$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa File: ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa (raw, json) Hash identifier: +zXc2mJqt4w/ZIrYgaSBcRCYmYzTOP1oxxsAtGee8OE= Subject key identifier: 70:01:C7:48:89:D1:37:AC:11:40:B5:95:B8:1B:FC:1E:61:66:A4:70 Certificate issuer: /CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Certificate serial: 010D0C9F4328584BB7603049797443FC35F251E0 Authority key identifier: F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa Signing time: Sat 01 Nov 2025 14:54:26 +0000 ROA not before: Sat 01 Nov 2025 14:54:26 +0000 ROA not after: Fri 30 Jan 2026 15:54:26 +0000 asID: 5650 IP address blocks: 96.45.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:60:30:49:79:74:43:fc:35:f2:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af82acc4-55f5-4fe2-af73-92362e40bbaa Validity Not Before: Nov 1 14:54:26 2025 GMT Not After : Jan 30 15:54:26 2026 GMT Subject: CN=2f4ee140-9976-49ec-a9cd-03547897121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:23:64:19:d7:a7:53:ec:0c:35:e2:f7:1b: e1:33:78:97:a8:34:74:d3:2c:d7:2b:89:fa:47:ae: ff:56:14:89:1b:49:76:63:45:83:43:c7:4d:71:eb: c1:e7:55:ea:45:82:a0:97:ed:20:87:89:89:0b:e4: 01:e6:4e:4d:25:cb:35:dd:17:ce:db:2f:57:d3:89: 38:54:e9:91:e6:a7:e1:50:03:37:10:a8:56:cb:00: 71:e5:89:da:ba:c2:6a:2c:ae:6e:a1:d8:08:e0:e1: 8a:81:84:a6:52:7b:08:e5:90:40:b4:06:3a:94:97: 62:34:45:bd:10:65:fe:0c:2f:f8:c6:c9:53:a4:9f: cb:94:08:32:e1:7e:be:d8:14:fc:b5:4f:1c:e9:64: 5f:8c:66:47:dd:66:cf:f9:b9:02:fc:64:82:0c:ce: ff:e0:14:c5:2d:5c:5f:6b:8e:16:2f:c1:24:50:68: 0c:88:91:af:b2:49:63:8c:8a:43:b6:39:ae:7c:6e: a9:9f:07:f5:a5:9f:72:17:1d:36:c9:4f:04:5c:55: c8:9a:af:b8:08:3c:d9:96:a4:7f:a6:01:29:6a:1f: ab:ab:fa:6d:81:45:25:12:fb:16:97:b7:37:18:4e: 8f:05:51:88:81:ae:1b:a2:2b:45:06:35:83:d4:3a: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:C7:48:89:D1:37:AC:11:40:B5:95:B8:1B:FC:1E:61:66:A4:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/ca6ff387-a31d-3209-9e28-48bbd4ab7f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa/af82acc4-55f5-4fe2-af73-92362e40bbaa.crl X509v3 Authority Key Identifier: keyid:F0:F1:1B:34:2D:5F:FA:B9:D6:06:7A:FC:92:35:D4:C4:A5:9E:05:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/af82acc4-55f5-4fe2-af73-92362e40bbaa.cer sbgp-ipAddrBlock: critical IPv4: 96.45.