$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f2c3d1db-1d37-3db5-9581-66c072e5dcb9.roa File: f2c3d1db-1d37-3db5-9581-66c072e5dcb9.roa (raw, json) Hash identifier: fgypnJWtib+GtkjGilXG+EQncsq2zn6HSKB4nPyeUls= Subject key identifier: 59:B1:A3:03:EF:95:B8:43:C6:A2:F7:D4:DC:CE:B7:1E:8D:11:07:9E Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584AF0F12F80678C6E0D0C651800 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f2c3d1db-1d37-3db5-9581-66c072e5dcb9.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 64289 IP address blocks: 2600:3500:c22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:2f:80:67:8c:6e:0d:0c:65:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=33507a8e-c3b8-488d-962f-d8013bacdfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:f9:1a:2c:5b:6a:af:c5:fd:b0:56:ca:12: c3:8e:a9:e6:bc:b1:e8:1a:94:42:f3:87:a3:55:17: fb:94:e3:24:a2:1a:42:85:f4:8d:dd:fd:2d:d1:12: 45:a1:03:a0:41:d3:49:ca:94:dd:b1:8d:13:44:ef: 0a:db:f7:22:50:2b:c0:9c:0c:19:41:ca:b1:85:0a: dc:16:54:51:90:4a:96:31:64:e7:84:35:e0:b8:04: 63:23:7b:68:50:c8:dc:b4:23:35:cf:de:01:5f:e7: 5e:5b:a9:51:0d:6a:30:13:2c:46:bd:35:92:2f:c6: 3c:96:47:4c:e9:46:b0:3c:9e:28:b7:3b:5e:74:48: 02:d1:24:4b:85:29:e6:44:64:e6:12:3b:98:76:81: 72:cc:b3:7f:6d:7c:5e:bd:1d:46:00:6a:20:c6:75: 11:98:58:ef:39:01:51:d6:3d:ee:6e:1e:6c:ec:13: d4:b3:3d:5e:28:61:73:e9:7b:b2:17:a4:ce:fb:66: 36:13:49:90:8b:f9:ab:18:2e:ec:38:3a:99:17:46: b2:ab:58:cf:81:5a:80:42:59:a8:08:23:c1:43:79: 7a:86:5d:a3:7b:d5:39:ca:00:7b:a3:ee:5e:64:e5: a0:1d:f7:05:4b:2b:eb:08:38:f0:d6:39:55:0a:7f: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:A3:03:EF:95:B8:43:C6:A2:F7:D4:DC:CE:B7:1E:8D:11:07:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f2c3d1db-1d37-3db5-9581-66c072e5dcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c5:e3:7d:7d:3c:3d:cc:88:7b:88:2e:40:dc:9d:9c:21:e6: 57:d4:fb:48:2a:cc:52:f6:cf:1c:2e:37:69:7c:82:60:57:f6: 34:68:09:de:19:d4:e3:bc:37:48:80:5c:fc:83:15:ee:9a:df: 89:eb:36:e2:b2:8a:e4:64:42:97:ba:03:80:b6:5e:2d:65:38: 69:6c:b4:81:b5:47:72:41:08:3d:93:46:2c:83:6d:9b:10:0d: f7:db:48:4b:01:f1:b7:3f:65:46:61:cd:2e:5e:75:b1:32:0f: a6:03:98:2b:97:df:8e:dc:d5:fd:a2:76:ad:93:3d:ad:a6:0a: 6a:07:b7:12:62:8f:4d:cd:a2:36:a5:06:78:b9:b0:a8:fa:b1: 62:e3:2a:af:b1:df:d0:8e:60:10:d5:93:fb:7e:03:39:05:04: b1:fc:8e:40:f1:ed:ff:54:dc:2d:f5:7e:1e:17:52:99:4a:7b: ec:ca:48:25:38:21:94:4f:33:d0:0c:ec:af:e2:3c:07:a7:9c: 44:e3:fe:cc:cc:5d:1b:42:06:2a:ca:9d:cf:74:2f:f0:b1:4c: 30:14:30:5c:54:fa:86:64:29:09:f8:d8:bc:d6:69:75:75:5e: c1:89:14:d9:bc:52:ed:da:12:ca:75:46:a4:23:76:82:02:dc: fb:90:52:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8S+AZ4xuDQxlGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzM1MDdhOGUtYzNiOC00ODhkLTk2MmYtZDgwMTNiYWNkZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdX5Gixbaq/F/bBWyhLDjqnmvLHoGpRC84ej VRf7lOMkohpChfSN3f0t0RJFoQOgQdNJypTdsY0TRO8K2/ciUCvAnAwZQcqxhQrc FlRRkEqWMWTnhDXguARjI3toUMjctCM1z94BX+deW6lRDWowEyxGvTWSL8Y8lkdM 6UawPJ4otztedEgC0SRLhSnmRGTmEjuYdoFyzLN/bXxevR1GAGogxnURmFjvOQFR 1j3ubh5s7BPUsz1eKGFz6XuyF6TO+2Y2E0mQi/mrGC7sODqZF0ayq1jPgVqAQlmo CCPBQ3l6hl2je9U5ygB7o+5eZOWgHfcFSyvrCDjw1jlVCn8aIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFmxowPvlbhDxqL31NzOtx6NEQeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvZjJjM2QxZGItMWQzNy0z ZGI1LTk1ODEtNjZjMDcyZTVkY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzF4319PD3MiHuILkDcnZwh5lfU+0gqzFL2zxwuN2l8gmBX9jRo Cd4Z1OO8N0iAXPyDFe6a34nrNuKyiuRkQpe6A4C2Xi1lOGlstIG1R3JBCD2TRiyD bZsQDffbSEsB8bc/ZUZhzS5edbEyD6YDmCuX347c1f2idq2TPa2mCmoHtxJij03N ojalBni5sKj6sWLjKq+x39COYBDVk/t+AzkFBLH8jkDx7f9U3C31fh4XUplKe+zK SCU4IZRPM9AM7K/iPAennETj/szMXRtCBirKnc90L/CxTDAUMFxU+oZkKQn42LzW aXV1XsGJFNm8Uu3aEsp1RqQjdoIC3PuQUqM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:13:39 2025 by rpki-client