$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa File: 5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json) Hash identifier: iYKb8VvN+XelggVg7TuUTWiIdbBRNwp+LDLmbXzQ9wE= Subject key identifier: E9:35:62:CE:AC:5C:14:8B:A8:BD:FD:36:E0:78:29:A5:D8:85:54:A1 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584B9E079B334AB071244EE05D80 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 393398 IP address blocks: 96.47.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9b:33:4a:b0:71:24:4e:e0:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=c97374d9-9d55-453c-a32c-f3480f02dcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:97:32:1d:24:b5:73:45:97:12:c2:49:b7: 58:a1:e3:06:f5:f6:70:00:2d:7c:3c:a6:ef:b8:dc: f6:9e:23:ad:eb:57:b2:77:56:26:1e:dc:7b:4f:dc: 72:3d:66:ec:74:d2:3e:53:c5:08:8b:2c:2e:16:d7: f7:0f:cd:3f:b0:2e:a6:11:08:a0:50:39:27:15:d4: b4:26:fd:d1:14:f4:d0:44:8b:21:b7:02:aa:4a:48: 05:7c:ca:3f:8b:7a:09:c1:bf:7b:a2:98:7e:af:94: eb:70:ad:e2:39:c5:45:a5:b3:e9:3d:f3:5c:ee:b2: 9a:c3:c4:ef:51:2d:79:00:d2:c9:9c:b3:a2:d3:17: 3e:02:a9:d3:52:b2:66:bc:59:59:17:e0:06:c9:91: 98:72:a5:60:b0:77:3c:3a:10:05:5a:b9:ff:74:cf: 4b:f0:d0:6b:2f:ba:77:7c:74:46:f2:31:df:a2:0f: bb:92:04:01:4d:3c:04:85:0b:48:b5:23:89:a0:e0: 99:40:9d:88:ba:56:93:22:15:40:2f:40:cd:2a:64: 10:75:93:42:50:8c:05:85:86:d0:74:dd:18:51:ac: 15:c1:22:12:6a:a6:9d:ea:b4:5a:08:23:a4:24:c5: f1:e0:c1:b9:73:8f:39:82:65:8d:32:9b:be:fc:e3: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:62:CE:AC:5C:14:8B:A8:BD:FD:36:E0:78:29:A5:D8:85:54:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:26:33:89:14:2e:0b:7e:2f:44:0e:ff:4b:9a:6e:92:44:2f: c9:f0:5c:58:3f:d4:ac:15:32:a9:64:3a:a4:3e:4f:8e:95:50: fa:b8:45:23:cd:4e:db:25:6c:6b:5a:b6:25:ac:bc:ea:5f:a7: 31:d4:99:c0:50:d2:94:c8:fc:d1:aa:ea:a9:97:0a:19:39:7f: 2e:1e:42:5b:ff:54:10:79:6e:1e:bd:ae:82:63:b5:ea:8d:5e: fc:77:c9:12:cf:10:46:3d:a4:c0:a7:ee:9c:67:e4:35:38:25: 9d:a2:9f:92:fe:d5:3e:5d:12:ae:dd:2b:d7:ce:d9:e7:11:d8: 5a:84:76:08:2b:5e:e5:d1:8f:3e:07:ec:40:f1:db:88:5a:fb: 96:8e:31:47:94:53:e9:6f:c0:c8:56:63:e6:2e:12:c3:e6:2c: 6b:49:7c:97:4a:4c:fc:6c:c6:1b:95:23:d2:f6:f2:a0:5a:d5: ac:39:4b:44:c8:fb:3f:57:38:ee:de:13:53:a1:c7:da:15:ac: 8d:e5:c1:e0:64:a9:51:ba:7e:b3:99:2c:26:51:f3:1f:63:59: 81:5e:62:4f:a7:37:0b:6c:23:8d:a2:db:b7:42:03:fc:97:7a: 32:e8:ab:ea:00:b3:90:13:2d:a2:92:d5:4f:c1:15:80:a5:5d: 3e:3b:a7:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5szSrBxJE7gXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Yzk3Mzc0ZDktOWQ1NS00NTNjLWEzMmMtZjM0ODBmMDJkY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8CXMh0ktXNFlxLCSbdYoeMG9fZwAC18PKbv uNz2niOt61eyd1YmHtx7T9xyPWbsdNI+U8UIiywuFtf3D80/sC6mEQigUDknFdS0 Jv3RFPTQRIshtwKqSkgFfMo/i3oJwb97oph+r5TrcK3iOcVFpbPpPfNc7rKaw8Tv US15ANLJnLOi0xc+AqnTUrJmvFlZF+AGyZGYcqVgsHc8OhAFWrn/dM9L8NBrL7p3 fHRG8jHfog+7kgQBTTwEhQtItSOJoOCZQJ2IulaTIhVAL0DNKmQQdZNCUIwFhYbQ dN0YUawVwSISaqad6rRaCCOkJMXx4MG5c485gmWNMpu+/OMAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk1Ys6sXBSLqL39NuB4KaXYhVShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNWZmM2EyOTMtYjdmZS0z NWMzLTk1MmUtMmI0N2NhYmJiMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgmM4kULgt+L0QO/0uabpJEL8nwXFg/1KwVMqlkOqQ+T46VUPq4RSPN TtslbGtatiWsvOpfpzHUmcBQ0pTI/NGq6qmXChk5fy4eQlv/VBB5bh69roJjteqN Xvx3yRLPEEY9pMCn7pxn5DU4JZ2in5L+1T5dEq7dK9fO2ecR2FqEdggrXuXRjz4H 7EDx24ha+5aOMUeUU+lvwMhWY+YuEsPmLGtJfJdKTPxsxhuVI9L28qBa1aw5S0TI +z9XOO7eE1Ohx9oVrI3lweBkqVG6frOZLCZR8x9jWYFeYk+nNwtsI42i27dCA/yX ejLoq+oAs5ATLaKS1U/BFYClXT47p10= -----END CERTIFICATE-----Generated at Wed Nov 5 09:07:52 2025 by rpki-client