$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa File: 596c1584-3a09-38b4-9548-b028b4455bfe.roa (raw, json) Hash identifier: lRTX+OEy58X3gCLeLzbDGQVNvMDsAL/dC+nkiV3ElGM= Subject key identifier: 80:94:13:A1:0A:C2:66:E5:38:71:E5:59:DA:61:02:80:2E:AB:58:8D Certificate issuer: /CN=97639b15-215a-4881-b1a4-731e046bf51c Certificate serial: 010D0C9F4328584BB2F7CF1C2BBBE49CFAFF6880 Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 5065 IP address blocks: 208.99.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cf:1c:2b:bb:e4:9c:fa:ff:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=446b2961-01f9-4b17-8f9e-b68a58f46074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5e:8f:10:3c:f4:eb:cf:f0:f2:e2:10:f3:a4: b5:75:c9:16:76:cb:c8:0f:e1:27:23:a0:c5:db:98: 0e:3f:3f:ae:e2:71:5c:09:22:f9:a2:9c:4b:5e:e9: b6:fb:25:62:53:0d:64:2b:d4:ea:26:66:a9:62:7d: d6:3e:cc:52:6b:71:e9:9d:f4:c9:4a:8c:86:47:e7: 73:25:fe:c6:ba:c4:46:9c:34:61:9b:bb:e4:54:7b: a6:66:1d:b3:b3:71:04:ae:3d:15:79:71:aa:fa:0a: 15:71:fa:1b:11:94:3f:8b:2a:ef:b2:0a:0f:bc:e0: cc:34:cf:0b:26:22:90:b6:f1:6a:ac:aa:24:07:87: 1f:a7:e3:d0:36:f5:ea:6a:b4:b9:27:64:85:67:6a: 25:fa:5f:9c:ca:4d:d8:1c:61:bd:46:69:62:14:44: 83:96:bc:77:c4:b2:e9:5a:8b:cc:91:ac:bf:ac:b9: 4a:b6:28:e6:63:d5:06:2c:90:41:51:ba:67:a7:7f: 6f:cd:38:6b:ce:58:3c:21:8a:a8:38:f2:45:34:d0: e5:98:b4:bc:ce:86:15:24:40:30:7f:2b:3c:6c:78: d5:93:5d:59:2a:93:c6:75:f6:c1:fc:34:69:7f:b5: e0:da:52:58:f1:ba:24:03:75:87:80:01:ff:5d:4d: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:13:A1:0A:C2:66:E5:38:71:E5:59:DA:61:02:80:2E:AB:58:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl X509v3 Authority Key Identifier: keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer sbgp-ipAddrBlock: critical IPv4: 208.99.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bf:cd:39:65:b2:b7:30:5a:a3:b3:a8:91:fe:a8:73:94:d1: c2:08:fb:8f:11:10:00:0e:37:7c:a5:42:04:1c:97:7b:48:19: 42:a5:14:70:78:f2:c9:19:07:ae:c7:7e:91:e7:19:30:53:b2: 53:47:6b:72:d3:ee:4a:df:0f:48:35:46:52:6e:80:95:a8:45: 54:5b:f8:9d:d8:fe:a9:38:65:4e:88:d0:a1:40:21:ac:bc:09: 00:da:f2:9e:58:f9:59:de:fe:b2:6d:2a:b0:81:50:63:d4:f8: 81:e1:85:4a:e6:4a:53:be:47:70:69:6f:ae:62:9e:81:1e:e1: 8b:56:69:11:70:bf:9c:ca:77:ba:ee:75:1f:80:79:44:35:79: cf:68:48:d8:d6:15:a1:10:d2:7f:9f:7d:61:95:e6:ac:d4:9f: a8:08:fe:0e:7d:37:5f:0b:69:f5:a0:ee:62:0c:85:51:4c:d3: e6:24:72:ef:c9:f0:51:b8:c2:42:ee:e2:95:cb:99:16:67:20: 46:0f:20:cd:68:33:5a:8d:6d:81:fd:59:14:d7:0c:17:41:62: a6:cd:6d:96:56:ae:f7:7a:10:8d:f8:11:f3:f9:e9:84:4c:73: 79:af:3b:ff:29:29:01:b1:38:7c:0b:42:53:11:69:98:05:15: 74:82:50:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy988cK7vknPr/aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc2MzliMTUtMjE1YS00ODgxLWIxYTQtNzMxZTA0NmJm NTFjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDQ2YjI5NjEtMDFmOS00YjE3LThmOWUtYjY4YTU4ZjQ2MDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF6PEDz068/w8uIQ86S1dckWdsvID+EnI6DF 25gOPz+u4nFcCSL5opxLXum2+yViUw1kK9TqJmapYn3WPsxSa3HpnfTJSoyGR+dz Jf7GusRGnDRhm7vkVHumZh2zs3EErj0VeXGq+goVcfobEZQ/iyrvsgoPvODMNM8L JiKQtvFqrKokB4cfp+PQNvXqarS5J2SFZ2ol+l+cyk3YHGG9RmliFESDlrx3xLLp WovMkay/rLlKtijmY9UGLJBBUbpnp39vzThrzlg8IYqoOPJFNNDlmLS8zoYVJEAw fys8bHjVk11ZKpPGdfbB/DRpf7Xg2lJY8bokA3WHgAH/XU32PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICUE6EKwmblOHHlWdphAoAuq1iNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NzYz OWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFlMDQ2YmY1MWMvNTk2YzE1ODQtM2EwOS0z OGI0LTk1NDgtYjAyOGI0NDU1YmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTc2MzliMTUtMjE1YS00ODgxLWIx YTQtNzMxZTA0NmJmNTFjLzk3NjM5YjE1LTIxNWEtNDg4MS1iMWE0LTczMWUwNDZi ZjUxYy5jcmwwHwYDVR0jBBgwFoAUt0iV8CVDnSLLgJsLm2oc3Ae413swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NzYzOWIxNS0yMTVhLTQ4ODEtYjFhNC03MzFl MDQ2YmY1MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy/zTllsrcwWqOzqJH+qHOU0cII+48REAAON3ylQgQcl3tIGUKlFHB4 8skZB67HfpHnGTBTslNHa3LT7krfD0g1RlJugJWoRVRb+J3Y/qk4ZU6I0KFAIay8 CQDa8p5Y+Vne/rJtKrCBUGPU+IHhhUrmSlO+R3Bpb65inoEe4YtWaRFwv5zKd7ru dR+AeUQ1ec9oSNjWFaEQ0n+ffWGV5qzUn6gI/g59N18LafWg7mIMhVFM0+Ykcu/J 8FG4wkLu4pXLmRZnIEYPIM1oM1qNbYH9WRTXDBdBYqbNbZZWrvd6EI34EfP56YRM c3mvO/8pKQGxOHwLQlMRaZgFFXSCUIc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:08 2025 by rpki-client