$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa File: 3f4cb637-1eff-370b-8e29-c856ec6fc314.roa (raw, json) Hash identifier: HyidMR/lSOR/xgilc2WxQqgBZ6LLwcMS6KUUPdm0kMM= Subject key identifier: 4E:09:A1:87:1B:1E:5D:DA:F7:D2:83:6F:C7:FC:91:E3:84:AE:AD:8C Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584AF0F154EACF2C119016F67300 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 208972 IP address blocks: 2600:3500:c21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:54:ea:cf:2c:11:90:16:f6:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=57bc106d-1a88-44d7-a022-9d54f86302bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:3d:88:99:06:a8:ad:af:9c:78:c8:12:e7: ac:be:d3:94:99:d3:09:b1:98:e4:c7:4c:bb:6f:18: 0e:60:bf:35:30:bc:fa:f2:0e:86:52:44:c8:44:60: 50:97:08:b6:3a:1c:9f:d3:77:11:e3:27:52:d2:69: b9:52:95:a4:98:c6:58:0f:21:45:46:fb:a0:ac:4b: cc:37:87:27:d1:03:f3:ed:e5:6a:64:77:61:9a:ab: c4:40:48:21:d7:d2:ac:09:0a:1a:31:6f:0c:ba:f3: b7:73:64:1e:f4:d1:11:89:63:81:ce:a7:67:41:51: a3:a1:0f:64:1a:01:a3:d7:9a:7c:f9:6a:cc:ab:09: 0d:c3:b7:8e:89:3c:f3:de:c5:68:f8:19:56:a7:ee: 7d:3b:d0:54:3a:90:55:11:c1:79:96:0a:61:6c:16: 45:46:00:18:7a:37:2c:3e:30:2f:e6:f6:10:40:f1: 82:3d:60:79:4f:4d:ad:76:68:7e:2e:88:be:db:8d: 7e:45:98:eb:df:65:70:16:47:38:e0:90:2c:8f:d3: 31:7e:89:1a:0b:35:53:4a:ba:6c:10:11:17:b9:b0: 95:24:2c:af:32:87:17:47:05:35:ce:17:4b:0a:a0: 74:68:c5:1d:40:0f:9d:b5:6b:98:91:91:33:59:e7: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:09:A1:87:1B:1E:5D:DA:F7:D2:83:6F:C7:FC:91:E3:84:AE:AD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8d:04:65:62:5e:95:79:08:5a:48:a4:dc:bc:af:1f:8a:3e: e3:89:51:e0:17:43:84:45:0e:46:8c:cd:46:1f:c5:a8:88:f4: 5c:84:5c:1b:c8:fa:5e:88:97:49:33:5d:6a:ac:97:6b:fa:b4: 7f:cb:d2:16:1a:c3:b9:98:88:0d:db:0d:46:c7:58:c6:09:09: 93:c0:77:36:ea:20:63:ac:1b:6d:2b:34:df:d2:d8:d7:87:7e: 46:e1:8a:d3:10:f3:9f:4d:f8:fe:54:04:c1:8a:8e:f6:f0:40: a5:21:95:11:32:4d:8a:c4:93:ce:e5:41:86:a6:f1:ac:21:49: 25:c1:19:27:19:e5:d2:31:a5:e6:5a:95:00:0d:48:41:2d:58: 84:ee:27:7c:a7:7b:88:b2:53:9c:93:41:0e:a3:91:bd:4a:3c: 99:88:26:a1:f7:49:e3:42:53:db:15:e0:01:04:1c:0a:db:80: ac:fb:7c:2e:7a:5b:2c:12:f6:a6:80:8a:e0:2d:9d:68:3b:7f: c5:63:07:22:15:02:67:c1:42:f2:1c:7a:32:10:33:79:7e:5a: d1:d6:8e:5f:0e:5c:0f:19:8a:60:b1:04:ab:5b:38:c1:46:b6: bc:0c:e3:62:11:b7:6b:44:af:b7:65:4b:22:55:81:4f:48:cc: c2:ca:d6:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VTqzywRkBb2cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTdiYzEwNmQtMWE4OC00NGQ3LWEwMjItOWQ1NGY4NjMwMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrg9iJkGqK2vnHjIEuesvtOUmdMJsZjkx0y7 bxgOYL81MLz68g6GUkTIRGBQlwi2Ohyf03cR4ydS0mm5UpWkmMZYDyFFRvugrEvM N4cn0QPz7eVqZHdhmqvEQEgh19KsCQoaMW8MuvO3c2Qe9NERiWOBzqdnQVGjoQ9k GgGj15p8+WrMqwkNw7eOiTzz3sVo+BlWp+59O9BUOpBVEcF5lgphbBZFRgAYejcs PjAv5vYQQPGCPWB5T02tdmh+Loi+241+RZjr32VwFkc44JAsj9MxfokaCzVTSrps EBEXubCVJCyvMocXRwU1zhdLCqB0aMUdQA+dtWuYkZEzWefUNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4JoYcbHl3a99KDb8f8keOErq2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvM2Y0Y2I2MzctMWVmZi0z NzBiLThlMjktYzg1NmVjNmZjMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqNBGViXpV5CFpIpNy8rx+KPuOJUeAXQ4RFDkaMzUYfxaiI9FyE XBvI+l6Il0kzXWqsl2v6tH/L0hYaw7mYiA3bDUbHWMYJCZPAdzbqIGOsG20rNN/S 2NeHfkbhitMQ859N+P5UBMGKjvbwQKUhlREyTYrEk87lQYam8awhSSXBGScZ5dIx peZalQANSEEtWITuJ3yne4iyU5yTQQ6jkb1KPJmIJqH3SeNCU9sV4AEEHArbgKz7 fC56WywS9qaAiuAtnWg7f8VjByIVAmfBQvIcejIQM3l+WtHWjl8OXA8ZimCxBKtb OMFGtrwM42IRt2tEr7dlSyJVgU9IzMLK1lM= -----END CERTIFICATE-----Generated at Mon Aug 25 21:29:34 2025 by rpki-client