$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa File: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json) Hash identifier: b5wWNUmh98dGbI/rbuCUdU1tXX32ihsMWaGo/4kcKl4= Subject key identifier: 89:F3:EE:99:00:E6:B4:60:E1:D7:2C:26:16:0A:EA:01:F0:14:F4:E0 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584B0B76B2559F30B5FC34A8AC80 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 906 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b2:55:9f:30:b5:fc:34:a8:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=17293860-1880-4ee4-882e-e7844d36c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:6c:3e:fa:06:3f:15:cc:a7:30:48:62:db: 7a:ae:b2:dc:1f:db:a3:9c:7f:a0:07:a0:8e:dc:18: b8:5a:93:74:07:c5:7b:3f:cb:6c:80:a7:fa:11:58: 16:f5:6e:4c:4a:a5:38:e5:f5:2b:63:d5:c9:8a:51: cf:94:c5:1b:41:b2:33:44:57:f7:60:1c:3e:6d:06: 77:17:28:0a:d7:46:2a:88:f3:55:f3:31:49:f3:e6: a1:0b:f7:fd:72:d8:fb:35:5e:cd:44:8f:a8:a5:44: f8:b5:d9:54:de:2d:bd:44:68:56:28:80:23:98:41: cd:45:69:05:55:a2:e2:6f:2e:e2:a4:41:fa:3f:14: 11:e2:e3:7d:f8:0c:fd:15:e6:08:2d:d7:3e:5b:3c: ba:7d:55:ef:80:f8:d8:11:37:f6:4a:f0:d2:6b:f8: ba:0d:91:4e:c2:21:0f:c8:54:97:0e:47:0d:65:4d: d9:88:76:fc:49:75:cf:91:fb:85:b9:30:8f:21:04: 28:80:0b:b8:1c:3c:00:1b:f5:e8:91:07:7a:23:d2: 9f:cf:7f:ef:8f:63:2d:82:d9:79:8e:66:04:84:e4: d8:7a:d7:d5:0d:bc:e3:24:7d:d5:45:c5:1f:04:fb: 8c:99:68:ef:47:34:57:77:9b:fa:0b:29:b7:d6:ed: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F3:EE:99:00:E6:B4:60:E1:D7:2C:26:16:0A:EA:01:F0:14:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:66:00:c3:df:24:09:d7:af:cc:df:ad:21:75:b6:8b:e3:3e: a7:76:3a:2d:ed:e6:c4:81:ab:3a:21:37:78:0d:24:ea:92:97: 03:54:fa:84:20:7c:7e:f3:64:32:09:67:01:24:cb:9b:a8:46: 13:7f:27:df:1e:5e:34:62:f0:ca:25:38:cf:bc:ee:23:d5:bc: 1e:b1:6c:f0:3e:e2:bf:1a:25:d4:2f:aa:b4:e9:e8:e5:2c:76: 1a:b8:d1:76:4b:bc:a3:21:e2:d3:97:76:06:16:b6:7c:91:87: f5:8c:98:b8:da:bb:44:26:98:74:04:09:41:51:8a:86:ee:47: f0:36:8e:bf:31:09:45:1a:1f:67:dc:31:fd:b2:96:3c:8d:a0: 0e:20:43:6f:30:cd:ed:2b:78:5c:2e:c1:c5:e2:3c:7b:4c:d0: 54:68:f1:e8:ec:72:fd:77:d9:e5:6b:62:6b:70:fc:48:d5:40: fd:75:5e:fa:d6:07:3c:2b:d0:fd:33:99:d5:7c:85:67:d0:2b: fb:75:fb:36:73:b9:f4:df:ce:49:a7:b1:32:71:dc:77:93:57: d2:1c:e7:98:e3:91:a4:69:07:08:6c:87:12:d0:0b:9c:96:34: 1f:91:04:4c:d0:67:42:76:9a:3c:03:d2:5a:8b:c9:f7:a8:31: 61:80:73:a7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsLdrJVnzC1/DSorIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MTcyOTM4NjAtMTg4MC00ZWU0LTg4MmUtZTc4NDRkMzZjMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot5sPvoGPxXMpzBIYtt6rrLcH9ujnH+gB6CO 3Bi4WpN0B8V7P8tsgKf6EVgW9W5MSqU45fUrY9XJilHPlMUbQbIzRFf3YBw+bQZ3 FygK10YqiPNV8zFJ8+ahC/f9ctj7NV7NRI+opUT4tdlU3i29RGhWKIAjmEHNRWkF VaLiby7ipEH6PxQR4uN9+Az9FeYILdc+Wzy6fVXvgPjYETf2SvDSa/i6DZFOwiEP yFSXDkcNZU3ZiHb8SXXPkfuFuTCPIQQogAu4HDwAG/XokQd6I9Kfz3/vj2Mtgtl5 jmYEhOTYetfVDbzjJH3VRcUfBPuMmWjvRzRXd5v6Cym31u3/hwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFInz7pkA5rRg4dcsJhYK6gHwFPTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjAzYTk0NDMtMTQ2OC0z ZTRlLTlmYWMtODBiYjMyNDE4ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPZgDD3yQJ16/M360hdbaL4z6ndjot7ebE gas6ITd4DSTqkpcDVPqEIHx+82QyCWcBJMubqEYTfyffHl40YvDKJTjPvO4j1bwe sWzwPuK/GiXUL6q06ejlLHYauNF2S7yjIeLTl3YGFrZ8kYf1jJi42rtEJph0BAlB UYqG7kfwNo6/MQlFGh9n3DH9spY8jaAOIENvMM3tK3hcLsHF4jx7TNBUaPHo7HL9 d9nla2JrcPxI1UD9dV761gc8K9D9M5nVfIVn0Cv7dfs2c7n0385Jp7Eycdx3k1fS HOeY45GkaQcIbIcS0AucljQfkQRM0GdCdpo8A9Jai8n3qDFhgHOn -----END CERTIFICATE-----Generated at Wed Sep 10 18:25:35 2025 by rpki-client