$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c6eb66e5-98a5-336b-86ab-83ea501312af.roa File: c6eb66e5-98a5-336b-86ab-83ea501312af.roa (raw, json) Hash identifier: +EX+9AhZghzNTLs7w9zNDqP+yJVcryqyLlZXQv+m8Do= Subject key identifier: 85:55:F5:A6:F8:1C:C9:F5:A3:12:69:5B:DA:3D:5D:4C:21:96:9F:65 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584AFF30BB1BCFCB7C422DC6DF40 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c6eb66e5-98a5-336b-86ab-83ea501312af.roa Signing time: Wed 27 Aug 2025 15:30:05 +0000 ROA not before: Wed 27 Aug 2025 15:30:05 +0000 ROA not after: Tue 25 Nov 2025 16:30:05 +0000 asID: 400072 IP address blocks: 2607:52c0::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ff:30:bb:1b:cf:cb:7c:42:2d:c6:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 27 15:30:05 2025 GMT Not After : Nov 25 16:30:05 2025 GMT Subject: CN=76e087ab-e70a-4589-9d07-80f29211383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9b:f1:9a:e7:3b:88:0a:89:d9:9d:10:04:df: dd:64:3e:a3:9c:f8:7c:53:d1:c4:ba:ae:f2:95:0a: d4:06:f9:4e:48:2d:37:12:ee:32:6e:45:c8:14:0c: 11:e8:c5:36:b6:36:26:c1:ad:0d:db:f2:d7:5c:d4: d2:5f:99:93:84:18:07:f0:a8:f8:61:b3:af:8e:f6: f4:d5:df:d4:71:9e:7f:f7:42:c1:20:38:48:7f:97: 78:5d:c4:04:aa:4c:cf:50:f4:f2:c6:66:e7:c8:68: a1:73:7f:8a:f7:5c:62:39:1e:15:46:9d:4c:6c:cc: 22:f2:19:22:66:e7:b8:eb:73:47:de:ab:13:f3:8d: 2c:51:4c:22:60:8b:60:f1:bf:b1:1a:2f:70:80:69: ce:f8:e4:15:04:69:f9:aa:7a:59:45:d6:24:84:bb: 88:07:40:d8:37:83:4d:40:43:c0:49:73:b9:fe:89: 37:c1:c5:54:b8:b1:79:9e:78:ee:aa:79:80:a8:ac: bd:d5:2f:91:36:a3:77:a5:3d:f2:d8:0a:00:25:7e: 38:3c:86:08:31:a3:e7:e9:fe:9f:86:09:e9:92:40: 0c:c2:71:54:3a:63:47:6f:95:7e:c1:2c:4c:d5:2b: 82:ed:aa:b0:1b:31:0e:37:9e:41:66:5f:9f:bf:ac: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:55:F5:A6:F8:1C:C9:F5:A3:12:69:5B:DA:3D:5D:4C:21:96:9F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c6eb66e5-98a5-336b-86ab-83ea501312af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv6: 2607:52c0::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:85:7a:9f:70:2c:41:51:d5:7f:a4:e2:6a:dc:49:fc:fe:ca: 5c:82:3b:1e:6d:f1:38:dc:ec:f8:82:6a:4c:d0:a5:23:a3:78: ce:b3:29:e2:96:fd:3b:a2:38:11:80:87:59:22:66:ef:5f:f4: 69:1e:a8:c2:b6:a0:ca:06:d8:3a:7e:86:82:1d:31:bb:a7:89: 30:ce:c0:1d:61:42:5b:90:56:66:10:2d:f9:77:f3:44:44:61: 81:26:50:e2:51:6d:d5:20:1c:14:c3:24:32:78:f4:2d:ac:17: 68:ae:39:82:de:44:17:cc:42:26:34:79:5d:3f:65:6e:61:6b: c7:92:fa:3a:e7:21:33:b9:11:89:8a:e2:ad:82:a3:e4:1f:22: bb:9b:87:5d:fe:03:3b:0f:c3:d8:14:75:d6:ba:b4:0e:4f:52: 8b:50:2e:c1:98:a9:e8:a3:ab:11:36:62:e8:9b:6b:16:f8:0a: 7f:a3:b3:76:f1:d3:a3:56:56:d1:08:9c:6c:4b:8c:67:d3:6f: de:87:62:0e:65:bd:59:62:66:d7:43:5b:da:25:00:de:81:10: 43:cd:06:a5:3f:ce:5a:2d:8b:ca:14:20:3b:8b:5a:64:fe:ad: 4d:9d:38:77:ca:a7:d3:92:44:b6:d1:84:bf:7c:05:36:e0:8b: bb:1c:ed:2a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr/MLsbz8t8Qi3G30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MDgyNzE1MzAwNVoXDTI1MTEyNTE2MzAwNVowLzEtMCsGA1UEAxMk NzZlMDg3YWItZTcwYS00NTg5LTlkMDctODBmMjkyMTEzODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5vxmuc7iAqJ2Z0QBN/dZD6jnPh8U9HEuq7y lQrUBvlOSC03Eu4ybkXIFAwR6MU2tjYmwa0N2/LXXNTSX5mThBgH8Kj4YbOvjvb0 1d/UcZ5/90LBIDhIf5d4XcQEqkzPUPTyxmbnyGihc3+K91xiOR4VRp1MbMwi8hki Zue463NH3qsT840sUUwiYItg8b+xGi9wgGnO+OQVBGn5qnpZRdYkhLuIB0DYN4NN QEPASXO5/ok3wcVUuLF5nnjuqnmAqKy91S+RNqN3pT3y2AoAJX44PIYIMaPn6f6f hgnpkkAMwnFUOmNHb5V+wSxM1SuC7aqwGzEON55BZl+fv6zW0wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIVV9ab4HMn1oxJpW9o9XUwhlp9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvYzZlYjY2ZTUtOThhNS0z MzZiLTg2YWItODNlYTUwMTMxMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgdSwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYYV6n3AsQVHVf6TiatxJ/P7KXII7Hm3xONzs+IJqTNClI6N4zrMp 4pb9O6I4EYCHWSJm71/0aR6owragygbYOn6Ggh0xu6eJMM7AHWFCW5BWZhAt+Xfz RERhgSZQ4lFt1SAcFMMkMnj0LawXaK45gt5EF8xCJjR5XT9lbmFrx5L6OuchM7kR iYrirYKj5B8iu5uHXf4DOw/D2BR11rq0Dk9Si1AuwZip6KOrETZi6JtrFvgKf6Oz dvHTo1ZW0QicbEuMZ9Nv3odiDmW9WWJm10Nb2iUA3oEQQ80GpT/OWi2LyhQgO4ta ZP6tTZ04d8qn05JEttGEv3wFNuCLuxztKg== -----END CERTIFICATE-----Generated at Wed Oct 8 22:58:43 2025 by rpki-client