$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa File: f8daf407-7390-3a49-9321-c774a1b0419c.roa (raw, json) Hash identifier: oYVnVHkNjspwMaurvU0M1/82kZxVmyi/4KtUGBm1040= Subject key identifier: 4F:66:99:0C:C3:04:11:FE:6C:18:6D:1D:37:64:7F:C4:07:CE:E1:51 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584AB675A6F9CD48D779ECA5AB00 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa Signing time: Fri 01 Aug 2025 14:14:56 +0000 ROA not before: Fri 01 Aug 2025 14:14:56 +0000 ROA not after: Thu 30 Oct 2025 14:14:56 +0000 asID: 46450 IP address blocks: 192.159.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:75:a6:f9:cd:48:d7:79:ec:a5:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 1 14:14:56 2025 GMT Not After : Oct 30 14:14:56 2025 GMT Subject: CN=0f80e65a-0746-4998-9b0b-666f9ebfe504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:eb:78:da:61:2f:96:5f:86:fa:be:d2:f5:58: 26:48:a7:14:66:2a:2c:b6:5b:92:a2:5d:5a:5b:92: 11:f3:08:7f:0f:3f:09:ca:ad:40:bb:fd:c6:bb:1c: f7:b7:2d:3b:2e:94:a0:ed:70:ed:cc:57:8f:5a:27: cd:3e:ca:98:3a:fb:4b:b6:04:ca:16:cc:f6:37:ff: 27:75:3b:6b:ae:27:a6:e5:2a:60:29:e9:df:d1:a5: a2:b6:f5:fe:31:ab:85:bd:ea:1d:46:43:17:f8:9c: 16:59:46:f2:cc:57:a1:b1:45:62:56:28:0b:ed:3c: c5:96:e7:0f:d2:c1:21:6e:d1:51:85:1f:16:72:68: 31:b3:41:25:ab:6c:0e:e4:74:87:af:3d:8f:de:2c: 0a:0b:8c:b6:82:99:3e:8b:f1:08:fc:ad:69:4d:56: 5e:22:0b:29:ed:ea:a7:6f:d6:e5:9f:a9:4d:33:f7: 4f:46:62:5a:1b:a0:98:71:3f:68:32:62:b5:7d:19: 59:77:4d:57:f2:1f:dd:44:b6:92:be:5f:84:86:48: 2f:3d:eb:f9:ff:c6:ea:b5:c6:7e:72:45:e8:a9:2e: 4b:f9:7c:fd:12:cd:5b:74:db:54:cf:d2:b8:cb:d1: 61:e6:6e:6b:e6:ef:f5:81:60:03:78:31:d1:d4:43: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:66:99:0C:C3:04:11:FE:6C:18:6D:1D:37:64:7F:C4:07:CE:E1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/f8daf407-7390-3a49-9321-c774a1b0419c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:95:38:1b:45:68:0a:4e:86:b6:5f:00:54:99:eb:7e:4f:ad: 35:96:33:4b:2b:7d:57:e6:fc:8b:3c:f8:d8:2d:f2:04:01:27: 84:41:6e:5f:a6:61:e2:b1:53:99:bf:c0:97:8d:d4:f0:56:5f: 1c:32:d5:fd:c9:2a:38:e7:cd:5c:80:1b:bf:d3:d5:59:85:d6: 60:f9:59:12:84:ee:06:0d:59:38:d8:a4:4b:90:2c:b2:ff:03: 26:40:21:43:4e:d1:53:67:19:11:3f:01:21:76:aa:04:4c:d4: 77:23:1f:c9:51:a4:0c:9d:19:f2:30:bb:09:5f:0e:64:ab:11: e4:81:66:5c:a4:4c:e5:04:90:b1:51:54:55:d7:87:37:64:46: 10:67:cd:52:5d:63:4b:b9:17:62:82:e9:5f:f2:c8:02:72:be: 62:25:94:b5:75:bb:7e:bd:98:58:bb:ae:ec:7e:fe:49:6c:37: f0:07:06:91:bb:ce:48:de:ce:28:f9:ed:ac:b9:51:0a:4f:53: e5:fb:9d:e9:af:82:36:84:95:84:a7:bf:af:19:43:f3:bc:33: c3:a3:6c:1b:1d:db:30:0d:97:1d:29:af:98:a7:80:f6:2c:92: ad:9b:3d:0c:81:14:74:aa:4e:d9:f6:31:cf:47:03:47:79:39: a4:dd:cb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2dab5zUjXeeylqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MDgwMTE0MTQ1NloXDTI1MTAzMDE0MTQ1NlowLzEtMCsGA1UEAxMk MGY4MGU2NWEtMDc0Ni00OTk4LTliMGItNjY2ZjllYmZlNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6et42mEvll+G+r7S9VgmSKcUZiostluSol1a W5IR8wh/Dz8Jyq1Au/3Guxz3ty07LpSg7XDtzFePWifNPsqYOvtLtgTKFsz2N/8n dTtrriem5SpgKenf0aWitvX+MauFveodRkMX+JwWWUbyzFehsUViVigL7TzFlucP 0sEhbtFRhR8Wcmgxs0Elq2wO5HSHrz2P3iwKC4y2gpk+i/EI/K1pTVZeIgsp7eqn b9bln6lNM/dPRmJaG6CYcT9oMmK1fRlZd01X8h/dRLaSvl+EhkgvPev5/8bqtcZ+ ckXoqS5L+Xz9Es1bdNtUz9K4y9Fh5m5r5u/1gWADeDHR1EOcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9mmQzDBBH+bBhtHTdkf8QHzuFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvZjhkYWY0MDctNzM5MC0z YTQ5LTkzMjEtYzc3NGExYjA0MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKVOBtFaApOhrZfAFSZ635PrTWWM0srfVfm/Is8+Ngt8gQBJ4RBbl+m YeKxU5m/wJeN1PBWXxwy1f3JKjjnzVyAG7/T1VmF1mD5WRKE7gYNWTjYpEuQLLL/ AyZAIUNO0VNnGRE/ASF2qgRM1HcjH8lRpAydGfIwuwlfDmSrEeSBZlykTOUEkLFR VFXXhzdkRhBnzVJdY0u5F2KC6V/yyAJyvmIllLV1u369mFi7rux+/klsN/AHBpG7 zkjezij57ay5UQpPU+X7nemvgjaElYSnv68ZQ/O8M8OjbBsd2zANlx0pr5ingPYs kq2bPQyBFHSqTtn2Mc9HA0d5OaTdy8M= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:38 2025 by rpki-client