$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa File: 92d8eb7d-be5e-3a7b-908a-9895775b02db.roa (raw, json) Hash identifier: 0j/S7HvyAXfF19bTsLHzZZ+CaHB/98V8L6yyW2VaALs= Subject key identifier: F4:B2:89:C8:16:F9:CA:0E:96:03:88:F9:3F:3C:35:79:9A:82:69:4D Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584AADF123E7BF7CBB4431D2CE80 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 11260 IP address blocks: 2604:db00::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:23:e7:bf:7c:bb:44:31:d2:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=3873d9c0-12e1-4360-b496-bf5a4711c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:8b:d9:ec:b9:d9:20:3e:01:8e:60:81:45: f5:d4:c0:7b:3c:7a:92:28:28:52:9f:93:78:36:45: f8:e8:a3:ca:9f:d8:50:45:c8:c4:09:83:5a:d2:fc: c4:ae:82:c0:4f:88:f3:33:5c:56:42:93:20:d0:88: d1:bf:44:c4:58:1c:e8:17:51:c7:ae:6c:d2:5d:d1: 49:0d:dd:6e:0f:42:d7:01:fa:6b:e3:a4:5e:b5:b4: 47:7f:3c:c7:92:b9:5d:ef:b0:c8:18:94:47:7c:34: 6d:a5:2c:66:03:2a:91:e2:79:83:04:83:3d:67:d5: 99:72:d6:12:d0:bc:b5:61:24:86:93:47:5d:7f:e3: 47:2c:cf:d2:2e:0d:1d:14:c9:d2:f1:43:ba:36:69: 8d:b2:a4:e7:05:4e:ec:ae:64:0d:ec:35:99:86:b4: 05:aa:e5:17:58:ab:3e:30:9d:c6:b8:bf:8f:26:d9: 02:4d:ec:86:f8:16:bb:a2:1a:03:46:33:46:23:cd: 4c:59:6a:00:f8:35:ac:18:23:67:3b:3a:ce:55:26: c3:1f:e3:bd:84:25:af:07:4f:25:da:87:fb:4b:0b: 13:94:7e:94:88:59:1d:f9:a5:2c:4b:b7:14:cb:7f: 5b:11:10:da:89:98:0f:f3:e5:0f:f2:90:5f:1c:9e: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B2:89:C8:16:F9:CA:0E:96:03:88:F9:3F:3C:35:79:9A:82:69:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv6: 2604:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d4:20:56:e9:6b:6c:d5:ef:df:37:67:8d:13:b5:bc:85:d1: ae:fb:e7:f6:ff:0e:cd:2e:a6:bc:0b:f7:92:8b:eb:45:17:a1: f3:05:3f:0b:3e:ea:3e:42:03:98:1b:a8:65:f3:cb:9f:7b:98: 98:83:09:e5:80:93:9c:97:f9:ea:d5:30:78:d2:83:24:9a:09: 4b:13:44:54:25:96:97:29:a9:e4:88:29:19:be:af:8c:b8:42: 27:e9:91:00:8e:5c:24:09:83:33:1a:f8:0b:d8:65:52:42:b7: 22:3b:86:9b:60:dd:40:4e:24:8a:93:64:1c:0c:16:f4:6b:25: 07:43:47:aa:0b:e4:c7:ce:58:01:66:bb:24:f3:10:5c:9c:9f: 51:75:b7:3d:dd:c3:2d:9a:ff:c2:3e:a4:16:bb:4b:b8:58:02: 39:20:d7:56:66:8f:52:c0:fd:4d:d8:69:83:e7:9a:3b:c0:b8: 40:21:52:0d:0e:81:0f:fe:dd:b8:c9:17:25:c5:77:30:71:a0: fa:c0:ea:bc:22:da:24:60:41:11:e2:8e:fb:cf:ff:89:ca:43: 18:ce:8f:90:ca:93:3b:52:6d:65:36:38:0f:c2:d1:e1:75:b7: cc:d0:91:db:8c:ff:4d:a7:0e:23:00:d2:2d:e4:17:ea:f8:fc: b8:5b:81:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqt8SPnv3y7RDHSzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Mzg3M2Q5YzAtMTJlMS00MzYwLWI0OTYtYmY1YTQ3MTFjNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOL2ey52SA+AY5ggUX11MB7PHqSKChSn5N4 NkX46KPKn9hQRcjECYNa0vzEroLAT4jzM1xWQpMg0IjRv0TEWBzoF1HHrmzSXdFJ Dd1uD0LXAfpr46RetbRHfzzHkrld77DIGJRHfDRtpSxmAyqR4nmDBIM9Z9WZctYS 0Ly1YSSGk0ddf+NHLM/SLg0dFMnS8UO6NmmNsqTnBU7srmQN7DWZhrQFquUXWKs+ MJ3GuL+PJtkCTeyG+Ba7ohoDRjNGI81MWWoA+DWsGCNnOzrOVSbDH+O9hCWvB08l 2of7SwsTlH6UiFkd+aUsS7cUy39bERDaiZgP8+UP8pBfHJ6UfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPSyicgW+coOlgOI+T88NXmagmlNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTJkOGViN2QtYmU1ZS0z YTdiLTkwOGEtOTg5NTc3NWIwMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA51CBW6Wts1e/fN2eNE7W8hdGu++f2/w7NLqa8C/eSi+tFF6HzBT8L Puo+QgOYG6hl88ufe5iYgwnlgJOcl/nq1TB40oMkmglLE0RUJZaXKankiCkZvq+M uEIn6ZEAjlwkCYMzGvgL2GVSQrciO4abYN1ATiSKk2QcDBb0ayUHQ0eqC+THzlgB Zrsk8xBcnJ9Rdbc93cMtmv/CPqQWu0u4WAI5INdWZo9SwP1N2GmD55o7wLhAIVIN DoEP/t24yRclxXcwcaD6wOq8ItokYEER4o77z/+JykMYzo+QypM7Um1lNjgPwtHh dbfM0JHbjP9Npw4jANIt5Bfq+Py4W4Es -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:06 2025 by rpki-client