$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa File: 9fa73050-194d-310a-a4ac-6a0d78b64941.roa (raw, json) Hash identifier: hJiYnJ0+AYh9TtgATWasayvOUhVscMN+sYlE5ENOBlk= Subject key identifier: 6F:78:FA:0D:31:5F:4F:4D:A6:A1:B3:70:0F:E2:4D:41:55:CF:F7:AA Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F4328584B1806ECD9B6437B41504C7940 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 20283 IP address blocks: 64.238.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ec:d9:b6:43:7b:41:50:4c:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=0eaba2ed-6dec-4b67-bdf1-313249a3b3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:79:4e:99:c5:aa:60:aa:f3:6d:de:6e:01: 05:9e:2a:bb:dc:ac:6f:3a:5b:dd:11:ec:33:d8:67: 6b:3e:d5:d1:8a:c2:23:e7:a8:55:33:f4:b3:09:0a: fc:63:e9:a6:62:4c:dd:bd:48:7d:d5:23:3a:d7:af: be:e2:1a:6d:36:69:11:83:c4:b9:8d:81:97:c9:b6: d8:8c:45:1f:22:ef:a2:89:f8:8c:f2:d2:f5:05:e0: 7c:d0:b6:f5:11:1e:83:04:43:76:4a:04:75:3d:20: 10:b3:a0:e2:fa:50:a6:98:76:b0:47:50:fe:9b:35: 40:5e:a4:fc:76:00:b8:a9:2d:50:85:fd:dc:66:3f: a0:3f:6c:3d:de:41:4f:e8:2d:c3:1e:b9:b3:ae:36: cb:45:ee:05:40:d8:ad:20:c8:39:12:29:47:80:03: 95:3d:84:fc:20:e7:96:c6:85:83:c8:e8:77:d9:96: 33:d7:c9:a1:0a:99:0d:61:f2:d7:7b:8f:2f:cd:3f: 72:85:33:5d:00:ff:72:8e:7d:ff:03:0f:ef:58:84: 0d:06:19:87:2b:4a:51:03:3f:b1:2e:50:fa:f6:19: 42:d9:a9:41:f7:1e:ad:a7:1f:31:36:82:84:f8:b1: 0b:81:08:a7:78:ca:2c:dc:6e:1d:df:3e:22:a0:88: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:78:FA:0D:31:5F:4F:4D:A6:A1:B3:70:0F:E2:4D:41:55:CF:F7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 64.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f7:88:f3:d6:f6:59:d2:87:26:77:8a:77:db:e7:42:63:ba: 8a:22:8c:87:49:71:38:8b:c1:a7:7a:40:61:42:bd:94:85:33: a4:c8:87:bf:da:2f:1e:85:78:f1:6f:85:fd:05:00:b3:74:06: c1:af:fc:63:8f:25:54:f4:14:0a:cd:4c:55:48:14:14:1c:b0: df:e1:31:1e:55:7a:52:35:25:53:7a:bf:73:cc:b8:83:55:a4: 8d:8c:bb:51:fb:3b:c9:7c:98:f2:0e:57:3c:4c:33:9f:f7:46: 01:ae:66:9e:5d:b3:57:c3:07:05:2c:6f:01:8f:99:3f:f0:59: 3b:13:92:d3:ea:98:db:53:0b:ef:05:c9:94:a1:7c:bb:e5:1a: e2:56:12:a5:ef:0b:e3:03:be:b8:ff:df:bc:a2:36:35:2a:e4: 99:af:12:39:64:1b:2d:d3:77:f4:6e:46:67:1b:78:80:ce:96: 1e:31:91:a5:8a:d4:1d:3d:a7:b6:55:34:26:c4:c6:d0:87:7c: 39:4f:df:22:05:b9:0b:8c:6d:84:44:c0:a7:b9:ad:86:c6:b3: fe:d4:5c:34:87:64:c7:e3:2a:b0:42:1c:0a:c7:e5:79:9a:55: 31:50:1a:49:e5:aa:e0:8d:8a:3f:c1:4c:d0:cd:c4:7c:48:b8: 49:57:ca:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuzZtkN7QVBMeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGVhYmEyZWQtNmRlYy00YjY3LWJkZjEtMzEzMjQ5YTNiM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUx5TpnFqmCq823ebgEFniq73KxvOlvdEewz 2GdrPtXRisIj56hVM/SzCQr8Y+mmYkzdvUh91SM616++4hptNmkRg8S5jYGXybbY jEUfIu+iifiM8tL1BeB80Lb1ER6DBEN2SgR1PSAQs6Di+lCmmHawR1D+mzVAXqT8 dgC4qS1Qhf3cZj+gP2w93kFP6C3DHrmzrjbLRe4FQNitIMg5EilHgAOVPYT8IOeW xoWDyOh32ZYz18mhCpkNYfLXe48vzT9yhTNdAP9yjn3/Aw/vWIQNBhmHK0pRAz+x LlD69hlC2alB9x6tpx8xNoKE+LELgQineMos3G4d3z4ioIj+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG94+g0xX09NpqGzcA/iTUFVz/eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvOWZhNzMwNTAtMTk0ZC0z MTBhLWE0YWMtNmEwZDc4YjY0OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQO4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr3iPPW9lnShyZ3infb50JjuooijIdJcTiLwad6QGFCvZSFM6TIh7/a Lx6FePFvhf0FALN0BsGv/GOPJVT0FArNTFVIFBQcsN/hMR5VelI1JVN6v3PMuINV pI2Mu1H7O8l8mPIOVzxMM5/3RgGuZp5ds1fDBwUsbwGPmT/wWTsTktPqmNtTC+8F yZShfLvlGuJWEqXvC+MDvrj/37yiNjUq5JmvEjlkGy3Td/RuRmcbeIDOlh4xkaWK 1B09p7ZVNCbExtCHfDlP3yIFuQuMbYREwKe5rYbGs/7UXDSHZMfjKrBCHArH5Xma VTFQGknlquCNij/BTNDNxHxIuElXyr0= -----END CERTIFICATE-----Generated at Fri Oct 17 11:36:20 2025 by rpki-client