/VqubNDsYCMLNKD4YO lH/YHx1j87IhyNl/e9KwiJXl0uzXYUz67FSv8cNYPOnu6Hqq+5H51AbsicRt7GTs EKZdjfHoNsCdNmYM/Sorix5LhNV5yXFg3xPWeP28sOGETTtliOClLQSuHM5l2//c BJEYUm+4V1J1f3N9ibzJYszhJ6NZFLvLYhl2GVrmX82e4bmF75nV0T8OO2O3DvUo qhnSU94xy0dEtSmQEWKzRQZ3TytH/cKk5X/5CUCM+kYzGYIVMj4YMVMq5LK2FXBl wYx9aTI2VYvXpW3ut9S7WfV8AuYLHH1wPc4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:43 2025 by rpki-client