$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04e66e1d-dfce-3c8b-bd21-0d2cb81e2f95.roa File: 04e66e1d-dfce-3c8b-bd21-0d2cb81e2f95.roa (raw, json) Hash identifier: Mb/L/l/aPCSFxbQPr9JcXsmjTl9sQkGbvqyXbxsO95I= Subject key identifier: DF:25:4F:44:5E:A9:A2:1A:2E:11:02:A2:81:DB:7B:CE:A9:1C:7D:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D2E927628FF3B76ABD900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04e66e1d-dfce-3c8b-bd21-0d2cb81e2f95.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 96.7.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2e:92:76:28:ff:3b:76:ab:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=eca028ef-c52c-44dd-ab51-ec10fc5c02d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:05:d0:90:5d:6e:ec:38:95:aa:d5:9c:27: bb:77:f4:da:d9:8b:61:e8:7f:0e:d4:3f:58:53:59: df:cb:21:ae:81:51:70:85:d0:ab:d5:99:10:b7:05: 47:e2:04:d3:f5:36:ef:6d:ae:5d:39:dc:2a:33:5e: 59:b2:0c:f0:b6:f6:91:3c:8e:17:ac:f6:f7:02:d5: 9f:80:2c:2e:4b:8d:7f:a4:83:43:d6:8d:a6:bb:fb: ef:b1:16:e4:49:04:d2:a2:4e:9c:55:13:58:2e:47: 1b:c4:0d:29:60:e4:f6:6d:a7:09:9a:88:1a:46:a2: 4e:a2:a6:0e:08:07:90:b8:1c:b7:c0:33:c5:63:4b: 4d:08:02:81:1f:df:41:90:8a:49:88:05:cb:f8:4b: 8c:03:40:5c:2b:30:2a:8e:30:5d:69:b5:bd:f9:24: 8f:55:22:4f:5d:0e:f6:17:ba:95:14:79:89:22:89: ab:be:02:45:95:20:3d:b0:ab:97:d3:a7:e6:d4:a5: 63:c3:2c:76:25:83:27:b3:f3:49:9c:27:6d:51:31: bf:40:03:6f:b8:78:ab:bb:a1:95:b2:be:32:1b:d6: 2a:2c:36:2e:d8:44:94:14:6c:34:2e:6f:f4:50:8d: 11:a8:a0:d2:97:db:22:a4:21:bc:c7:d9:14:9c:5c: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:4F:44:5E:A9:A2:1A:2E:11:02:A2:81:DB:7B:CE:A9:1C:7D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04e66e1d-dfce-3c8b-bd21-0d2cb81e2f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:da:6a:f3:45:f5:07:b2:1f:3d:fc:1c:2b:b9:95:11:f1:0c: 7b:af:2f:89:f1:06:26:ed:c2:4d:e1:20:36:62:90:f6:0f:34: 80:ce:03:ab:09:79:ae:72:38:24:e2:99:75:2f:4d:c5:03:17: d8:1d:58:10:a6:39:34:d0:98:65:25:c8:fa:19:9b:93:73:28: 5c:38:0c:35:44:a3:c0:43:38:86:3c:2e:73:1f:ad:0d:11:a5: ef:19:29:5c:d1:a3:b8:7d:49:3f:bc:a8:37:eb:a5:e8:a8:e1: 5f:40:b8:56:92:8c:65:de:7f:3f:5f:c7:58:6c:17:56:72:3b: 6c:14:c1:22:e2:b2:5b:e3:28:7d:1b:5a:83:8f:05:c7:50:bc: 92:a7:38:6d:e0:47:ef:af:81:7c:b1:59:98:86:69:25:7b:62: 61:7b:56:45:90:5b:fb:6e:18:49:ba:fa:c5:75:63:3f:41:59: 0c:df:78:aa:56:69:74:c2:a3:a8:7b:71:ea:73:c5:7f:5f:a4: 7e:c2:c8:83:ee:86:fc:30:4a:80:57:fc:4e:29:9d:ba:b4:7e: e9:50:9d:f8:e4:e9:92:d1:13:eb:c9:b1:1c:db:f9:b8:5b:3f: ac:10:e2:f9:26:c4:54:d7:2e:33:0c:c4:64:05:eb:61:32:6e: ad:2f:4b:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS6Sdij/O3ar2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZWNhMDI4ZWYtYzUyYy00NGRkLWFiNTEtZWMxMGZjNWMwMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzkF0JBdbuw4larVnCe7d/Ta2Yth6H8O1D9Y U1nfyyGugVFwhdCr1ZkQtwVH4gTT9Tbvba5dOdwqM15ZsgzwtvaRPI4XrPb3AtWf gCwuS41/pIND1o2mu/vvsRbkSQTSok6cVRNYLkcbxA0pYOT2bacJmogaRqJOoqYO CAeQuBy3wDPFY0tNCAKBH99BkIpJiAXL+EuMA0BcKzAqjjBdabW9+SSPVSJPXQ72 F7qVFHmJIomrvgJFlSA9sKuX06fm1KVjwyx2JYMns/NJnCdtUTG/QANvuHiru6GV sr4yG9YqLDYu2ESUFGw0Lm/0UI0RqKDSl9sipCG8x9kUnFy4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8lT0ReqaIaLhECooHbe86pHH1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDRlNjZlMWQtZGZjZS0z YzhiLWJkMjEtMGQyY2I4MWUyZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7aavNF9QeyHz38HCu5lRHxDHuvL4nxBibtwk3hIDZikPYPNIDOA6sJ ea5yOCTimXUvTcUDF9gdWBCmOTTQmGUlyPoZm5NzKFw4DDVEo8BDOIY8LnMfrQ0R pe8ZKVzRo7h9ST+8qDfrpeio4V9AuFaSjGXefz9fx1hsF1ZyO2wUwSLislvjKH0b WoOPBcdQvJKnOG3gR++vgXyxWZiGaSV7YmF7VkWQW/tuGEm6+sV1Yz9BWQzfeKpW aXTCo6h7cepzxX9fpH7CyIPuhvwwSoBX/E4pnbq0fulQnfjk6ZLRE+vJsRzb+bhb P6wQ4vkmxFTXLjMMxGQF62Eybq0vS2c= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:57 2025 by rpki-client