$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0c3de7a-06a3-35d1-8adf-5cac6f9efe83.roa File: b0c3de7a-06a3-35d1-8adf-5cac6f9efe83.roa (raw, json) Hash identifier: HFce9V3JBkAFYA7ORIReBS5aVmq51llpGoO3rFDssFQ= Subject key identifier: 51:E5:15:57:08:A5:7D:B8:FD:B3:73:E1:18:A3:D6:A1:6A:6D:B2:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B9E07CF33A2149A4B97EE2CB0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0c3de7a-06a3-35d1-8adf-5cac6f9efe83.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 401152 IP address blocks: 96.126.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cf:33:a2:14:9a:4b:97:ee:2c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4378eb11-03ef-4ac8-800a-06fa0214b004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fa:55:28:18:66:52:29:b0:3b:4d:e6:59:f3: 5a:b5:7c:96:2b:30:9a:13:38:39:7e:a1:20:92:b2: 12:eb:58:4c:d3:52:bf:75:fb:bd:1e:99:42:ac:e2: ef:2e:0e:bc:77:33:65:9f:28:e4:46:62:28:42:71: c0:66:a9:44:c3:a2:23:46:28:65:50:3b:16:74:6a: de:7a:00:4f:53:1a:d2:3f:66:ad:17:77:4b:7f:44: 76:f8:b2:10:19:1c:46:fa:4d:1a:d9:23:c0:18:4b: 7f:fc:b2:21:bd:47:b1:58:42:cc:3f:ed:9f:aa:91: 9c:52:d1:4c:2c:d0:9c:6b:c9:5c:cc:3d:ac:b4:c3: 7e:d7:5c:34:74:7d:ad:cc:28:bb:32:31:6b:42:4d: 20:bd:db:05:8a:55:29:6c:73:5d:d7:bd:b1:25:2c: c5:76:99:c8:bf:72:e3:5f:eb:ab:e7:c5:18:c9:3a: 68:bb:dd:4d:c9:93:2a:45:47:df:97:12:e5:f6:d4: 7e:d7:10:06:8b:5a:b6:32:55:dc:89:d7:99:04:84: 5f:48:31:3a:72:11:43:8a:6c:0e:98:cf:10:d3:d6: 5a:42:06:7e:7c:6b:7c:fe:16:e3:da:a1:e0:07:93: 23:b1:69:6b:9c:f7:94:9a:b0:ab:f1:89:69:13:ea: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E5:15:57:08:A5:7D:B8:FD:B3:73:E1:18:A3:D6:A1:6A:6D:B2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0c3de7a-06a3-35d1-8adf-5cac6f9efe83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:a0:92:e9:5e:56:6e:08:6a:6e:05:32:97:4c:cb:47:11: cd:a9:95:1e:1d:56:4f:aa:db:4b:c6:e6:cb:07:ad:66:51:14: b1:a6:f3:04:2c:5d:53:d5:d4:61:ac:86:34:dd:ef:af:41:bd: ed:ba:a7:04:f4:e8:2f:55:05:20:91:3d:1a:71:45:c7:d5:4a: 09:44:e0:f8:71:bf:d6:c0:27:16:b6:18:9e:6d:f7:18:83:b2: 39:24:40:45:c5:13:37:03:fa:24:7b:d2:bc:22:3d:43:e1:ac: 16:e8:0c:03:e9:28:07:6e:70:1e:22:9b:a5:e1:37:b1:1e:62: 12:c3:bb:13:a1:56:40:91:f6:a0:2b:35:ec:42:9f:08:17:6b: 54:82:4c:2b:74:2e:a2:7a:e2:87:8e:b4:29:82:75:80:f1:2f: d9:71:af:1b:39:3f:f6:e2:a0:b1:5e:00:6f:a8:82:0e:4f:66: 61:03:bf:70:23:d3:9d:75:0f:52:98:47:91:b0:a3:26:cb:20: 2f:25:38:3b:0a:7c:ca:49:a3:a4:c1:6c:26:08:05:e1:c8:11: f7:57:e0:0e:45:56:c0:e3:12:59:95:7c:22:be:33:bc:3a:b0: 02:a6:05:9f:41:81:1e:03:24:a6:59:e2:e7:6d:80:9c:e5:2c: 20:d7:6e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB88zohSaS5fuLLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDM3OGViMTEtMDNlZi00YWM4LTgwMGEtMDZmYTAyMTRiMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPpVKBhmUimwO03mWfNatXyWKzCaEzg5fqEg krIS61hM01K/dfu9HplCrOLvLg68dzNlnyjkRmIoQnHAZqlEw6IjRihlUDsWdGre egBPUxrSP2atF3dLf0R2+LIQGRxG+k0a2SPAGEt//LIhvUexWELMP+2fqpGcUtFM LNCca8lczD2stMN+11w0dH2tzCi7MjFrQk0gvdsFilUpbHNd172xJSzFdpnIv3Lj X+ur58UYyTpou91NyZMqRUfflxLl9tR+1xAGi1q2MlXcideZBIRfSDE6chFDimwO mM8Q09ZaQgZ+fGt8/hbj2qHgB5MjsWlrnPeUmrCr8YlpE+rT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHlFVcIpX24/bNz4Rij1qFqbbKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjBjM2RlN2EtMDZhMy0z NWQxLThhZGYtNWNhYzZmOWVmZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYH6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnRoJLpXlZuCGpuBTKXTMtHEc2plR4dVk+q20vG5ssHrWZRFLGm8wQs XVPV1GGshjTd769Bve26pwT06C9VBSCRPRpxRcfVSglE4Phxv9bAJxa2GJ5t9xiD sjkkQEXFEzcD+iR70rwiPUPhrBboDAPpKAducB4im6XhN7EeYhLDuxOhVkCR9qAr NexCnwgXa1SCTCt0LqJ64oeOtCmCdYDxL9lxrxs5P/bioLFeAG+ogg5PZmEDv3Aj 0511D1KYR5GwoybLIC8lODsKfMpJo6TBbCYIBeHIEfdX4A5FVsDjElmVfCK+M7w6 sAKmBZ9BgR4DJKZZ4udtgJzlLCDXblM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:05 2025 by rpki-client