$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5792bf-53d3-3a54-a6ce-17523a316263.roa File: da5792bf-53d3-3a54-a6ce-17523a316263.roa (raw, json) Hash identifier: Ov3g68974Qv+8T2XZe8+ETA3tLQV0/oivg9Qp1evlxY= Subject key identifier: 71:A2:D5:81:61:95:B5:35:7D:87:23:7F:12:01:0B:AD:2C:37:47:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB90C78ED347AFFDF08F300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5792bf-53d3-3a54-a6ce-17523a316263.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 20214 IP address blocks: 96.124.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:0c:78:ed:34:7a:ff:df:08:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bd942e6f-c236-454f-9a0b-68f2ac69a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:14:44:00:b2:13:27:4e:68:07:0b:c5:27: 93:5c:b4:50:ca:a4:da:74:a9:a0:4d:2e:77:f4:59: bc:7b:41:01:d5:96:19:81:53:d3:83:5e:10:ad:d4: 19:a9:03:fd:89:04:92:90:18:64:ed:dd:7b:97:ec: 23:ad:03:2c:19:2d:95:d4:98:1f:09:03:ce:9c:b8: 69:ea:9c:10:c1:ab:df:cf:36:89:53:a8:24:27:7e: 30:f4:be:56:d1:28:79:ac:51:64:f9:cf:fa:e7:c2: 1a:2c:38:71:dd:49:6c:c2:ed:08:fa:e3:79:f6:98: 4e:49:c8:37:a4:c7:14:e0:12:03:1f:7f:92:01:df: 85:5b:40:25:f2:d1:c9:4c:3d:4e:f9:6f:33:cc:ef: c5:c9:88:40:5d:9d:57:17:37:a1:8a:e8:3e:7b:d2: 1b:a5:38:d9:99:9a:33:47:d9:50:7f:b8:9b:83:53: 0e:08:d8:20:4f:f8:13:60:e1:69:63:62:cc:fa:f4: 51:dd:f3:64:2f:c2:00:83:cc:10:9b:cd:8f:d7:99: d3:23:74:e9:4f:c1:f6:7a:8e:02:0d:96:41:7e:4b: e2:25:33:89:6e:d0:15:c9:ca:6f:a1:c9:2b:92:40: 5f:34:3c:c1:29:5f:d0:05:78:0b:53:d8:41:48:2e: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A2:D5:81:61:95:B5:35:7D:87:23:7F:12:01:0B:AD:2C:37:47:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5792bf-53d3-3a54-a6ce-17523a316263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2f:eb:39:a4:8d:d4:19:2d:59:c2:58:ae:69:c1:4d:1b:92: be:a3:83:37:a9:49:49:bb:35:c1:f6:e0:3a:ab:51:5d:79:e3: 0c:30:8c:e5:87:1f:9c:42:6a:4a:ff:18:72:34:3b:75:a4:ee: 62:77:00:4e:40:0c:b1:2e:69:93:01:d6:23:50:f7:7c:9a:4f: 36:bb:11:9e:43:ea:9a:83:36:c9:9e:90:2e:88:e4:0b:15:74: a1:6d:1b:ad:30:7d:db:44:0c:ee:33:a9:73:64:44:d7:f1:f0: 27:d5:c4:56:87:45:35:65:9a:49:d5:ed:9d:95:d6:cd:5c:32: b2:d7:56:81:0b:7f:f8:93:bf:9b:6e:ed:48:90:59:46:55:2b: e3:62:2f:a1:e8:29:7a:a9:26:9c:18:3b:51:02:3a:85:02:cc: 0f:1e:a7:8c:cf:3c:d5:56:53:3c:37:08:80:42:8d:28:5c:e8: 90:b6:12:22:67:ea:33:8a:e8:5d:5d:2b:1e:33:c9:16:c1:64: 59:4e:8f:8d:a4:5a:40:28:50:f9:d0:c7:62:4b:b6:4d:22:11: b2:17:2f:94:dd:76:a6:b5:af:77:13:4c:13:08:da:c8:6b:51: e2:ba:9b:37:15:de:b0:be:1c:d7:5c:d4:14:33:6d:e8:06:08: 1b:af:19:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQx47TR6/98I8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmQ5NDJlNmYtYzIzNi00NTRmLTlhMGItNjhmMmFjNjlhNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq4URACyEydOaAcLxSeTXLRQyqTadKmgTS53 9Fm8e0EB1ZYZgVPTg14QrdQZqQP9iQSSkBhk7d17l+wjrQMsGS2V1JgfCQPOnLhp 6pwQwavfzzaJU6gkJ34w9L5W0Sh5rFFk+c/658IaLDhx3Ulswu0I+uN59phOScg3 pMcU4BIDH3+SAd+FW0Al8tHJTD1O+W8zzO/FyYhAXZ1XFzehiug+e9IbpTjZmZoz R9lQf7ibg1MOCNggT/gTYOFpY2LM+vRR3fNkL8IAg8wQm82P15nTI3TpT8H2eo4C DZZBfkviJTOJbtAVycpvockrkkBfNDzBKV/QBXgLU9hBSC6YrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGi1YFhlbU1fYcjfxIBC60sN0ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE1NzkyYmYtNTNkMy0z YTU0LWE2Y2UtMTc1MjNhMzE2MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwv6zmkjdQZLVnCWK5pwU0bkr6jgzepSUm7NcH24DqrUV154wwwjOWH H5xCakr/GHI0O3Wk7mJ3AE5ADLEuaZMB1iNQ93yaTza7EZ5D6pqDNsmekC6I5AsV dKFtG60wfdtEDO4zqXNkRNfx8CfVxFaHRTVlmknV7Z2V1s1cMrLXVoELf/iTv5tu 7UiQWUZVK+NiL6HoKXqpJpwYO1ECOoUCzA8ep4zPPNVWUzw3CIBCjShc6JC2EiJn 6jOK6F1dKx4zyRbBZFlOj42kWkAoUPnQx2JLtk0iEbIXL5Tddqa1r3cTTBMI2shr UeK6mzcV3rC+HNdc1BQzbegGCBuvGcE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:35 2025 by rpki-client