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:15:0f:c6:1b:2a:d9:e1:d0:db:8b:ca:38:2f:72:79:8e:2a: 22:fd:76:a8:33:f5:95:f1:0d:a3:f2:6e:5e:20:e4:01:b7:2d: b9:9f:9c:ef:d9:d4:c6:f8:64:ca:2b:0a:af:b2:fd:27:5e:b3: ac:31:2f:08:04:61:0c:c0:aa:93:78:09:80:eb:12:a8:53:16: 92:5c:63:64:f6:c4:1a:22:0e:a3:5d:d8:01:01:cf:f3:90:d5: c3:fe:2b:61:b8:d6:c1:13:75:b2:63:01:14:10:a5:85:9d:ff: 0b:29:ac:72:d6:b1:cd:8b:5d:b1:86:f4:4a:bf:a3:4b:00:27: 8f:01:bf:3c:08:a3:10:f7:54:79:7d:2b:11:13:5d:33:6b:33: 59:3e:c1:a5:2c:70:88:6a:90:5c:03:5d:5d:57:3b:7f:eb:59: fb:6d:33:02:b7:03:d0:ef:b5:ea:0d:b9:fc:52:4d:7f:b0:7e: 78:3a:29:11:8b:0d:9c:3f:6c:f0:90:4d:97:b5:b8:05:14:40: 22:e1:9d:c9:0c:d4:3d:d8:9a:7d:54:34:03:65:e9:eb:bd:29: f8:23:bb:cc:cc:bc:1c:74:bd:24:08:e5:3e:c9:7d:24:99:9c: 19:7e:c7:7c:e9:45:a7:be:c7:95:a5:b6:b8:81:89:7a:75:02: 03:9b:02:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3YDBJeXRD/DXyUeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4MmFjYzQtNTVmNS00ZmUyLWFmNzMtOTIzNjJlNDBi YmFhMB4XDTI1MTEwMTE0NTQyNloXDTI2MDEzMDE1NTQyNlowLzEtMCsGA1UEAxMk MmY0ZWUxNDAtOTk3Ni00OWVjLWE5Y2QtMDM1NDc4OTcxMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmUjZBnXp1PsDDXi9xvhM3iXqDR00yzXK4n6 R67/VhSJG0l2Y0WDQ8dNcevB51XqRYKgl+0gh4mJC+QB5k5NJcs13RfO2y9X04k4 VOmR5qfhUAM3EKhWywBx5YnausJqLK5uodgI4OGKgYSmUnsI5ZBAtAY6lJdiNEW9 EGX+DC/4xslTpJ/LlAgy4X6+2BT8tU8c6WRfjGZH3WbP+bkC/GSCDM7/4BTFLVxf a44WL8EkUGgMiJGvskljjIpDtjmufG6pnwf1pZ9yFx02yU8EXFXImq+4CDzZlqR/ pgEpah+rq/ptgUUlEvsWl7c3GE6PBVGIga4boitFBjWD1DouZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHABx0iJ0TesEUC1lbgb/B5hZqRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgy YWNjNC01NWY1LTRmZTItYWY3My05MjM2MmU0MGJiYWEvY2E2ZmYzODctYTMxZC0z MjA5LTllMjgtNDhiYmQ0YWI3Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWY4MmFjYzQtNTVmNS00ZmUyLWFm NzMtOTIzNjJlNDBiYmFhL2FmODJhY2M0LTU1ZjUtNGZlMi1hZjczLTkyMzYyZTQw YmJhYS5jcmwwHwYDVR0jBBgwFoAU8PEbNC1f+rnWBnr8kjXUxKWeBcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZjgyYWNjNC01NWY1LTRmZTItYWY3My05MjM2 MmU0MGJiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEVD8YbKtnh0NuLyjgvcnmOKiL9dqgz9ZXxDaPybl4g5AG3LbmfnO/Z 1Mb4ZMorCq+y/Sdes6wxLwgEYQzAqpN4CYDrEqhTFpJcY2T2xBoiDqNd2AEBz/OQ 1cP+K2G41sETdbJjARQQpYWd/wsprHLWsc2LXbGG9Eq/o0sAJ48BvzwIoxD3VHl9 KxETXTNrM1k+waUscIhqkFwDXV1XO3/rWfttMwK3A9DvteoNufxSTX+wfng6KRGL DZw/bPCQTZe1uAUUQCLhnckM1D3Ymn1UNANl6eu9Kfgju8zMvBx0vSQI5T7JfSSZ nBl+x3zpRae+x5WltriBiXp1AgObArY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:15:59 2025 by rpki-client