$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa File: a3882799-952b-3088-babc-d21c9fdf0685.roa (raw, json) Hash identifier: QFWCOgv5SLwfuqx6DOe8OA9+wr588s39XEt3zUNn0N0= Subject key identifier: AA:60:9E:6F:C7:D8:3E:BB:A4:FB:32:58:B2:51:E9:BC:63:4D:C6:99 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584AF2568683FD28A5FE434C2FA0 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 29854 IP address blocks: 2607:fc98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:86:83:fd:28:a5:fe:43:4c:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d8af577e-9be2-4c7c-b9f1-901932b899fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:4c:0e:e4:46:65:c6:42:db:c6:05:cd:01: 8e:a3:48:2d:60:85:9b:21:3d:12:4f:a9:c3:66:77: 42:24:83:f0:af:d8:a9:b5:59:8f:75:86:30:a9:82: 99:4c:d3:1d:6c:a8:0a:2f:40:3e:60:76:56:f1:ed: 06:eb:f4:b7:e4:c1:3d:e6:b8:ed:0d:0e:6a:6b:ef: 9f:53:9e:44:d9:73:0b:64:2b:26:2b:a7:2b:7e:a5: 1c:81:fc:c5:31:32:9a:c9:bf:de:d6:6f:0a:9e:b4: fa:64:61:19:ad:88:a3:a7:ac:ac:a2:2f:28:07:10: 78:10:40:2c:64:f4:0c:fa:82:28:65:7a:b1:b5:7b: 32:40:70:4b:af:02:62:ed:0d:b8:3e:03:60:9b:8f: f3:f8:44:73:d8:4c:8f:f0:a6:e7:5f:03:09:33:b2: 0e:95:82:2d:e9:56:95:79:fa:bf:d0:a9:74:a9:94: 66:f8:1a:9b:2d:eb:f2:aa:ea:45:c6:62:32:7c:64: ab:42:bb:4e:1e:15:c8:0e:2d:d2:fc:5d:f6:02:f8: c3:f2:c5:77:f5:06:a3:02:34:07:ae:df:49:dc:a9: e5:69:66:a7:d4:24:f4:d4:d5:67:ce:4f:eb:ad:58: dd:a8:c0:c7:ae:75:75:de:63:79:44:62:fe:94:f0: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:60:9E:6F:C7:D8:3E:BB:A4:FB:32:58:B2:51:E9:BC:63:4D:C6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv6: 2607:fc98::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c7:7d:20:b3:51:e2:46:41:81:73:95:0a:a6:ca:b0:16:4b: 3a:a5:42:99:ce:5f:83:e5:0f:5e:1b:f8:bf:05:46:c0:51:14: 07:e0:d6:97:1d:e4:fd:5d:c8:ed:a1:ca:1e:7c:aa:da:7d:3c: a0:a4:a8:93:f9:c9:2a:42:51:29:ba:7b:35:86:65:c1:76:0b: 17:6e:a7:65:f2:5c:81:7c:cb:ed:1c:93:8c:d4:7f:01:82:69: f4:88:9f:06:b0:c0:5e:2b:4b:ef:c3:8f:59:4b:4f:fb:88:5e: 2e:c3:fc:66:79:2d:98:54:05:85:bc:9e:f1:77:00:13:43:66: 57:cb:b6:6f:42:9e:0a:8c:6c:72:f0:bf:c7:36:3e:cb:01:dc: 92:51:6e:1a:4d:8d:87:c0:53:3f:d5:dd:9b:23:07:79:fc:38: 13:28:72:4f:73:76:d5:4b:fe:01:b9:25:bf:35:1d:bb:42:5c: 9d:29:ab:55:54:15:67:28:17:e0:4f:a4:a3:ec:f0:f2:fe:6b: c0:5f:a3:df:fe:86:5d:59:3b:f7:08:cf:c9:32:03:7e:58:89: 07:92:80:23:6c:b0:dc:50:c6:b5:56:d8:04:09:36:79:6d:8e: 21:c2:c0:48:4f:70:8e:84:31:67:fe:a6:77:fd:dd:20:0d:97: f5:dd:11:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEryVoaD/Sil/kNML6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDhhZjU3N2UtOWJlMi00YzdjLWI5ZjEtOTAxOTMyYjg5OWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjZMDuRGZcZC28YFzQGOo0gtYIWbIT0ST6nD ZndCJIPwr9iptVmPdYYwqYKZTNMdbKgKL0A+YHZW8e0G6/S35ME95rjtDQ5qa++f U55E2XMLZCsmK6crfqUcgfzFMTKayb/e1m8KnrT6ZGEZrYijp6ysoi8oBxB4EEAs ZPQM+oIoZXqxtXsyQHBLrwJi7Q24PgNgm4/z+ERz2EyP8KbnXwMJM7IOlYIt6VaV efq/0Kl0qZRm+BqbLevyqupFxmIyfGSrQrtOHhXIDi3S/F32AvjD8sV39QajAjQH rt9J3KnlaWan1CT01NVnzk/rrVjdqMDHrnV13mN5RGL+lPA2VQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKpgnm/H2D67pPsyWLJR6bxjTcaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvYTM4ODI3OTktOTUyYi0z MDg4LWJhYmMtZDIxYzlmZGYwNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8mDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApx30gs1HiRkGBc5UKpsqwFks6pUKZzl+D5Q9eG/i/BUbAURQH4NaX HeT9XcjtocoefKrafTygpKiT+ckqQlEpuns1hmXBdgsXbqdl8lyBfMvtHJOM1H8B gmn0iJ8GsMBeK0vvw49ZS0/7iF4uw/xmeS2YVAWFvJ7xdwATQ2ZXy7ZvQp4KjGxy 8L/HNj7LAdySUW4aTY2HwFM/1d2bIwd5/DgTKHJPc3bVS/4BuSW/NR27QlydKatV VBVnKBfgT6Sj7PDy/mvAX6Pf/oZdWTv3CM/JMgN+WIkHkoAjbLDcUMa1VtgECTZ5 bY4hwsBIT3COhDFn/qZ3/d0gDZf13RFe -----END CERTIFICATE-----Generated at Sat Aug 23 18:05:05 2025 by rpki-client