$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a0006fa-c3c6-3caa-add3-565143d4b224.roa File: 0a0006fa-c3c6-3caa-add3-565143d4b224.roa (raw, json) Hash identifier: b6Bw02VtfXtUQdP4Ls9BJesXxWhQb4AutUZoQko7Q3I= Subject key identifier: BF:F6:F2:21:A9:88:4E:14:09:6B:5F:E3:7E:41:2E:B0:E3:A3:4F:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9ED8292ADC4831DEC4580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a0006fa-c3c6-3caa-add3-565143d4b224.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 96.110.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ed:82:92:ad:c4:83:1d:ec:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1f5e5d84-7835-4e2f-840c-7d16a2b3f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:a7:85:54:79:12:c4:03:44:b1:47:95:94: 5f:34:ae:1b:f8:94:da:bc:d1:2a:48:0e:94:9f:8f: c2:dc:db:3a:86:89:c8:4d:10:ca:cd:d8:12:ec:30: 35:6c:54:0f:9e:0a:a4:9f:4e:d1:c0:07:19:3c:a9: 43:17:ff:2e:aa:90:a6:8b:8e:02:ac:1c:4e:b8:fd: 7d:27:f9:c7:45:fb:3b:47:58:85:de:50:f5:1a:d6: 90:34:46:da:61:b0:da:e8:de:8b:39:10:8e:20:11: 39:a6:c6:da:d8:e3:62:6c:67:b4:bf:95:3c:9e:ac: 81:6d:28:2e:eb:b0:fc:b3:87:c5:4a:e5:80:9f:33: 38:80:20:6a:93:d2:47:16:10:aa:8f:70:09:1e:2c: c1:83:4c:d2:44:ed:46:26:db:25:5f:71:0b:9f:05: 2e:fa:57:8a:ad:c0:d5:4d:a6:d3:83:de:5f:27:96: 56:71:0d:88:1d:e4:00:44:f7:ad:c5:c9:8a:de:1f: 86:15:7c:ce:ed:2d:34:41:f4:c9:a0:6c:8b:ed:17: 81:ea:f2:ec:93:de:b6:80:ff:9f:d8:22:db:8f:47: ec:cb:72:9d:b5:8c:31:6f:ac:2f:47:15:0c:58:54: 8c:76:7e:a4:25:b1:32:2a:86:cc:76:6d:81:21:ab: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F6:F2:21:A9:88:4E:14:09:6B:5F:E3:7E:41:2E:B0:E3:A3:4F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a0006fa-c3c6-3caa-add3-565143d4b224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.110.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:68:4a:c2:c3:03:80:3b:3d:3a:7d:cd:9a:cd:4f:61:aa:1a: dd:0a:ea:96:57:d6:70:a4:b3:c2:97:eb:d4:e4:46:db:d2:e9: 04:18:37:9f:09:a3:c5:35:36:ef:be:2b:aa:72:8f:e8:e7:6c: 9f:f4:7b:3b:7e:8f:13:da:64:ea:7f:e8:fc:96:52:44:7c:fd: ae:94:94:c0:ab:6d:6d:34:81:81:57:fb:1d:99:ac:b3:a4:9b: 95:28:ea:6e:fd:78:f9:80:bd:41:b3:43:31:a6:92:2c:a4:c9: b1:a1:1c:25:f2:6a:12:5e:83:e1:96:16:e9:b7:5a:f2:db:fd: 08:60:ef:c6:2c:28:3b:cd:a5:9a:a3:83:34:71:05:9e:31:02: 3a:37:7a:fa:53:5f:47:3d:dc:97:a0:e6:68:62:32:d2:cb:83: 45:9a:80:e9:e5:24:68:a8:07:78:54:69:a7:00:e9:8b:53:6b: 2b:dd:d8:43:f1:d6:2e:10:25:2c:c4:52:20:c8:9b:91:50:19: 18:9f:c9:eb:67:c8:8a:f3:0d:b0:cb:b5:a5:ff:16:1e:9e:e9: d6:2c:db:e1:18:09:07:1e:29:39:d2:71:8a:58:0e:a7:ca:b3: 46:c6:6f:45:fa:ed:90:fb:94:96:f8:ec:57:d8:2e:c8:92:2e: b5:a9:dd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ue2Ckq3Egx3sRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWY1ZTVkODQtNzgzNS00ZTJmLTg0MGMtN2QxNmEyYjNmNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7KnhVR5EsQDRLFHlZRfNK4b+JTavNEqSA6U n4/C3Ns6honITRDKzdgS7DA1bFQPngqkn07RwAcZPKlDF/8uqpCmi44CrBxOuP19 J/nHRfs7R1iF3lD1GtaQNEbaYbDa6N6LORCOIBE5psba2ONibGe0v5U8nqyBbSgu 67D8s4fFSuWAnzM4gCBqk9JHFhCqj3AJHizBg0zSRO1GJtslX3ELnwUu+leKrcDV TabTg95fJ5ZWcQ2IHeQARPetxcmK3h+GFXzO7S00QfTJoGyL7ReB6vLsk962gP+f 2CLbj0fsy3KdtYwxb6wvRxUMWFSMdn6kJbEyKobMdm2BIasVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/28iGpiE4UCWtf435BLrDjo0+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGEwMDA2ZmEtYzNjNi0z Y2FhLWFkZDMtNTY1MTQzZDRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYG7qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBoSsLDA4A7PTp9zZrNT2GqGt0K6pZX1nCks8KX69TkRtvS6QQYN58J o8U1Nu++K6pyj+jnbJ/0ezt+jxPaZOp/6PyWUkR8/a6UlMCrbW00gYFX+x2ZrLOk m5Uo6m79ePmAvUGzQzGmkiykybGhHCXyahJeg+GWFum3WvLb/Qhg78YsKDvNpZqj gzRxBZ4xAjo3evpTX0c93Jeg5mhiMtLLg0WagOnlJGioB3hUaacA6YtTayvd2EPx 1i4QJSzEUiDIm5FQGRifyetnyIrzDbDLtaX/Fh6e6dYs2+EYCQceKTnScYpYDqfK s0bGb0X67ZD7lJb47FfYLsiSLrWp3Vg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:29 2025 by rpki-client