$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964676e7-eec8-3829-8bd3-de362070baf6.roa File: 964676e7-eec8-3829-8bd3-de362070baf6.roa (raw, json) Hash identifier: OMFbYQG2KwxF8qDquN/Kg0j26ywb7u+b9/Dw73whCc0= Subject key identifier: 9A:76:F1:AB:BF:E4:5F:E2:F1:3F:9A:8C:2C:0C:23:D0:B7:AF:7C:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB95424EB263469E15F4F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964676e7-eec8-3829-8bd3-de362070baf6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 96.85.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:54:24:eb:26:34:69:e1:5f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0f52eec4-d14e-49be-8d53-4e4e3802db9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:aa:12:67:bc:ed:33:7a:9a:cf:95:78:f3: 41:a0:c2:8e:68:5a:82:cc:a6:c5:cf:37:8c:a5:c9: f4:ce:0b:5f:ea:d5:40:2c:2f:e8:c3:77:af:33:cf: 2f:59:2f:a2:f9:44:7c:53:19:f8:ac:d0:e0:3e:dd: b1:07:5b:5d:a5:f3:c9:8d:76:cb:b1:c6:15:a9:4d: a1:b6:38:eb:3d:d6:88:5b:63:b1:d3:b8:65:4c:e5: 1f:d5:39:fb:20:20:3c:65:fc:0d:57:7f:11:29:d7: 46:31:1a:62:d1:88:1d:69:91:0b:96:90:17:a8:9b: d8:ce:ee:15:ff:11:f9:aa:84:a2:d0:40:10:a7:f9: 6b:dd:2a:69:ff:84:81:fd:46:f7:44:42:4e:ea:eb: 13:28:60:da:a4:a4:a1:e8:4c:c8:04:01:5a:f2:f3: e0:fd:41:c0:02:c1:ea:8e:c8:7e:d6:d0:0d:9f:94: 52:eb:82:e4:a1:cd:53:6d:2e:a1:7f:7a:fe:f1:87: 96:f9:94:ca:8f:48:a0:9c:57:28:43:49:83:c0:51: 57:18:9a:58:ae:f4:c6:00:4c:6d:8c:46:1b:f1:13: 14:3c:17:6f:e2:b0:0a:94:7d:61:96:c3:7c:37:d1: 99:b7:1d:17:41:6e:d0:3d:76:59:90:2f:0c:0f:ac: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:F1:AB:BF:E4:5F:E2:F1:3F:9A:8C:2C:0C:23:D0:B7:AF:7C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/964676e7-eec8-3829-8bd3-de362070baf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.85.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:3c:1b:ec:31:71:e9:33:8f:41:21:1b:c6:eb:12:e4:44:3a: f0:42:6d:51:01:f2:8a:24:6b:ba:90:d3:e4:00:db:54:ec:f7: 57:95:92:21:03:c1:2b:c7:75:58:f6:e5:14:f1:fb:f7:03:6f: f6:e0:3e:0f:3a:c9:5a:a2:3a:a3:d9:1e:a4:a1:f2:af:f1:82: 76:b7:ba:59:37:89:20:6f:ee:47:81:da:13:58:3f:79:4f:b2: c7:1e:ac:a4:ea:77:8f:ff:d2:6b:a3:c2:d6:d6:45:38:d3:1f: 4f:43:0c:75:d3:ff:f5:1d:df:4f:e0:fe:a0:4a:1b:b8:1f:ba: 5f:9c:a6:37:ac:9a:8c:e3:70:b0:5b:33:63:b4:b7:ed:28:c9: 69:3d:6d:ef:c8:63:11:83:c0:0a:c4:e4:b1:f0:70:6b:6f:d7: 2f:48:23:6b:99:61:c9:8a:ca:b4:b8:5e:1c:c6:7f:08:c2:6b: 62:aa:ca:42:42:78:07:d3:c7:d3:b8:1c:b0:e4:f0:0d:6c:46: c2:05:0b:09:7f:9e:f3:5d:a7:0f:3f:e4:8b:0b:9f:a6:54:b3: c9:1e:67:c5:4b:42:05:85:14:d4:92:3f:ce:8a:48:2e:a3:26: b7:33:04:d4:71:83:06:c1:47:1f:f4:a2:e7:36:61:c6:cc:89: 5d:1f:48:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uVQk6yY0aeFfT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGY1MmVlYzQtZDE0ZS00OWJlLThkNTMtNGU0ZTM4MDJkYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgyqEme87TN6ms+VePNBoMKOaFqCzKbFzzeM pcn0zgtf6tVALC/ow3evM88vWS+i+UR8Uxn4rNDgPt2xB1tdpfPJjXbLscYVqU2h tjjrPdaIW2Ox07hlTOUf1Tn7ICA8ZfwNV38RKddGMRpi0YgdaZELlpAXqJvYzu4V /xH5qoSi0EAQp/lr3Spp/4SB/Ub3REJO6usTKGDapKSh6EzIBAFa8vPg/UHAAsHq jsh+1tANn5RS64Lkoc1TbS6hf3r+8YeW+ZTKj0ignFcoQ0mDwFFXGJpYrvTGAExt jEYb8RMUPBdv4rAKlH1hlsN8N9GZtx0XQW7QPXZZkC8MD6yV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp28au/5F/i8T+ajCwMI9C3r3wzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY0Njc2ZTctZWVjOC0z ODI5LThiZDMtZGUzNjIwNzBiYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYFUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ48G+wxcekzj0EhG8brEuREOvBCbVEB8ooka7qQ0+QA21Ts91eVkiED wSvHdVj25RTx+/cDb/bgPg86yVqiOqPZHqSh8q/xgna3ulk3iSBv7keB2hNYP3lP sscerKTqd4//0mujwtbWRTjTH09DDHXT//Ud30/g/qBKG7gful+cpjesmozjcLBb M2O0t+0oyWk9be/IYxGDwArE5LHwcGtv1y9II2uZYcmKyrS4XhzGfwjCa2KqykJC eAfTx9O4HLDk8A1sRsIFCwl/nvNdpw8/5IsLn6ZUs8keZ8VLQgWFFNSSP86KSC6j JrczBNRxgwbBRx/0ouc2YcbMiV0fSPY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:05 2025 by rpki-client