$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa File: fbc8e6f0-2262-360a-a336-aea533a7162a.roa (raw, json) Hash identifier: djKCtSBW7VKAyo5QQz+rSSrR5jjBDgptb6qoPHQC660= Subject key identifier: 4E:90:7E:79:F9:05:33:61:D7:4B:3E:18:4E:34:46:6D:0E:E7:48:99 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584AE196685BAB4BA19DCF908800 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 855 IP address blocks: 2001:4c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:68:5b:ab:4b:a1:9d:cf:90:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=a37ca1db-ca20-4b18-aee3-daca26524d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:45:6d:ed:1f:d1:62:64:1c:4e:74:2d:c3: bc:09:4b:4f:47:73:b6:7d:cc:a7:78:98:d2:d1:d2: 3a:75:ce:8b:7a:7f:56:05:96:3f:ae:70:66:a6:ab: ad:50:23:3b:a2:d3:cf:e3:c5:5f:26:2f:a7:29:59: 55:e2:db:62:f6:47:63:a9:4d:46:93:a0:ac:42:3f: b0:97:ce:9a:0c:55:e3:bc:90:c0:c7:ab:52:ae:cc: 2d:0b:1c:a7:d5:f9:52:4e:34:cb:20:0e:cd:fa:12: 2b:52:85:98:7a:00:cf:22:2d:4d:e0:cf:b6:45:b8: 5d:59:12:d2:66:8a:d6:aa:ab:b3:78:2c:84:42:ff: 7f:e5:d7:41:90:3d:eb:1f:e3:a6:57:fc:68:ed:38: 6e:38:3e:fa:ed:20:06:41:42:6f:02:fc:80:a1:22: 01:a9:bc:07:75:aa:92:d3:eb:4f:b2:47:09:ca:e9: d9:cf:26:97:9e:95:58:57:b8:1a:d5:2c:d4:80:35: 5b:3c:2c:23:8f:8f:12:a1:c0:23:b5:b0:0e:23:6d: 22:86:5d:cb:be:33:39:35:e7:f6:0a:df:b4:0a:b7: f4:3e:21:ac:3b:07:4b:51:27:32:7a:72:a5:95:10: e5:19:72:69:f9:aa:2b:59:95:7f:5a:f1:92:20:15: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:7E:79:F9:05:33:61:D7:4B:3E:18:4E:34:46:6D:0E:E7:48:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fbc8e6f0-2262-360a-a336-aea533a7162a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv6: 2001:4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0b:17:6a:b7:cb:29:06:f2:ca:e5:f9:59:0f:be:57:a9:51: 1f:28:19:1f:52:b8:4a:e3:89:e7:b8:6a:68:23:f9:e9:eb:97: 03:2a:ed:aa:a3:c9:c8:28:30:fe:15:de:6f:f4:d2:e8:64:74: ca:d7:0e:e3:4a:d0:fc:ba:02:64:85:72:f1:6b:f4:65:9f:72: 5b:b3:68:67:db:43:5d:ed:19:7e:17:8b:96:67:52:00:8f:0e: 86:47:74:9a:51:65:f0:f2:50:c5:d2:6b:7e:1d:66:5a:b8:f6: 6f:99:8f:0c:e8:80:86:98:aa:ca:4d:cc:4c:3d:19:31:31:3a: 14:98:bc:d3:b3:78:64:3d:04:29:c7:65:63:5d:a7:85:4f:7b: 29:dd:f8:9d:09:80:fc:08:73:c5:96:92:bd:65:05:0d:d3:b5: d2:4b:30:54:0b:ef:82:94:92:3b:b1:af:9b:9c:89:d4:77:00: 36:f0:df:d5:c2:c8:6a:69:6e:8a:a9:f5:fa:95:74:9e:5a:1d: b3:ac:b4:c5:2b:37:f6:bb:99:8c:01:fc:4a:91:d1:9e:df:65: f9:0d:24:b0:8a:25:94:59:ff:83:25:8c:37:64:c0:fc:da:f3: e6:c7:e2:65:1f:5e:61:c7:a2:b6:06:eb:f8:c5:ef:d0:89:05: cc:cb:7d:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhlmhbq0uhnc+QiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YTM3Y2ExZGItY2EyMC00YjE4LWFlZTMtZGFjYTI2NTI0ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzRFbe0f0WJkHE50LcO8CUtPR3O2fcyneJjS 0dI6dc6Len9WBZY/rnBmpqutUCM7otPP48VfJi+nKVlV4tti9kdjqU1Gk6CsQj+w l86aDFXjvJDAx6tSrswtCxyn1flSTjTLIA7N+hIrUoWYegDPIi1N4M+2RbhdWRLS ZorWqquzeCyEQv9/5ddBkD3rH+OmV/xo7ThuOD767SAGQUJvAvyAoSIBqbwHdaqS 0+tPskcJyunZzyaXnpVYV7ga1SzUgDVbPCwjj48SocAjtbAOI20ihl3LvjM5Nef2 Ct+0Crf0PiGsOwdLUScyenKllRDlGXJp+aorWZV/WvGSIBUQJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE6Qfnn5BTNh10s+GE40Rm0O50iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZmJjOGU2ZjAtMjI2Mi0z NjBhLWEzMzYtYWVhNTMzYTcxNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRCxdqt8spBvLK5flZD75XqVEfKBkfUrhK44nnuGpoI/np65cDKu2q o8nIKDD+Fd5v9NLoZHTK1w7jStD8ugJkhXLxa/Rln3Jbs2hn20Nd7Rl+F4uWZ1IA jw6GR3SaUWXw8lDF0mt+HWZauPZvmY8M6ICGmKrKTcxMPRkxMToUmLzTs3hkPQQp x2VjXaeFT3sp3fidCYD8CHPFlpK9ZQUN07XSSzBUC++ClJI7sa+bnInUdwA28N/V wshqaW6KqfX6lXSeWh2zrLTFKzf2u5mMAfxKkdGe32X5DSSwiiWUWf+DJYw3ZMD8 2vPmx+JlH15hx6K2Buv4xe/QiQXMy30o -----END CERTIFICATE-----Generated at Sun Aug 24 09:00:01 2025 by rpki-client