$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa File: 4f097ada-9f5a-31c6-89e9-e080c153edce.roa (raw, json) Hash identifier: WSRzSbl3h4fGSPJM81lZBoCO4B+d7xr449zHPIGgdFo= Subject key identifier: 63:78:AF:23:71:2B:1D:8E:BB:F6:42:66:F6:D0:FF:AB:63:E0:02:49 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584B9E07A42520C4871622D96800 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 393398 IP address blocks: 96.47.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a4:25:20:c4:87:16:22:d9:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=cfd452ad-6afd-4a4c-a36a-8f13e047aee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:45:22:8f:98:04:31:2a:3f:f2:30:9f:e0: a7:99:03:64:e2:f6:d6:8b:0b:78:01:3c:96:ea:17: ff:0d:34:14:25:c1:2f:7f:31:c2:ca:85:7d:77:ea: be:3b:5c:5c:b0:37:d6:97:20:32:f1:13:e3:61:5b: fc:25:2c:e3:c0:0b:cb:a4:34:96:96:9f:c0:00:0b: a1:04:64:04:5c:af:55:50:23:f2:44:3b:61:07:06: e4:43:3a:63:56:94:6e:b0:c6:b0:d8:a9:16:1f:d4: 37:bd:3c:bb:da:8f:67:ae:3b:4a:9b:85:c2:68:90: 16:31:a1:9f:fc:83:09:ae:ee:a0:e9:d5:dc:51:45: 5e:29:ba:77:46:b4:59:af:06:76:29:53:b9:11:82: 3c:15:69:b8:be:ed:5b:76:43:77:ac:27:f1:62:b3: 82:3b:ba:90:98:2a:fc:d1:a9:f9:5c:19:4d:f1:38: 7e:3d:17:d2:4d:d5:d3:67:35:bd:c9:c0:09:09:55: 1b:81:79:84:b9:de:a3:f7:e5:bb:f5:95:fa:75:ef: a3:a9:db:a3:f8:8e:b2:65:e6:b3:38:10:99:6a:2e: 3d:ab:b2:c2:0c:bb:23:c6:cc:40:4f:fd:7a:e2:85: 31:d1:f9:2f:55:67:77:44:87:19:9f:44:56:06:c5: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:AF:23:71:2B:1D:8E:BB:F6:42:66:F6:D0:FF:AB:63:E0:02:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/4f097ada-9f5a-31c6-89e9-e080c153edce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8a:c0:43:47:57:72:e0:9f:f8:46:1f:bd:52:09:d4:65:91: e3:5a:7e:51:4f:13:e6:10:2a:62:6e:33:9e:64:91:e5:5f:f7: 85:01:4e:ef:90:7e:6b:5b:02:55:d4:ea:09:b6:45:21:53:d8: d9:da:2a:45:42:c0:a1:ce:80:d7:86:60:54:59:70:bc:0a:b8: 4e:35:4a:3e:44:5c:86:c8:14:58:35:de:5f:1e:f4:0d:54:43: be:8a:9e:09:e4:99:c8:c2:07:2f:87:f0:46:d0:20:c4:d7:27: ef:d6:9a:f0:cb:f7:ce:7c:e7:46:a1:57:8e:ca:fa:fa:85:ee: c7:fb:ce:6a:6f:e2:35:97:71:9e:7c:ba:3e:11:1d:fe:63:aa: 32:f3:3d:a4:3c:d5:7d:b8:2b:38:ba:eb:b8:18:c4:61:3c:b9: 21:b3:94:f4:2f:ad:25:c6:69:16:ad:61:fd:56:28:a1:e6:9a: ad:97:2f:83:40:3d:1c:48:a2:6f:bc:cc:46:b1:e0:52:1e:6b: 84:e7:a6:c6:b3:c1:06:d9:f6:d2:ed:5b:4d:e4:be:0c:94:ac: 49:15:9a:65:93:b0:e6:f2:16:93:d3:03:1e:52:8e:96:ad:01: c5:63:6c:ef:9e:92:62:3a:d5:70:f0:0e:38:f9:b1:3a:b2:f5: f9:70:a5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6QlIMSHFiLZaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2ZkNDUyYWQtNmFmZC00YTRjLWEzNmEtOGYxM2UwNDdhZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpBFIo+YBDEqP/Iwn+CnmQNk4vbWiwt4ATyW 6hf/DTQUJcEvfzHCyoV9d+q+O1xcsDfWlyAy8RPjYVv8JSzjwAvLpDSWlp/AAAuh BGQEXK9VUCPyRDthBwbkQzpjVpRusMaw2KkWH9Q3vTy72o9nrjtKm4XCaJAWMaGf /IMJru6g6dXcUUVeKbp3RrRZrwZ2KVO5EYI8FWm4vu1bdkN3rCfxYrOCO7qQmCr8 0an5XBlN8Th+PRfSTdXTZzW9ycAJCVUbgXmEud6j9+W79ZX6de+jqduj+I6yZeaz OBCZai49q7LCDLsjxsxAT/164oUx0fkvVWd3RIcZn0RWBsWEqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN4ryNxKx2Ou/ZCZvbQ/6tj4AJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNGYwOTdhZGEtOWY1YS0z MWM2LTg5ZTktZTA4MGMxNTNlZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyKwENHV3Lgn/hGH71SCdRlkeNaflFPE+YQKmJuM55kkeVf94UBTu+Q fmtbAlXU6gm2RSFT2NnaKkVCwKHOgNeGYFRZcLwKuE41Sj5EXIbIFFg13l8e9A1U Q76KngnkmcjCBy+H8EbQIMTXJ+/WmvDL985850ahV47K+vqF7sf7zmpv4jWXcZ58 uj4RHf5jqjLzPaQ81X24Kzi667gYxGE8uSGzlPQvrSXGaRatYf1WKKHmmq2XL4NA PRxIom+8zEax4FIea4TnpsazwQbZ9tLtW03kvgyUrEkVmmWTsObyFpPTAx5Sjpat AcVjbO+ekmI61XDwDjj5sTqy9flwpas= -----END CERTIFICATE-----Generated at Wed Nov 5 07:27:00 2025 by rpki-client