$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa File: dba443b5-757a-3a38-a356-d4d1cf86758b.roa (raw, json) Hash identifier: FWzjt22Hj2EDQ7IZnxCGFUuH3186yt9DZYgWixzk1gw= Subject key identifier: 16:AC:7A:51:B4:1B:46:6E:28:CC:14:8F:D5:5B:84:55:A9:2E:A6:99 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584AB676632D0ECEBDCC6A9DA800 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa Signing time: Fri 01 Aug 2025 14:16:25 +0000 ROA not before: Fri 01 Aug 2025 14:16:25 +0000 ROA not after: Thu 30 Oct 2025 14:16:25 +0000 asID: 6079 IP address blocks: 192.159.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:76:63:2d:0e:ce:bd:cc:6a:9d:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 1 14:16:25 2025 GMT Not After : Oct 30 14:16:25 2025 GMT Subject: CN=39230e5b-4863-480d-b095-5103587ebbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:74:d7:d3:8d:e8:16:db:8e:34:f2:46:74: 35:df:40:89:7c:81:4b:7b:77:cd:9c:2c:f9:6a:94: 9b:9a:79:30:0a:d4:ab:80:1e:ba:96:64:82:71:58: cf:50:0d:fd:42:08:0e:0e:4b:21:a3:cd:e9:65:8c: 8f:3f:d7:b1:fb:c6:8e:f9:21:0c:aa:24:f7:1e:87: 8b:76:0c:d5:81:b0:b5:40:6d:51:68:43:24:bd:1d: 3c:77:bc:d9:b9:b7:a2:6f:c8:68:50:cc:75:1b:c8: 57:33:54:ae:b4:44:85:66:28:e3:68:8d:08:c7:ed: e6:32:c9:d3:db:e0:27:22:db:ca:4c:32:e4:88:90: c6:8a:85:0a:8b:99:33:7f:9f:72:8e:45:ca:04:b5: b8:84:cb:3b:62:b4:cd:09:74:08:7d:4b:bb:53:83: ec:14:b8:ab:16:9d:c1:bb:ab:61:20:86:48:a2:f4: 11:dc:82:0a:2f:c0:df:22:0b:d9:34:1b:9a:07:a7: ca:ea:14:a2:73:3a:dd:88:68:77:ca:7e:62:b5:65: aa:ba:db:47:31:f6:a4:b1:fe:c1:ff:bb:b5:58:55: 1e:6a:8c:8b:b8:bb:0f:3a:92:cf:a9:97:d6:10:74: db:10:62:a5:6c:9c:4d:d1:0d:57:0b:73:0e:bd:eb: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:7A:51:B4:1B:46:6E:28:CC:14:8F:D5:5B:84:55:A9:2E:A6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/dba443b5-757a-3a38-a356-d4d1cf86758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f9:55:4b:db:86:93:8c:32:01:0a:7e:2d:92:36:8d:06:46: f5:52:59:5c:57:80:0e:58:5e:db:42:1b:b1:05:18:e0:67:ae: c9:95:87:4a:3d:86:bd:65:52:f8:fc:8d:f0:c3:1e:a8:9c:f3: c2:01:4d:3b:49:ec:99:02:f1:50:0c:7b:21:0b:ec:02:b5:1e: 23:f8:dc:1e:57:48:74:5e:ba:29:e3:00:2a:16:dd:c9:c5:98: b9:c8:de:27:f4:1a:d4:ee:c9:fe:2f:18:07:f3:38:ae:65:d2: 1d:53:1f:c2:10:cd:b6:43:07:f6:0a:f5:48:f5:d4:79:e2:90: c1:a5:f7:94:6a:45:71:db:3a:20:49:a4:a9:00:2c:2a:81:29: 24:ba:4a:34:47:ce:e6:c1:03:83:50:0b:b2:d7:2b:20:6e:6f: a3:39:df:6c:a8:8d:59:0f:c4:e1:c0:29:6e:71:d7:9e:d1:0b: 1d:15:c3:c1:35:01:37:89:fb:82:8a:44:e5:b9:ad:e2:2f:1d: 35:14:45:81:64:76:35:d1:b3:18:f7:02:a1:77:26:52:54:34: cf:60:c7:c6:0d:22:43:22:3f:2a:90:76:7c:1e:ba:65:47:b3: f1:55:d0:03:d6:fc:01:03:71:52:fb:9f:fc:ee:22:99:e5:82: ec:a2:3c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2dmMtDs69zGqdqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MDgwMTE0MTYyNVoXDTI1MTAzMDE0MTYyNVowLzEtMCsGA1UEAxMk MzkyMzBlNWItNDg2My00ODBkLWIwOTUtNTEwMzU4N2ViYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocd019ON6BbbjjTyRnQ130CJfIFLe3fNnCz5 apSbmnkwCtSrgB66lmSCcVjPUA39QggODksho83pZYyPP9ex+8aO+SEMqiT3HoeL dgzVgbC1QG1RaEMkvR08d7zZubeib8hoUMx1G8hXM1SutESFZijjaI0Ix+3mMsnT 2+AnItvKTDLkiJDGioUKi5kzf59yjkXKBLW4hMs7YrTNCXQIfUu7U4PsFLirFp3B u6thIIZIovQR3IIKL8DfIgvZNBuaB6fK6hSiczrdiGh3yn5itWWquttHMfaksf7B /7u1WFUeaoyLuLsPOpLPqZfWEHTbEGKlbJxN0Q1XC3MOveuCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaselG0G0ZuKMwUj9VbhFWpLqaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZGJhNDQzYjUtNzU3YS0z YTM4LWEzNTYtZDRkMWNmODY3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM35VUvbhpOMMgEKfi2SNo0GRvVSWVxXgA5YXttCG7EFGOBnrsmVh0o9 hr1lUvj8jfDDHqic88IBTTtJ7JkC8VAMeyEL7AK1HiP43B5XSHReuinjACoW3cnF mLnI3if0GtTuyf4vGAfzOK5l0h1TH8IQzbZDB/YK9Uj11HnikMGl95RqRXHbOiBJ pKkALCqBKSS6SjRHzubBA4NQC7LXKyBub6M532yojVkPxOHAKW5x157RCx0Vw8E1 ATeJ+4KKROW5reIvHTUURYFkdjXRsxj3AqF3JlJUNM9gx8YNIkMiPyqQdnweumVH s/FV0APW/AEDcVL7n/zuIpnlguyiPKc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:57 2025 by rpki-client