$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96e71da7-5535-3a8d-8fa6-9e12e0b3fd52.roa File: 96e71da7-5535-3a8d-8fa6-9e12e0b3fd52.roa (raw, json) Hash identifier: GYv22wzl7MPbeTQFmjDR09LlD8Me4C0QpB38zE9owzU= Subject key identifier: C5:37:B3:4C:AA:A8:93:AF:40:93:DD:49:5E:63:BA:15:29:40:3B:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B004C2F5420350AB702CCD800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96e71da7-5535-3a8d-8fa6-9e12e0b3fd52.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 7342 IP address blocks: 2620:74:ad:101::7/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2f:54:20:35:0a:b7:02:cc:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=3205d525-4b60-4a09-b75a-5515963811d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:f5:2e:dc:26:63:46:95:fa:dd:f5:75:8b: 90:4b:48:77:8d:14:d4:8f:fc:64:46:6f:70:3a:6d: 48:cb:ea:6d:df:55:3c:c9:c2:60:5e:45:39:d7:72: 70:56:f7:32:36:1b:c1:f4:64:79:46:2b:71:be:01: 79:6d:79:21:2e:b3:4f:a0:89:dd:e5:cc:1e:98:ae: 23:80:20:9f:52:e1:87:6b:9d:b6:40:f3:99:c8:1a: c4:22:46:9b:69:85:7a:b6:d8:5d:91:23:4c:e1:64: b9:ca:a4:4c:0c:5c:9e:91:59:fc:6b:8f:a9:60:58: 8c:f4:61:f9:cb:14:10:95:3d:20:b6:bc:96:22:ea: d7:90:77:33:54:52:40:cf:02:c2:89:12:5f:08:c4: 62:6e:b0:3d:c5:a5:02:ff:58:5d:0a:1e:c1:71:99: a4:9a:9b:2c:29:6a:9a:98:43:f1:56:87:80:19:8e: 5e:a3:75:f5:02:d5:39:81:b1:83:d4:30:81:ef:35: 4a:92:e0:0e:c5:39:87:57:38:d6:7c:2b:52:3c:87: c5:ce:4e:28:cd:b5:f1:cc:87:9c:48:13:6c:29:31: a8:42:05:77:f8:2e:3f:25:63:58:74:4c:98:66:73: 9d:86:d2:06:48:36:42:d0:bf:b5:fc:3f:f9:d3:d8: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:B3:4C:AA:A8:93:AF:40:93:DD:49:5E:63:BA:15:29:40:3B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/96e71da7-5535-3a8d-8fa6-9e12e0b3fd52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ad:101:0:0:0:7/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a5:b6:f9:72:92:56:d5:90:c8:a1:13:dd:10:2e:dc:fd:1c: cc:b1:74:d3:4f:88:52:aa:30:76:09:8f:2d:20:18:ec:bc:69: 36:ef:57:46:a8:9a:06:a5:a8:b8:e4:fb:06:92:ce:36:d6:b8: 8c:2e:18:30:37:32:97:3a:3d:73:2a:ef:60:3e:c6:5f:6c:40: 9f:ad:94:4c:5c:60:41:d5:83:c1:5f:70:1d:e1:e4:40:25:5b: 0a:3b:8f:df:60:3e:07:03:05:99:f3:17:52:57:bd:ff:2a:b2: 11:8e:89:ec:36:69:eb:05:f1:80:5b:29:ba:c9:f2:48:95:8c: 6a:5a:6f:af:97:35:a0:fa:4f:8d:3f:9e:bf:5a:0f:12:c8:d0: 17:b4:05:0d:ed:ee:9a:b9:38:36:a6:81:cd:3c:ae:e2:c9:f9: 0c:50:a8:cb:cd:59:16:d8:64:3b:8b:9f:e1:81:41:fd:61:57: 55:91:35:d6:ae:2e:12:e8:ae:ce:c5:dc:84:19:c4:0a:b7:26: b7:e5:98:4f:de:c2:5e:ac:c3:3e:b9:2e:7c:0c:ff:23:39:1c: 65:b0:3c:d0:49:4c:b1:42:37:a1:81:43:ca:f5:a2:08:ab:98: c5:ca:e9:99:27:44:58:72:5a:43:7b:3a:67:b7:53:53:c1:03: e0:68:94:3f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATC9UIDUKtwLM2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzIwNWQ1MjUtNGI2MC00YTA5LWI3NWEtNTUxNTk2MzgxMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6n1LtwmY0aV+t31dYuQS0h3jRTUj/xkRm9w Om1Iy+pt31U8ycJgXkU513JwVvcyNhvB9GR5RitxvgF5bXkhLrNPoInd5cwemK4j gCCfUuGHa522QPOZyBrEIkabaYV6tthdkSNM4WS5yqRMDFyekVn8a4+pYFiM9GH5 yxQQlT0gtryWIurXkHczVFJAzwLCiRJfCMRibrA9xaUC/1hdCh7BcZmkmpssKWqa mEPxVoeAGY5eo3X1AtU5gbGD1DCB7zVKkuAOxTmHVzjWfCtSPIfFzk4ozbXxzIec SBNsKTGoQgV3+C4/JWNYdEyYZnOdhtIGSDZC0L+1/D/509i/LQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMU3s0yqqJOvQJPdSV5juhUpQDsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTZlNzFkYTctNTUzNS0z YThkLThmYTYtOWUxMmUwYjNmZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdACt AQEAAAAAAAAABzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAspbb5cpJW1ZDIoRPdEC7c/RzMsXTTT4hSqjB2 CY8tIBjsvGk271dGqJoGpai45PsGks421riMLhgwNzKXOj1zKu9gPsZfbECfrZRM XGBB1YPBX3Ad4eRAJVsKO4/fYD4HAwWZ8xdSV73/KrIRjonsNmnrBfGAWym6yfJI lYxqWm+vlzWg+k+NP56/Wg8SyNAXtAUN7e6auTg2poHNPK7iyfkMUKjLzVkW2GQ7 i5/hgUH9YVdVkTXWri4S6K7OxdyEGcQKtya35ZhP3sJerMM+uS58DP8jORxlsDzQ SUyxQjehgUPK9aIIq5jFyumZJ0RYclpDezpnt1NTwQPgaJQ/ -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:09 2025 by rpki-client