$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa File: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json) Hash identifier: qdGRRsGeCYz+SpVjGZlp7mg02WLpSDhkCuBXMM8GwN0= Subject key identifier: 1E:BB:03:0E:77:E9:12:83:BF:AA:1B:94:69:F4:8B:B4:6D:07:64:B2 Certificate issuer: /CN=397724ba-b516-4bac-893a-fcaae9e60f35 Certificate serial: 010D0C9F4328584AE46115F1077071CA2D58B500 Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 11686 IP address blocks: 96.4.0.0/15 maxlen: 32 207.191.176.0/20 maxlen: 32 2610:128::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:15:f1:07:70:71:ca:2d:58:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=07f4b371-e86a-4f94-b07d-2e8801e0b8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:89:9d:f4:ce:21:c9:4b:24:09:10:97:7d: 89:05:20:3e:e1:a9:d7:b5:e0:47:ec:d9:a2:d6:18: c7:5e:bd:63:bb:cd:38:e1:b2:9d:10:7f:2e:5a:d2: 13:44:13:56:5a:c7:0a:43:11:30:52:86:aa:11:94: fe:d1:26:9d:06:d7:15:d9:4a:a2:15:e1:59:af:76: 05:75:82:dc:88:98:bb:11:68:b8:3e:a4:62:52:5a: e9:70:db:ee:48:23:7c:8b:60:2d:73:a9:f4:61:b9: 57:d1:e7:5a:5a:fe:17:a0:a9:f9:fe:db:ea:c9:1b: 5d:ae:1d:7b:7e:df:68:20:74:86:a5:c4:9a:bc:23: 7c:ce:36:32:0c:99:60:47:f1:86:d7:2d:f4:90:71: 60:dd:f0:bc:22:f3:7b:e9:25:ce:45:60:9f:f3:2a: f7:53:01:08:b0:bc:bb:63:46:50:c2:9a:16:3c:2e: 07:31:2f:18:44:e9:1c:50:fb:ff:d0:d1:d4:5a:a0: 05:17:26:22:2b:5b:ea:00:6e:c1:ad:02:05:c7:12: 4c:9b:31:d9:88:90:bd:e8:b7:8a:cb:7e:27:be:0f: dd:82:0d:42:20:3d:62:5d:ae:b3:7f:f8:a4:ee:40: d1:11:9d:74:a6:b6:ae:3b:a8:ed:60:8c:a8:b6:21: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BB:03:0E:77:E9:12:83:BF:AA:1B:94:69:F4:8B:B4:6D:07:64:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl X509v3 Authority Key Identifier: keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer sbgp-ipAddrBlock: critical IPv4: 96.4.0.0/15 207.191.176.0/20 IPv6: 2610:128::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:10:f5:aa:12:4f:49:f9:2f:5b:a1:2f:1c:e3:ce:53:6c:cc: 47:b4:7f:44:24:13:68:c7:0c:96:2f:4f:f7:c8:c0:45:40:55: f2:59:ef:f3:5e:39:85:0a:fb:31:e4:32:62:1e:d3:59:e0:de: 09:6b:9f:13:8a:8d:52:56:c0:80:49:48:e8:fb:cc:98:64:63: b0:47:73:9e:ef:0b:75:c0:7d:1b:c3:d6:c7:c7:48:a9:73:d7: f7:11:96:ac:16:57:fb:c1:5f:b4:04:85:05:17:b8:45:ef:d3: cb:d5:fe:59:ba:85:01:e2:c1:7a:3d:a2:f7:9e:44:74:f9:e4: b8:69:90:6b:e5:a5:81:0e:e3:88:6d:fc:d0:5e:74:44:de:59: b4:94:91:68:25:a0:35:44:d1:14:64:fe:04:9e:8f:6b:8a:b1: b1:3d:bf:55:69:6e:c4:b0:29:17:c8:8c:c9:75:19:eb:49:b6: fe:60:ab:56:01:de:fb:ff:fc:fd:77:a9:a6:10:37:a7:a8:50: a3:6a:22:fa:90:ac:39:73:c9:e8:06:11:19:80:ed:eb:c3:5e: a1:fb:1d:73:b8:7f:5b:35:cc:a2:15:11:68:d3:08:86:b1:f6: 9e:8c:a9:2a:e6:a0:2f:13:4e:6d:65:b9:54:bc:7d:63:3f:7d: 9b:70:67:5d -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWErkYRXxB3Bxyi1YtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYw ZjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MDdmNGIzNzEtZTg2YS00Zjk0LWIwN2QtMmU4ODAxZTBiOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5SJnfTOIclLJAkQl32JBSA+4anXteBH7Nmi 1hjHXr1ju8044bKdEH8uWtITRBNWWscKQxEwUoaqEZT+0SadBtcV2UqiFeFZr3YF dYLciJi7EWi4PqRiUlrpcNvuSCN8i2Atc6n0YblX0edaWv4XoKn5/tvqyRtdrh17 ft9oIHSGpcSavCN8zjYyDJlgR/GG1y30kHFg3fC8IvN76SXORWCf8yr3UwEIsLy7 Y0ZQwpoWPC4HMS8YROkcUPv/0NHUWqAFFyYiK1vqAG7BrQIFxxJMmzHZiJC96LeK y34nvg/dgg1CID1iXa6zf/ik7kDREZ10prauO6jtYIyotiEprwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFB67Aw536RKDv6oblGn0i7RtB2SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3 MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMmY0ZDY4YTItMDJlZS0z Yjc4LTk3YmQtZjhjZGJkMGY2MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk3NzI0YmEtYjUxNi00YmFjLTg5 M2EtZmNhYWU5ZTYwZjM1LzM5NzcyNGJhLWI1MTYtNGJhYy04OTNhLWZjYWFlOWU2 MGYzNS5jcmwwHwYDVR0jBBgwFoAUHUJ3xTGpN8znBa3PKztrP7fqLJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2Fh ZTllNjBmMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMBYAQDBATP v7AwDQQCAAIwBwMFACYQASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcxD1qhJPSfkvW6EvHOPOU2zMR7R/ RCQTaMcMli9P98jARUBV8lnv8145hQr7MeQyYh7TWeDeCWufE4qNUlbAgElI6PvM mGRjsEdznu8LdcB9G8PWx8dIqXPX9xGWrBZX+8FftASFBRe4Re/Ty9X+WbqFAeLB ej2i955EdPnkuGmQa+WlgQ7jiG380F50RN5ZtJSRaCWgNUTRFGT+BJ6Pa4qxsT2/ VWluxLApF8iMyXUZ60m2/mCrVgHe+//8/XepphA3p6hQo2oi+pCsOXPJ6AYRGYDt 68Neofsdc7h/WzXMohURaNMIhrH2noypKuagLxNObWW5VLx9Yz99m3BnXQ== -----END CERTIFICATE-----Generated at Sun Aug 24 07:11:15 2025 by rpki-client