$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87ff3fcc-5343-306d-b97d-062728af876d.roa File: 87ff3fcc-5343-306d-b97d-062728af876d.roa (raw, json) Hash identifier: 2NfWtYMzfDwMNTSY6N88KnBsEUeg0K5lzQ/mjAWUr7o= Subject key identifier: 3E:DE:04:03:55:50:72:CC:7B:7A:7E:A4:C4:DF:A6:18:9D:F5:0D:69 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C07E590E6A32C019BCC00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87ff3fcc-5343-306d-b97d-062728af876d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 172.96.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:07:e5:90:e6:a3:2c:01:9b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=1f6beb61-e097-470b-894d-8b3e531cbf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:ce:29:e5:0b:2a:5f:0c:d1:27:80:c4:58: 28:64:4a:f2:11:5b:04:41:67:ed:88:e1:c5:c1:16: 26:ed:93:b8:fe:c8:89:2c:79:61:ed:05:e6:31:8a: 7a:bc:3b:1e:54:e5:df:0e:d6:4f:bd:57:e5:51:62: f6:4f:36:1f:d7:31:e8:d0:9f:f0:e3:b6:60:2f:5e: bc:b1:0b:83:42:78:9f:d4:36:02:4e:4e:49:ae:33: 0b:2d:70:f2:21:5f:38:63:55:91:a8:d5:f4:5f:81: 63:9e:6f:7a:37:10:b9:11:65:1f:68:7f:00:ec:5b: 55:90:ce:69:e7:c0:48:57:d8:01:54:a5:77:45:75: 2c:0e:83:a1:96:a7:37:b9:a4:0e:d5:ee:3b:10:1c: ab:85:2d:d1:ca:49:7c:0a:c5:0f:54:ba:29:ba:a4: de:87:47:a2:d9:e0:08:6f:5a:2b:06:ba:04:3e:a3: 21:80:4f:b5:3f:b8:35:c5:11:80:79:a4:c0:03:53: cc:c3:aa:d3:01:34:e3:28:db:c1:21:3b:27:85:05: 90:c5:a0:1c:13:68:ab:bd:83:32:56:b6:12:15:3d: 41:19:26:e8:cc:26:77:cf:59:75:93:39:de:70:9f: c1:b7:aa:83:70:91:fa:da:7c:ea:ed:44:27:93:b5: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DE:04:03:55:50:72:CC:7B:7A:7E:A4:C4:DF:A6:18:9D:F5:0D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/87ff3fcc-5343-306d-b97d-062728af876d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:e1:25:b9:1e:e1:05:17:e5:00:38:68:a4:26:0f:e3:03:6b: e4:72:af:b3:f9:4f:ae:67:a4:c9:fa:92:d3:f2:98:23:1c:d2: 8c:3a:b7:73:da:ba:26:2a:07:cf:cc:40:9c:31:c0:12:86:77: a3:a4:1a:5b:1d:56:d4:48:00:4f:7d:45:10:d6:ab:af:43:1e: 99:71:d2:86:97:de:3b:00:33:b1:08:07:1c:79:94:ed:a2:67: f0:9f:ac:75:e3:34:87:88:a1:59:a1:9f:d9:7f:ae:e6:c9:6c: e8:a7:3d:8e:c1:4d:2e:69:48:45:35:b3:0f:2b:5d:0e:71:1e: 8a:5b:6a:c0:e4:d9:26:19:fa:4b:a1:3c:f5:55:58:b6:60:8e: 7b:bc:cc:db:98:ba:aa:2b:26:b4:b3:04:33:44:c1:d5:b6:e6: 94:d1:e6:04:1e:11:a6:f0:93:01:26:33:a5:10:31:8f:d0:e2: fd:fc:c9:cc:ae:20:f4:55:87:15:3f:fb:8f:19:2b:af:25:ad: bb:02:82:11:0f:5c:86:cc:5f:c1:72:e3:30:7d:74:0d:17:5a: b1:a8:4f:7e:2c:18:e8:2d:e0:d0:60:fb:66:4f:64:e5:78:84: 8f:55:ed:b7:27:e3:f5:46:76:00:9f:68:ad:fd:ed:e6:7e:59: ee:d0:60:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAflkOajLAGbzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk MWY2YmViNjEtZTA5Ny00NzBiLTg5NGQtOGIzZTUzMWNiZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo3OKeULKl8M0SeAxFgoZEryEVsEQWftiOHF wRYm7ZO4/siJLHlh7QXmMYp6vDseVOXfDtZPvVflUWL2TzYf1zHo0J/w47ZgL168 sQuDQnif1DYCTk5JrjMLLXDyIV84Y1WRqNX0X4Fjnm96NxC5EWUfaH8A7FtVkM5p 58BIV9gBVKV3RXUsDoOhlqc3uaQO1e47EByrhS3Rykl8CsUPVLopuqTeh0ei2eAI b1orBroEPqMhgE+1P7g1xRGAeaTAA1PMw6rTATTjKNvBITsnhQWQxaAcE2irvYMy VrYSFT1BGSbozCZ3z1l1kznecJ/Bt6qDcJH62nzq7UQnk7XxXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7eBANVUHLMe3p+pMTfphid9Q1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODdmZjNmY2MtNTM0My0z MDZkLWI5N2QtMDYyNzI4YWY4NzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXhJbke4QUX5QA4aKQmD+MDa+Ryr7P5T65npMn6ktPymCMc0ow6t3Pa uiYqB8/MQJwxwBKGd6OkGlsdVtRIAE99RRDWq69DHplx0oaX3jsAM7EIBxx5lO2i Z/CfrHXjNIeIoVmhn9l/rubJbOinPY7BTS5pSEU1sw8rXQ5xHopbasDk2SYZ+kuh PPVVWLZgjnu8zNuYuqorJrSzBDNEwdW25pTR5gQeEabwkwEmM6UQMY/Q4v38ycyu IPRVhxU/+48ZK68lrbsCghEPXIbMX8Fy4zB9dA0XWrGoT34sGOgt4NBg+2ZPZOV4 hI9V7bcn4/VGdgCfaK397eZ+We7QYKE= -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:20 2025 by rpki-client