$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa File: ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa (raw, json) Hash identifier: 0isiXNt6AerFBJhTuHgHGxACIm6FITp5ZkIVrEmXINY= Subject key identifier: 7A:4E:8F:D6:6E:D3:3C:BE:10:20:68:DD:1E:0B:3C:1A:A5:35:D1:C6 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584AECC1313C4FC6B85E2B3AD380 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 7721 IP address blocks: 2602:fbda:600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:31:3c:4f:c6:b8:5e:2b:3a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4ab9d20f-0b84-4f42-aba1-5c0fcb05208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:23:1a:b3:ad:10:ab:ac:de:16:bf:c2:61: 05:62:64:9f:4c:24:e0:79:34:34:fc:63:8b:50:17: 2d:f8:a7:8f:70:98:b1:f8:a2:3d:95:ad:89:9c:47: fb:7d:46:c7:d6:be:95:ed:c0:b0:a8:46:f0:7f:e9: de:32:9a:ea:28:b2:c4:72:74:e7:27:58:b6:52:a0: 2b:7d:f0:50:64:79:86:06:eb:bc:b5:00:0c:d2:a6: 15:4a:42:58:a1:8e:ac:85:69:f2:55:38:ef:85:85: 29:e8:e0:4f:5b:e9:57:88:15:82:8e:37:e7:50:0f: ab:f3:63:6d:c4:51:62:55:79:1d:05:e9:4e:a4:f9: aa:08:c9:aa:23:ca:52:07:4d:bc:60:84:c3:39:a1: 62:f3:15:44:ef:d1:e4:b2:45:a9:ff:5c:d4:fd:25: 09:9f:86:f3:ef:75:b0:de:b7:f9:fb:5d:4c:e3:55: b4:d7:b3:99:4e:71:29:82:4f:25:0d:ea:62:48:0a: ef:33:f5:40:f6:8f:5c:9d:6c:1e:54:c7:29:12:3c: b4:04:30:89:27:c7:f1:7f:10:a1:97:5c:80:80:df: 97:12:a3:32:1d:66:e1:1a:29:1b:7c:3c:dc:d4:0a: db:42:35:a2:c5:f6:87:95:00:f9:aa:cc:2b:61:e9: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4E:8F:D6:6E:D3:3C:BE:10:20:68:DD:1E:0B:3C:1A:A5:35:D1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/ca778a16-4f4c-3d8e-9d79-9485a1c7ecd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbda:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cb:17:b7:6b:ef:59:67:9b:8e:ea:44:0b:e5:5b:0b:eb:2d: 9d:28:75:11:f2:93:dc:e0:09:c2:8e:00:13:de:dd:ff:df:38: 78:74:b5:7b:81:b3:c0:2c:b4:e4:3c:8e:fc:5b:bb:24:14:dd: 38:8b:4e:f0:ef:50:84:76:2b:c1:39:5a:20:b1:19:85:20:c8: 65:a5:92:a2:f3:25:a5:49:ee:09:a5:12:40:ac:df:22:7b:c7: 9f:0b:3e:07:be:95:f1:c9:8b:42:0f:ed:27:40:a4:2e:13:82: e1:ea:e2:f3:29:a1:86:bb:9f:50:51:a0:5f:86:f3:24:49:08: 63:9b:87:c8:c0:d8:df:69:ec:3e:46:8f:76:01:1b:3b:77:7b: 83:5c:62:ed:8d:4b:3d:a9:a2:37:ed:61:33:ad:10:7c:dd:0a: 5b:e9:9d:d0:88:2b:39:6c:58:c3:04:1f:f8:1d:22:79:b1:4a: 31:f3:09:b8:7e:d3:f4:3b:99:f3:32:cd:e3:e5:c9:bf:66:a0: 95:d6:a8:c8:36:4a:b3:0c:d2:60:56:3f:ec:8d:ef:9a:0d:19: db:bb:3f:e0:a1:a6:bd:f4:20:c8:75:96:50:df:90:f8:fb:5c: e0:49:b0:0b:cd:41:2c:88:0a:27:f8:21:22:57:e4:66:57:fd: 9c:a5:ab:91 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErswTE8T8a4Xis604AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGFiOWQyMGYtMGI4NC00ZjQyLWFiYTEtNWMwZmNiMDUyMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviojGrOtEKus3ha/wmEFYmSfTCTgeTQ0/GOL UBct+KePcJix+KI9la2JnEf7fUbH1r6V7cCwqEbwf+neMprqKLLEcnTnJ1i2UqAr ffBQZHmGBuu8tQAM0qYVSkJYoY6shWnyVTjvhYUp6OBPW+lXiBWCjjfnUA+r82Nt xFFiVXkdBelOpPmqCMmqI8pSB028YITDOaFi8xVE79HkskWp/1zU/SUJn4bz73Ww 3rf5+11M41W017OZTnEpgk8lDepiSArvM/VA9o9cnWweVMcpEjy0BDCJJ8fxfxCh l1yAgN+XEqMyHWbhGikbfDzc1ArbQjWixfaHlQD5qswrYekKjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHpOj9Zu0zy+ECBo3R4LPBqlNdHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2E3NzhhMTYtNGY0Yy0z ZDhlLTlkNzktOTQ4NWExYzdlY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL72gYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARcsXt2vvWWebjupEC+VbC+stnSh1EfKT3OAJwo4AE97d/984eHS1 e4GzwCy05DyO/Fu7JBTdOItO8O9QhHYrwTlaILEZhSDIZaWSovMlpUnuCaUSQKzf InvHnws+B76V8cmLQg/tJ0CkLhOC4eri8ymhhrufUFGgX4bzJEkIY5uHyMDY32ns PkaPdgEbO3d7g1xi7Y1LPamiN+1hM60QfN0KW+md0IgrOWxYwwQf+B0iebFKMfMJ uH7T9DuZ8zLN4+XJv2agldaoyDZKswzSYFY/7I3vmg0Z27s/4KGmvfQgyHWWUN+Q +Ptc4EmwC81BLIgKJ/ghIlfkZlf9nKWrkQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:46 2025 by rpki-client