$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa File: a45adc4b-52a6-3533-a3dd-c5dfac055560.roa (raw, json) Hash identifier: 6vxFbv5NS1cHfIvflnejMKR4KiUU6L3zQHJRf+RH/JE= Subject key identifier: B2:56:AE:AF:C4:AD:6A:9A:26:ED:35:37:E5:D3:FF:CF:0C:51:D9:4E Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584AFC1BFC2B6A586E9C5E48ADC0 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 149506 IP address blocks: 2602:fbda:710::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fc:2b:6a:58:6e:9c:5e:48:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=8b88e25d-3116-436a-bf44-36303bfa07c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:04:8b:b4:a2:5a:8f:ac:e4:65:f1:ca:9f: f7:68:82:75:24:1d:b5:31:29:a9:e6:88:71:7f:52: f2:61:47:9c:91:fd:d6:ad:8f:6c:5f:9e:2a:32:35: 63:fe:5e:1a:8e:50:68:53:f2:21:1a:76:f4:d6:ee: e1:7f:61:e5:52:56:d5:56:74:e0:b5:55:55:71:9a: d6:16:27:b8:99:e9:3b:5e:a2:80:32:7c:23:6c:67: ae:f1:71:ab:0d:23:7c:56:ba:c5:90:5e:0b:32:56: bd:46:71:c7:4b:fd:42:08:6d:a5:62:37:8f:d9:47: 4f:5f:46:08:c4:92:0c:12:16:97:4f:f9:88:a5:d4: ee:5d:8a:4b:c9:60:24:9b:ba:9d:e0:e2:0a:33:f6: 5d:96:88:f5:30:e1:de:23:0e:1f:af:7f:d9:68:06: 74:86:32:49:56:82:44:dd:b5:8b:77:d0:12:30:df: 49:3f:61:77:ff:d2:ea:a8:15:59:1f:70:c8:d5:87: 28:9b:81:4b:f8:0a:c8:62:55:e8:c2:38:2d:48:3e: 38:28:97:2b:50:b7:b0:8b:8a:8b:31:11:ef:b6:9c: d7:2f:42:e1:8f:5b:d9:6e:ab:60:3a:76:a8:44:62: 7c:6e:23:f7:f2:18:1d:ed:06:71:d5:b9:07:3c:be: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:56:AE:AF:C4:AD:6A:9A:26:ED:35:37:E5:D3:FF:CF:0C:51:D9:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/a45adc4b-52a6-3533-a3dd-c5dfac055560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv6: 2602:fbda:710::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:8a:5b:96:4e:c6:12:a6:42:17:1c:8f:3e:06:11:b7:2d: d9:96:96:f0:1d:50:68:74:a5:30:c8:c8:d2:fd:0e:0a:15:13: 04:64:88:f0:5f:a8:67:a3:75:dd:12:d9:ce:cf:2f:d9:06:30: 61:73:b3:cc:35:ab:8e:df:da:e4:45:61:8b:a5:e7:c4:50:62: 44:c8:97:01:56:7d:9b:c7:53:95:d9:89:fa:42:32:37:35:c3: 3b:b8:b0:39:8a:19:f0:ad:c6:f8:6b:9b:95:5f:79:c1:84:db: 1e:52:20:6e:ea:1f:30:22:12:0b:5d:f9:22:59:5c:e1:dc:32: d9:86:36:16:6e:b2:33:c5:5e:1c:8c:c2:e3:0d:48:35:c0:d5: 78:f7:8b:a4:f4:f5:a3:ce:26:9a:22:a4:99:8a:67:27:ab:a6: 17:2f:18:d9:96:b4:2f:ee:d5:7a:22:65:c6:00:d0:b3:5d:fc: ab:52:c2:ed:89:15:d9:4d:e9:4a:81:06:4a:52:b7:e6:ee:28: 8b:b1:fc:8a:f1:93:9d:1c:55:c7:cf:3c:bc:ff:be:d0:54:ab: a2:e3:0d:6d:b8:e0:29:d7:7c:7d:34:33:8c:8b:4b:c4:d7:e9: f2:32:19:e8:e2:f4:48:64:b5:4c:1b:7f:25:5f:bf:7a:24:dc: 2b:4d:3b:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8G/wralhunF5IrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OGI4OGUyNWQtMzExNi00MzZhLWJmNDQtMzYzMDNiZmEwN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wEi7SiWo+s5GXxyp/3aIJ1JB21MSmp5ohx f1LyYUeckf3WrY9sX54qMjVj/l4ajlBoU/IhGnb01u7hf2HlUlbVVnTgtVVVcZrW Fie4mek7XqKAMnwjbGeu8XGrDSN8VrrFkF4LMla9RnHHS/1CCG2lYjeP2UdPX0YI xJIMEhaXT/mIpdTuXYpLyWAkm7qd4OIKM/Zdloj1MOHeIw4fr3/ZaAZ0hjJJVoJE 3bWLd9ASMN9JP2F3/9LqqBVZH3DI1Ycom4FL+ArIYlXowjgtSD44KJcrULewi4qL MRHvtpzXL0Lhj1vZbqtgOnaoRGJ8biP38hgd7QZx1bkHPL56awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLJWrq/ErWqaJu01N+XT/88MUdlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvYTQ1YWRjNGItNTJhNi0z NTMzLWEzZGQtYzVkZmFjMDU1NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL72gcQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClliluWTsYSpkIXHI8+BhG3LdmWlvAdUGh0pTDIyNL9DgoVEwRk iPBfqGejdd0S2c7PL9kGMGFzs8w1q47f2uRFYYul58RQYkTIlwFWfZvHU5XZifpC Mjc1wzu4sDmKGfCtxvhrm5VfecGE2x5SIG7qHzAiEgtd+SJZXOHcMtmGNhZusjPF XhyMwuMNSDXA1Xj3i6T09aPOJpoipJmKZyerphcvGNmWtC/u1XoiZcYA0LNd/KtS wu2JFdlN6UqBBkpSt+buKIux/Irxk50cVcfPPLz/vtBUq6LjDW244CnXfH00M4yL S8TX6fIyGeji9EhktUwbfyVfv3ok3CtNO5k= -----END CERTIFICATE-----Generated at Mon Sep 8 10:05:17 2025 by rpki-client