$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dd32d582-a376-318b-8f9b-b29f59076367.roa File: dd32d582-a376-318b-8f9b-b29f59076367.roa (raw, json) Hash identifier: qT7lCZvSN6dIt6A79yEvVpkrDDgQ0JAt/p+Y3myBTi4= Subject key identifier: D8:96:5B:39:88:B1:73:46:18:63:9E:E8:53:04:2C:80:09:4D:1C:3D Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584B01B1466D81949B6BF7FED880 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dd32d582-a376-318b-8f9b-b29f59076367.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 13445 IP address blocks: 2607:fcf0:2a00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:46:6d:81:94:9b:6b:f7:fe:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=f180dfef-79bf-4171-8a8c-2861dbf13065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:0c:da:7a:f4:62:5d:3a:08:a0:b4:34:fd: 6c:e8:11:1d:3d:a3:fd:2e:6f:dd:bb:2f:1a:64:72: 3a:fc:a7:a5:d6:99:b0:72:1e:73:70:27:c1:43:ab: 58:77:6b:f9:77:4b:ba:46:2d:98:62:51:80:50:fe: 31:b7:c9:43:32:89:a2:57:52:c0:f2:cd:80:4b:5d: 6d:17:0b:12:19:6a:3c:b2:76:6c:c0:93:f4:a6:eb: 7f:67:e0:e9:03:c4:40:4b:c5:71:eb:91:29:5b:84: 04:5c:c2:7a:5f:c1:2f:e0:2b:66:b3:f7:c0:9b:04: e8:6d:fa:c9:81:ae:f4:13:e0:53:7a:88:bd:f5:80: 0c:7c:d9:67:01:d4:a2:40:9e:2c:79:e4:e5:9b:41: 59:db:4b:a3:30:6a:10:cd:f7:30:85:ae:c6:34:7e: e5:cc:65:2a:13:55:c2:89:2c:29:26:8b:62:4f:85: 37:33:a8:f6:e6:71:a7:8d:7c:a3:39:af:49:d9:68: 9b:c7:8c:81:b3:2f:df:74:b0:eb:55:32:03:bb:f8: 54:0c:8e:52:9f:f7:e2:55:0b:06:7a:1e:f5:f0:c2: 57:11:fb:8b:a0:e6:f3:f0:77:26:41:85:97:f5:e0: 7f:b5:ff:61:f0:bd:6e:f3:7e:1c:f4:d1:ed:06:5e: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:96:5B:39:88:B1:73:46:18:63:9E:E8:53:04:2C:80:09:4D:1C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dd32d582-a376-318b-8f9b-b29f59076367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv6: 2607:fcf0:2a00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:22:e4:7b:fd:67:22:c8:8c:b0:29:0c:a2:6a:e8:b6:2c:da: 34:ba:76:04:85:76:02:ac:80:53:f6:5e:7a:35:a9:e0:0a:cd: 5f:10:23:a0:96:fb:8b:ac:87:d2:37:25:0f:f2:7f:c6:0e:ff: 8e:ca:3d:de:97:e7:7a:dc:b8:45:48:cc:c6:99:d8:2d:c4:ea: d6:81:26:6d:51:73:27:cb:d4:6d:22:2c:ba:d9:4d:a7:36:d7: ea:d7:5b:61:51:b8:5e:1f:9e:e4:ab:06:6c:eb:39:87:2c:3c: dc:6e:91:f0:5a:ee:5f:33:e9:d5:02:ad:25:53:8a:dc:bd:b9: 29:52:74:f6:fb:82:89:07:1b:22:0d:90:b2:8f:01:d9:5e:21: c1:09:7d:a6:ea:53:82:cb:86:4a:df:76:11:ad:f8:1c:b1:50: ea:c8:e5:fe:f0:1e:29:4b:10:33:11:c3:55:12:4a:e3:ce:84: e2:02:65:ff:4f:5d:1f:ff:6d:27:b0:15:2b:22:10:7a:bf:2a: 67:ca:e0:08:0d:d1:30:9f:6c:b1:24:f8:50:76:9c:27:28:83: 98:3a:74:ef:12:ea:a7:7d:f9:1a:a6:91:f8:d8:69:ef:e7:bb: 48:5e:2f:c6:be:32:c1:4d:d6:1a:e6:54:f1:28:90:ef:66:25: c9:79:4b:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsBsUZtgZSba/f+2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjE4MGRmZWYtNzliZi00MTcxLThhOGMtMjg2MWRiZjEzMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogoM2nr0Yl06CKC0NP1s6BEdPaP9Lm/duy8a ZHI6/Kel1pmwch5zcCfBQ6tYd2v5d0u6Ri2YYlGAUP4xt8lDMomiV1LA8s2AS11t FwsSGWo8snZswJP0put/Z+DpA8RAS8Vx65EpW4QEXMJ6X8Ev4Ctms/fAmwTobfrJ ga70E+BTeoi99YAMfNlnAdSiQJ4seeTlm0FZ20ujMGoQzfcwha7GNH7lzGUqE1XC iSwpJotiT4U3M6j25nGnjXyjOa9J2Wibx4yBsy/fdLDrVTIDu/hUDI5Sn/fiVQsG eh718MJXEfuLoObz8HcmQYWX9eB/tf9h8L1u834c9NHtBl6HqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNiWWzmIsXNGGGOe6FMELIAJTRw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZGQzMmQ1ODItYTM3Ni0z MThiLThmOWItYjI5ZjU5MDc2MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf88CoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANEi5Hv9ZyLIjLApDKJq6LYs2jS6dgSFdgKsgFP2Xno1qeAKzV8Q I6CW+4ush9I3JQ/yf8YO/47KPd6X53rcuEVIzMaZ2C3E6taBJm1RcyfL1G0iLLrZ Tac21+rXW2FRuF4fnuSrBmzrOYcsPNxukfBa7l8z6dUCrSVTity9uSlSdPb7gokH GyINkLKPAdleIcEJfabqU4LLhkrfdhGt+ByxUOrI5f7wHilLEDMRw1USSuPOhOIC Zf9PXR//bSewFSsiEHq/KmfK4AgN0TCfbLEk+FB2nCcog5g6dO8S6qd9+RqmkfjY ae/nu0heL8a+MsFN1hrmVPEokO9mJcl5S+M= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:42 2025 by rpki-client