$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa File: fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa (raw, json) Hash identifier: BtAH4OXoy2ujlVDflq2DOO368hnc35oQRlV/a+aALBw= Subject key identifier: D7:F7:E3:90:FD:AA:61:E7:F7:18:9E:0D:CB:29:1B:6F:4B:4E:D6:2A Certificate issuer: /CN=5a6a0d9b-43c3-4b62-be66-8371865622a2 Certificate serial: 010D0C9F4328584ADD666375B14A1E2F41012C00 Authority key identifier: 76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 1299 IP address blocks: 45.62.224.0/19 maxlen: 24 206.168.69.0/24 maxlen: 24 209.71.0.0/19 maxlen: 24 216.36.192.0/19 maxlen: 24 2607:3940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:63:75:b1:4a:1e:2f:41:01:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=2919a9ef-fcb8-4507-b7e7-ad7fffbb039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:d7:64:56:eb:47:87:dc:17:95:5a:87:4d: b4:25:fd:29:ac:80:0f:65:71:42:a9:db:9d:09:8b: 53:77:cd:fa:ac:0a:ac:4d:02:56:97:3a:d7:70:38: 00:1a:29:96:64:fc:36:80:19:55:4e:0c:9d:57:69: d5:e0:d9:a7:43:ae:9b:e9:38:4c:99:2c:22:3e:c0: 48:ce:b6:d6:ab:fa:1a:a3:3e:e3:c4:5a:d4:aa:d9: 11:2e:b0:d6:ec:9d:92:86:a6:4c:e2:06:ce:78:c2: de:18:08:30:66:35:9d:03:f2:9f:ad:1c:ab:c6:10: d8:b1:3b:01:de:80:a2:aa:f1:93:89:a2:30:50:3b: c0:16:83:ea:68:51:15:58:72:2f:65:5b:16:4b:7c: d5:24:d4:ca:8b:55:04:92:b9:e1:3a:ab:e1:14:b1: a9:aa:6a:eb:d6:79:e4:42:ac:52:77:04:22:dd:b1: 58:82:82:e4:52:a2:3b:50:1b:f4:76:24:0f:50:33: db:01:11:b2:57:ef:97:2f:6b:f1:b3:f0:7e:d9:dd: 4f:68:37:01:b4:f8:4e:fc:c9:60:0d:0e:e8:92:44: db:56:0b:f3:d8:3b:d9:0c:1c:9b:02:c7:2a:30:75: 40:68:71:bc:ca:b0:d5:3a:5d:98:59:33:02:d7:e8: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F7:E3:90:FD:AA:61:E7:F7:18:9E:0D:CB:29:1B:6F:4B:4E:D6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl X509v3 Authority Key Identifier: keyid:76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer sbgp-ipAddrBlock: critical IPv4: 45.62.224.0/19 206.168.69.0/24 209.71.0.0/19 216.36.192.0/19 IPv6: 2607:3940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f7:42:bf:e3:85:86:cd:36:e2:b2:96:a4:2a:cc:66:b7:c6: 59:73:dd:04:4a:34:2e:c3:be:cd:d8:62:15:59:83:a2:69:8e: e7:9b:26:79:21:b6:d2:1f:f6:cc:81:33:a8:a2:14:8c:c3:4b: c1:22:29:83:78:f1:f3:ec:ff:84:f8:25:67:d6:be:98:e0:fb: 8e:2f:28:49:ee:81:33:e6:28:cd:21:70:d7:2d:d7:fe:c7:fa: 7b:ee:eb:3c:be:6a:3e:46:96:12:a7:6d:30:c7:79:b7:bd:aa: f0:c0:15:a7:93:33:74:1e:e7:65:68:ab:1a:fa:a6:e6:98:2b: fa:00:13:41:7d:88:cb:51:21:c2:37:ce:02:3e:6f:63:36:d0: b9:9a:20:af:f0:ff:cc:51:63:4a:2f:15:ba:12:5e:67:02:85: a1:3b:b6:39:58:92:84:ab:ed:f9:de:83:72:0e:f4:47:3f:e6: 01:62:b8:24:f8:0b:26:6c:e1:f8:42:67:f5:28:25:fe:86:b4: f3:a5:4f:d0:db:b2:14:fe:7e:22:23:45:f0:7e:93:b6:26:2a: 87:92:5a:ef:b3:8b:28:f9:df:12:f9:8a:12:c6:f6:62:92:5d: 62:ab:b5:62:b3:94:5a:76:12:f0:b6:88:34:1e:c3:7d:c9:fe: c2:b6:be:13 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWErdZmN1sUoeL0EBLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE2YTBkOWItNDNjMy00YjYyLWJlNjYtODM3MTg2NTYy MmEyMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MjkxOWE5ZWYtZmNiOC00NTA3LWI3ZTctYWQ3ZmZmYmIwMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzzXZFbrR4fcF5Vah020Jf0prIAPZXFCqdud CYtTd836rAqsTQJWlzrXcDgAGimWZPw2gBlVTgydV2nV4NmnQ66b6ThMmSwiPsBI zrbWq/oaoz7jxFrUqtkRLrDW7J2ShqZM4gbOeMLeGAgwZjWdA/KfrRyrxhDYsTsB 3oCiqvGTiaIwUDvAFoPqaFEVWHIvZVsWS3zVJNTKi1UEkrnhOqvhFLGpqmrr1nnk QqxSdwQi3bFYgoLkUqI7UBv0diQPUDPbARGyV++XL2vxs/B+2d1PaDcBtPhO/Mlg DQ7okkTbVgvz2DvZDBybAscqMHVAaHG8yrDVOl2YWTMC1+hQgQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFNf345D9qmHn9xieDcspG29LTtYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTZh MGQ5Yi00M2MzLTRiNjItYmU2Ni04MzcxODY1NjIyYTIvZmNlNTRlYWUtM2ZlNC0z ZjhlLTg3ZGUtZTBjZjBkNWY2ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE2YTBkOWItNDNjMy00YjYyLWJl NjYtODM3MTg2NTYyMmEyLzVhNmEwZDliLTQzYzMtNGI2Mi1iZTY2LTgzNzE4NjU2 MjJhMi5jcmwwHwYDVR0jBBgwFoAUdgtKP+Qaj/Eid83MOR4Oe1+q8aYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTZhMGQ5Yi00M2MzLTRiNjItYmU2Ni04Mzcx ODY1NjIyYTIuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFLT7gAwQA zqhFAwQF0UcAAwQF2CTAMA0EAgACMAcDBQAmBzlAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEL3Qr/jhYbN NuKylqQqzGa3xllz3QRKNC7Dvs3YYhVZg6JpjuebJnkhttIf9syBM6iiFIzDS8Ei KYN48fPs/4T4JWfWvpjg+44vKEnugTPmKM0hcNct1/7H+nvu6zy+aj5GlhKnbTDH ebe9qvDAFaeTM3Qe52Voqxr6puaYK/oAE0F9iMtRIcI3zgI+b2M20LmaIK/w/8xR Y0ovFboSXmcChaE7tjlYkoSr7fneg3IO9Ec/5gFiuCT4CyZs4fhCZ/UoJf6GtPOl T9DbshT+fiIjRfB+k7YmKoeSWu+ziyj53xL5ihLG9mKSXWKrtWKzlFp2EvC2iDQe w33J/sK2vhM= -----END CERTIFICATE-----Generated at Sun Aug 24 01:09:47 2025 by rpki-client