$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa File: 4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json) Hash identifier: Sdt7q0oKcb6D5Ss0QT2mG8IlRIr4dUD6LYaU8v4k+kE= Subject key identifier: BA:2D:EB:F5:57:B9:04:F4:DA:15:97:30:14:0B:9C:4B:37:1B:0B:8A Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584B110C00806AAE68E81FDCDE80 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 395092 IP address blocks: 64.28.236.0/23 maxlen: 24 172.96.136.0/22 maxlen: 24 2607:a680:3::/48 maxlen: 48 2607:a680:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:00:80:6a:ae:68:e8:1f:dc:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=da8532d0-9766-4002-b833-573a7754825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:be:52:e2:80:3d:0d:d2:fb:7d:c3:e4:3a: 04:a5:04:9d:6d:e6:e7:58:61:71:4b:5e:fd:f7:b5: 1c:ef:c3:8b:e7:80:39:df:32:dd:36:a1:b1:65:f3: ac:6b:95:83:2b:c8:29:7a:01:53:44:c6:b5:2c:82: 3d:57:be:f9:5b:30:d1:78:10:e3:63:03:34:23:1f: 55:e9:3f:4f:45:c2:90:79:df:16:be:e5:5c:98:8e: f2:a8:a2:56:90:64:a2:03:1e:43:ec:a5:85:7e:6c: 4d:ef:68:4d:b0:ad:c3:d3:07:d6:6a:cf:c1:5b:24: a3:ef:18:37:f0:07:9f:fc:ad:4a:2a:9a:6d:c1:9d: 60:79:5d:64:d6:fc:a6:57:e8:41:cb:ba:3f:79:03: 6b:c1:17:1c:a6:e3:95:40:e5:13:5b:d2:12:82:64: e2:59:6e:96:7c:c3:fd:ff:d5:90:6b:df:9b:07:7d: 60:7b:4c:04:35:4a:95:0d:12:44:6e:89:d2:3a:51: 55:c1:50:01:9a:64:84:55:02:c1:0b:5b:62:09:a9: d8:29:8f:75:cb:7f:40:f4:f0:76:fc:4e:cb:05:12: 04:f8:96:d7:14:b4:eb:c7:c9:54:60:7d:50:ee:96: d5:f2:de:55:15:e0:4c:7a:43:f1:89:66:01:32:ea: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2D:EB:F5:57:B9:04:F4:DA:15:97:30:14:0B:9C:4B:37:1B:0B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 64.28.236.0/23 172.96.136.0/22 IPv6: 2607:a680:3::/48 2607:a680:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:47:51:d9:6e:27:8d:cc:67:15:a9:f8:87:70:89:9a:ab:7f: 3f:fc:6f:2e:1e:90:d4:3d:3d:be:d5:a0:76:0b:f2:ce:4b:07: 65:71:73:32:dd:ed:c9:3b:af:06:c9:aa:e1:25:6d:69:9c:ec: 4c:c5:57:aa:9e:36:1c:50:a3:ce:74:09:59:bf:1d:fa:a0:23: bc:b7:8d:ff:06:10:b7:ad:5a:c3:e5:c4:70:6c:34:61:48:f3: 7f:10:20:50:d2:45:3b:45:64:8b:39:1e:4d:ca:87:5a:89:5b: 37:9c:00:3e:a6:a1:d1:d0:00:91:ba:41:63:ce:87:29:63:2f: 54:1e:13:79:18:de:ea:d7:d4:b0:c6:f7:01:6a:e0:12:1b:a7: f7:73:95:0c:8c:7c:ae:01:b2:88:b0:8a:10:8a:31:af:58:15: e4:32:e1:34:f3:27:0a:43:e8:bd:81:35:5f:49:5a:cb:75:b2: 9d:52:e7:f0:3a:b2:7a:4f:ca:ea:67:0c:79:37:e3:45:f4:e9: 4b:44:ef:72:0d:3c:ca:7a:81:a1:96:a0:c5:f8:d5:b1:7f:cf: d4:ad:64:89:11:78:a9:b2:f2:54:57:8b:62:1d:1f:6d:00:ee: ea:a0:5b:32:23:9e:67:54:39:1e:e7:96:18:ec:d0:d9:6b:04: c0:fd:16:a9 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEsRDACAaq5o6B/c3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGE4NTMyZDAtOTc2Ni00MDAyLWI4MzMtNTczYTc3NTQ4MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniK+UuKAPQ3S+33D5DoEpQSdbebnWGFxS179 97Uc78OL54A53zLdNqGxZfOsa5WDK8gpegFTRMa1LII9V775WzDReBDjYwM0Ix9V 6T9PRcKQed8WvuVcmI7yqKJWkGSiAx5D7KWFfmxN72hNsK3D0wfWas/BWySj7xg3 8Aef/K1KKpptwZ1geV1k1vymV+hBy7o/eQNrwRccpuOVQOUTW9ISgmTiWW6WfMP9 /9WQa9+bB31ge0wENUqVDRJEbonSOlFVwVABmmSEVQLBC1tiCanYKY91y39A9PB2 /E7LBRIE+JbXFLTrx8lUYH1Q7pbV8t5VFeBMekPxiWYBMupEfQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFLot6/VXuQT02hWXMBQLnEs3GwuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP0dR2W4njcxn Fan4h3CJmqt/P/xvLh6Q1D09vtWgdgvyzksHZXFzMt3tyTuvBsmq4SVtaZzsTMVX qp42HFCjznQJWb8d+qAjvLeN/wYQt61aw+XEcGw0YUjzfxAgUNJFO0VkizkeTcqH WolbN5wAPqah0dAAkbpBY86HKWMvVB4TeRje6tfUsMb3AWrgEhun93OVDIx8rgGy iLCKEIoxr1gV5DLhNPMnCkPovYE1X0lay3WynVLn8Dqyek/K6mcMeTfjRfTpS0Tv cg08ynqBoZagxfjVsX/P1K1kiRF4qbLyVFeLYh0fbQDu6qBbMiOeZ1Q5HueWGOzQ 2WsEwP0WqQ== -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:36 2025 by rpki-client