$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa File: c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa (raw, json) Hash identifier: JAgK2aK4xt+B2uR3DEx9MeMTZDLjRsAIJrGiECt0O+4= Subject key identifier: 5C:E8:6A:A0:CB:14:1D:90:B3:31:52:51:95:7A:D2:1D:82:25:51:DB Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F521B80D4EC74A5F7A49CA0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 97.71.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:1b:80:d4:ec:74:a5:f7:a4:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=66f1af8f-ef3a-41b8-a00b-620b06adb45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:b0:5e:77:2b:d1:41:3d:44:5d:08:5d:9d: 13:9f:ce:68:48:0c:9b:82:7b:f1:79:3c:db:85:78: d7:c3:8d:ac:b8:31:b4:a1:80:65:f1:45:0d:15:4f: e6:c2:90:e9:41:44:47:34:b4:78:54:c3:41:c4:cd: b1:b2:b5:64:4f:54:8c:c6:c4:b0:68:28:a2:25:61: ba:e4:95:ef:7e:3a:13:09:ef:62:e8:0a:6a:f3:e3: cc:e8:a8:15:bf:66:33:56:25:2e:a2:b1:f9:5a:0d: 01:99:de:5a:d9:36:fc:98:40:9f:4c:8c:e3:9b:f3: c7:2c:4c:7d:10:fa:cf:23:b6:67:5e:82:33:5e:cc: bc:90:62:29:1d:73:24:7f:26:40:7f:04:3e:ce:9b: fe:45:8c:29:e9:f8:23:7b:00:f7:41:15:35:39:cf: 41:9a:11:c5:5e:45:00:af:c3:52:43:0a:f8:dc:bf: 61:e7:ed:84:0a:5d:f1:6f:6e:bf:21:22:61:e7:52: ba:4e:e8:2b:fb:cd:2d:de:9c:95:69:77:55:6a:17: d0:aa:a5:e8:5b:47:dc:72:20:eb:82:a0:ec:f2:7b: c0:b7:11:4a:2e:9d:5a:5c:2d:88:87:f8:b4:bd:0a: 3a:a4:80:75:56:59:a2:76:ab:0d:25:53:db:6e:af: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E8:6A:A0:CB:14:1D:90:B3:31:52:51:95:7A:D2:1D:82:25:51:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c838b422-cf50-3e3b-8858-dcdf6bba77e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.71.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:fd:23:9a:5d:96:f4:41:23:aa:6e:f6:ba:f4:bf:69:c3:62: 0f:7e:ac:89:15:57:12:be:55:47:e2:e7:fd:be:cf:49:6f:4e: d2:26:27:f7:a3:2e:2a:b2:54:b7:1d:f5:76:86:de:d7:7b:0e: 04:b1:3c:38:ea:0d:79:9d:87:07:08:7c:3b:e9:90:52:05:1b: 1b:a7:21:cc:85:cb:5f:d8:52:61:6a:98:d3:79:a5:0d:e2:71: de:7e:e3:96:16:fb:93:ad:66:39:51:70:6f:54:a2:dd:88:8a: 0d:21:97:f5:2e:d7:a8:b9:1d:80:7f:73:d1:1d:5a:f9:e1:72: 0b:9f:79:5d:d3:23:f1:b9:de:67:4f:2c:20:78:50:e9:5a:1e: cc:43:ce:a3:e0:fe:97:34:26:df:76:e9:5b:03:41:71:a4:d8: ea:32:0c:9e:8a:68:3b:1b:0d:43:76:0e:5b:c5:51:9e:35:4c: 95:85:36:df:cc:9f:e8:1c:cf:b9:77:a1:e7:77:c4:00:82:d9: 15:f5:bb:c4:6b:af:b1:ec:a2:0d:68:db:80:2d:1d:bc:e0:a4: 31:13:9d:ed:43:9d:74:3c:e8:23:31:54:a0:0b:bc:41:ee:fa: d3:ea:f0:c5:7b:c8:84:ed:eb:cb:62:c7:e7:42:89:44:b8:9a: 14:ce:00:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhuA1Ox0pfeknKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjZmMWFmOGYtZWYzYS00MWI4LWEwMGItNjIwYjA2YWRiNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrGwXncr0UE9RF0IXZ0Tn85oSAybgnvxeTzb hXjXw42suDG0oYBl8UUNFU/mwpDpQURHNLR4VMNBxM2xsrVkT1SMxsSwaCiiJWG6 5JXvfjoTCe9i6Apq8+PM6KgVv2YzViUuorH5Wg0Bmd5a2Tb8mECfTIzjm/PHLEx9 EPrPI7ZnXoIzXsy8kGIpHXMkfyZAfwQ+zpv+RYwp6fgjewD3QRU1Oc9BmhHFXkUA r8NSQwr43L9h5+2ECl3xb26/ISJh51K6Tugr+80t3pyVaXdVahfQqqXoW0fcciDr gqDs8nvAtxFKLp1aXC2Ih/i0vQo6pIB1VlmidqsNJVPbbq/59QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzoaqDLFB2QszFSUZV60h2CJVHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzgzOGI0MjItY2Y1MC0z ZTNiLTg4NTgtZGNkZjZiYmE3N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYUdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/9I5pdlvRBI6pu9rr0v2nDYg9+rIkVVxK+VUfi5/2+z0lvTtImJ/ej LiqyVLcd9XaG3td7DgSxPDjqDXmdhwcIfDvpkFIFGxunIcyFy1/YUmFqmNN5pQ3i cd5+45YW+5OtZjlRcG9Uot2Iig0hl/Uu16i5HYB/c9EdWvnhcgufeV3TI/G53mdP LCB4UOlaHsxDzqPg/pc0Jt926VsDQXGk2OoyDJ6KaDsbDUN2DlvFUZ41TJWFNt/M n+gcz7l3oed3xACC2RX1u8Rrr7Hsog1o24AtHbzgpDETne1DnXQ86CMxVKALvEHu +tPq8MV7yITt68tix+dCiUS4mhTOANA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:06 2025 by rpki-client