$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5010530-aa95-388e-b462-5ecf26f82ac9.roa File: d5010530-aa95-388e-b462-5ecf26f82ac9.roa (raw, json) Hash identifier: N8UxMCDUf6W7lfTWNrj27nPHy3Mvlgf4dGqWt42zEtg= Subject key identifier: 83:3B:36:4F:5D:AA:4B:F6:9D:BD:41:FB:E6:71:C0:70:F4:57:D3:7F Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806FAA8C3F41BED34F06000 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5010530-aa95-388e-b462-5ecf26f82ac9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 172.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:fa:a8:c3:f4:1b:ed:34:f0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=faeaf3d5-5fc0-41b1-a11b-0875cb344360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d4:f5:76:d6:d6:ba:dd:7f:a7:52:b9:a7:b0: 36:33:d7:40:76:bd:ed:78:b1:c4:be:15:d7:5c:14: 58:a3:50:4c:3c:98:d5:57:63:74:fb:72:af:af:3f: b5:a7:d5:07:20:d0:de:7b:31:86:1b:0a:5b:73:96: 0c:69:cb:f4:35:02:2c:d5:1e:cf:be:9e:db:25:db: b0:db:99:be:37:f4:ff:2b:f6:e8:2d:e2:6c:cc:2d: 66:cd:c0:00:1f:8d:63:ba:d7:06:89:b3:a9:fb:03: 81:a0:e8:10:25:85:59:80:de:07:cf:31:7d:aa:c4: 67:2d:75:b5:ff:e5:a9:22:4d:b4:25:e7:1d:9b:81: ec:98:a1:bd:28:06:c5:9c:96:fa:1b:25:43:ac:9f: f8:72:63:eb:8d:27:36:11:05:3e:c8:72:cf:76:f2: a4:66:0a:88:db:02:a8:c7:d5:03:08:2a:10:23:e8: 38:a0:6f:eb:58:54:91:ca:1d:41:35:f5:a2:2a:79: 28:9f:50:9a:90:1f:64:d7:91:71:db:75:0e:74:00: a7:6f:52:40:a7:fc:97:21:04:ab:9d:68:55:42:6f: 4e:0d:c4:79:bb:7f:67:4d:ce:ab:f5:97:98:1e:ad: 1a:82:68:c4:98:83:80:c5:08:e6:8c:63:27:5c:57: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3B:36:4F:5D:AA:4B:F6:9D:BD:41:FB:E6:71:C0:70:F4:57:D3:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d5010530-aa95-388e-b462-5ecf26f82ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:93:c8:f8:bf:45:3e:5b:84:59:32:70:b1:f8:5f:1e:3f:71: 05:33:e8:40:65:38:e6:91:67:fe:7b:86:1b:2d:f2:12:86:a4: f9:af:3f:74:b7:63:d5:46:b0:f9:78:49:f8:bb:35:98:ec:2b: 4f:f9:27:03:9a:83:3a:51:ff:dc:a3:56:18:ef:aa:63:ff:9a: 0d:a2:8c:27:2a:44:1e:01:e3:c6:ab:a7:45:bf:57:d7:8f:59: 4f:2f:35:c3:a0:71:4c:80:46:c6:4f:b0:f7:54:8f:88:c1:15: 03:75:f5:dd:ea:e6:0b:6c:62:8b:a4:ef:0c:a5:bb:b8:d0:a0: ad:61:93:ba:24:38:e1:c6:84:03:b7:59:8f:bf:c2:30:f3:48: b5:2b:6c:c9:2f:d4:3d:7b:1c:73:68:2f:ec:ff:ed:1a:85:83: 27:98:a8:87:e8:0e:1e:8a:fc:4f:86:d4:93:b7:ed:0d:23:71: b6:88:aa:45:73:fb:c9:b3:ab:a1:d8:62:71:47:34:f7:c9:02: bb:09:b8:67:2c:bc:76:f6:11:76:8c:4c:1d:b8:99:90:29:ba: 3f:be:5e:68:af:0b:03:89:66:f3:a8:fe:f4:7d:db:10:04:bb: d3:ff:ed:77:ae:c7:50:bf:97:cf:ce:28:c3:6f:5c:67:85:08: 66:09:7e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvqow/Qb7TTwYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmFlYWYzZDUtNWZjMC00MWIxLWExMWItMDg3NWNiMzQ0MzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9T1dtbWut1/p1K5p7A2M9dAdr3teLHEvhXX XBRYo1BMPJjVV2N0+3Kvrz+1p9UHINDeezGGGwpbc5YMacv0NQIs1R7Pvp7bJduw 25m+N/T/K/boLeJszC1mzcAAH41jutcGibOp+wOBoOgQJYVZgN4HzzF9qsRnLXW1 /+WpIk20Jecdm4HsmKG9KAbFnJb6GyVDrJ/4cmPrjSc2EQU+yHLPdvKkZgqI2wKo x9UDCCoQI+g4oG/rWFSRyh1BNfWiKnkon1CakB9k15Fx23UOdACnb1JAp/yXIQSr nWhVQm9ODcR5u39nTc6r9ZeYHq0agmjEmIOAxQjmjGMnXFe/aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIM7Nk9dqkv2nb1B++ZxwHD0V9N/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDUwMTA1MzAtYWE5NS0z ODhlLWI0NjItNWVjZjI2ZjgyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiTyPi/RT5bhFkycLH4Xx4/cQUz6EBlOOaRZ/57hhst8hKGpPmvP3S3 Y9VGsPl4Sfi7NZjsK0/5JwOagzpR/9yjVhjvqmP/mg2ijCcqRB4B48arp0W/V9eP WU8vNcOgcUyARsZPsPdUj4jBFQN19d3q5gtsYouk7wylu7jQoK1hk7okOOHGhAO3 WY+/wjDzSLUrbMkv1D17HHNoL+z/7RqFgyeYqIfoDh6K/E+G1JO37Q0jcbaIqkVz +8mzq6HYYnFHNPfJArsJuGcsvHb2EXaMTB24mZApuj++XmivCwOJZvOo/vR92xAE u9P/7Xeux1C/l8/OKMNvXGeFCGYJfq8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:34 2025 by rpki-client