$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa File: b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json) Hash identifier: Yt1QmqK6OH+1S5RATPW4LYb89cB1mGEEJpKviuF7T/k= Subject key identifier: 02:52:CF:22:63:8D:D6:F1:1C:CF:06:6F:BE:11:B5:E0:0B:6D:8C:93 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F4328584B970CD5E055EF4864FC2C6C80 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 20278 IP address blocks: 96.9.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d5:e0:55:ef:48:64:fc:2c:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a912cc06-f484-4b0b-8820-8f8a2c4b7cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:c2:a7:d2:09:f9:70:f3:be:1d:cb:bb:fb: 98:d9:4e:ad:a0:31:57:b6:8c:e7:c3:da:53:77:aa: 98:59:d9:96:07:8a:08:20:08:ed:8b:66:2b:36:e6: 9d:be:ef:bd:87:5a:f9:ce:ef:a8:a9:e5:8e:20:ca: a9:83:de:e5:c4:f8:ac:6b:a1:f8:19:4c:bc:d0:95: a1:b0:e8:eb:cb:4e:95:dc:d8:90:9d:15:d2:fe:0d: 80:17:44:0a:64:4e:78:98:2e:b5:48:53:e5:d0:00: c2:f3:c9:36:25:30:eb:d9:23:40:b2:2b:ca:05:56: 9d:c4:2a:43:a9:ec:a4:9e:11:d7:8b:0e:7e:65:9b: 9b:33:d5:70:f1:24:df:76:e8:58:e3:e2:77:d0:8c: f8:18:7b:e4:4c:2a:6a:80:c1:84:25:6f:61:8c:cc: 02:50:22:d2:5d:b9:31:ce:54:3e:a8:c7:83:fc:34: 44:04:34:bd:63:d1:77:f6:c0:52:7c:05:1a:43:e0: 32:fd:12:c0:80:3e:6c:4d:c3:42:03:42:2b:05:03: 3c:39:58:e6:cb:f7:6f:e2:08:b3:5b:20:d8:89:38: 23:2d:39:b4:2d:b7:3f:f2:83:3d:04:7a:b5:45:13: 32:5c:3e:9f:a1:84:aa:7c:f7:08:ad:f3:3f:23:b7: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:CF:22:63:8D:D6:F1:1C:CF:06:6F:BE:11:B5:E0:0B:6D:8C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ae:e5:a2:de:8f:ff:63:36:16:d0:a4:5c:62:7e:65:a4:4a: 5c:e6:63:98:71:14:a6:09:dc:8a:01:5f:d1:24:1b:e3:20:cb: b1:c5:ee:57:b1:45:ad:b4:cd:7b:a5:10:6c:1c:f6:6a:5c:8f: 13:26:77:c7:48:bb:bd:16:1a:90:1c:b3:e0:29:f9:2a:01:05: 88:60:7f:59:44:ac:d1:10:fc:a3:97:fc:96:71:de:57:ba:d3: 6d:01:b9:b0:39:81:44:ef:06:49:22:39:d7:7c:74:14:a8:55: 80:17:98:8a:e5:ac:ab:35:d5:9e:a6:a0:02:25:d0:b7:c7:17: f1:44:94:8b:62:a2:7a:b5:69:a1:b7:28:2d:c7:46:e4:a2:bc: a3:b7:3a:06:74:dc:3f:90:d6:c8:51:72:5b:7c:ac:79:98:eb: 01:39:b9:70:2c:c5:41:0e:cb:27:c6:80:d7:5a:b2:e5:92:12: 07:51:da:6a:7d:39:4c:fa:a4:76:19:2d:c0:7f:61:9f:a8:42: 98:43:e8:f2:2e:3f:12:90:31:91:89:f3:2c:a1:0e:cd:18:75: bf:31:56:52:06:3f:6c:2e:d4:80:3d:98:35:9f:2a:21:d8:be: 79:70:a7:4e:eb:8c:09:9d:8c:22:13:5b:17:f9:81:2c:79:d2: 9a:7c:5d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNXgVe9IZPwsbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTkxMmNjMDYtZjQ4NC00YjBiLTg4MjAtOGY4YTJjNGI3Y2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu77Cp9IJ+XDzvh3Lu/uY2U6toDFXtoznw9pT d6qYWdmWB4oIIAjti2YrNuadvu+9h1r5zu+oqeWOIMqpg97lxPisa6H4GUy80JWh sOjry06V3NiQnRXS/g2AF0QKZE54mC61SFPl0ADC88k2JTDr2SNAsivKBVadxCpD qeyknhHXiw5+ZZubM9Vw8STfduhY4+J30Iz4GHvkTCpqgMGEJW9hjMwCUCLSXbkx zlQ+qMeD/DREBDS9Y9F39sBSfAUaQ+Ay/RLAgD5sTcNCA0IrBQM8OVjmy/dv4giz WyDYiTgjLTm0Lbc/8oM9BHq1RRMyXD6foYSqfPcIrfM/I7flYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJSzyJjjdbxHM8Gb74RteALbYyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmu5aLej/9jNhbQpFxifmWkSlzmY5hxFKYJ3IoBX9EkG+Mgy7HF7lex Ra20zXulEGwc9mpcjxMmd8dIu70WGpAcs+Ap+SoBBYhgf1lErNEQ/KOX/JZx3le6 020BubA5gUTvBkkiOdd8dBSoVYAXmIrlrKs11Z6moAIl0LfHF/FElItionq1aaG3 KC3HRuSivKO3OgZ03D+Q1shRclt8rHmY6wE5uXAsxUEOyyfGgNdasuWSEgdR2mp9 OUz6pHYZLcB/YZ+oQphD6PIuPxKQMZGJ8yyhDs0Ydb8xVlIGP2wu1IA9mDWfKiHY vnlwp07rjAmdjCITWxf5gSx50pp8XZk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:50 2025 by rpki-client