$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa File: 0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa (raw, json) Hash identifier: opW/ZID6uEyTIw1GZyFe9YB/9zusYaOVbHtkoObDuqE= Subject key identifier: 44:DD:3D:8A:C9:A7:61:20:81:F3:0E:8B:FA:7F:B7:6D:F9:01:D5:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D2EC2B8F5E40D4D1BF280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 96.7.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2e:c2:b8:f5:e4:0d:4d:1b:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=03409845-61f2-4e20-8bfa-0fca1a7fb01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:a7:43:96:4e:c7:74:b6:c9:91:31:27:81: 3f:04:e8:6a:20:fe:33:63:8a:66:c9:bc:0d:f9:51: 88:68:f8:f5:0a:21:58:47:24:5c:70:61:7e:31:d3: 96:c2:cf:b9:e5:e7:d6:26:9d:e1:e3:a4:23:38:ac: eb:b9:89:0c:18:54:cf:6e:a8:44:42:67:52:64:09: d9:c9:82:d1:34:02:ba:aa:e1:ac:ec:b0:7f:04:ba: a4:1a:34:4f:6c:f0:bc:ed:3a:72:51:be:b5:74:73: bc:35:f7:da:65:69:25:4d:02:7d:b0:52:5c:09:c2: 83:dd:93:0a:e5:5e:94:6e:91:f5:5c:5c:e5:45:6c: 68:85:10:03:04:e6:b1:38:03:97:97:f8:59:76:37: 13:e5:7c:69:ae:e5:9d:0d:86:b7:12:a7:9a:c3:f9: 57:1d:22:f6:64:a6:ec:49:1f:1a:ee:ef:05:98:da: c3:86:34:4c:b0:fa:e9:69:e2:fc:3b:0f:38:e0:e1: cf:1e:4f:b6:4a:06:4b:47:1a:46:e7:f5:98:58:1d: f9:17:1d:0e:ef:66:5e:ee:25:1e:29:cd:2f:71:2b: 49:9f:2e:75:95:80:d1:ba:4c:d2:54:57:da:a6:c8: 16:ae:6f:c2:46:0f:c0:ca:ab:a4:4a:31:b2:80:d5: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DD:3D:8A:C9:A7:61:20:81:F3:0E:8B:FA:7F:B7:6D:F9:01:D5:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a6:3d:e7:84:08:26:b0:4d:ba:fe:c1:b7:11:b3:4d:b2:c6: b5:04:82:6e:29:6d:69:4e:13:c3:43:44:09:70:53:14:d2:28: 83:e9:ed:cd:ca:a4:7c:47:44:50:b2:73:89:f0:eb:75:0e:84: 55:f7:73:e4:7e:14:00:94:66:07:10:9a:db:13:c9:97:97:ed: e3:a1:73:1c:dd:c5:f9:bc:b3:b5:4d:fb:c8:fc:2a:01:03:91: a0:84:07:5e:3f:09:9b:6e:86:c6:7b:13:cd:94:0b:5e:5d:72: 1d:d1:84:b9:4a:02:4e:be:2b:bc:e9:07:46:72:bf:a3:ad:68: 81:52:16:b3:bf:81:37:57:45:1c:69:56:bd:e6:45:d1:f2:4a: d2:56:ed:8b:df:c9:fa:c2:9c:49:92:84:55:34:08:b9:1a:12: a6:c6:b9:cf:15:3b:d2:05:45:24:45:1f:2d:ba:7b:a7:94:d8: 85:35:b2:40:4e:04:95:10:c6:6b:eb:76:1d:ab:42:78:4e:1a: c6:39:02:16:92:f8:b1:b9:33:05:62:70:a5:12:e1:39:b8:20: cd:7d:49:46:87:73:5b:e2:8f:b0:b1:c1:a3:7d:8c:5d:b8:cb: 49:22:d2:34:e3:1b:b1:78:6a:33:6f:3e:20:bf:b1:30:17:9d: 00:ef:06:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS7CuPXkDU0b8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDM0MDk4NDUtNjFmMi00ZTIwLThiZmEtMGZjYTFhN2ZiMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzunQ5ZOx3S2yZExJ4E/BOhqIP4zY4pmybwN +VGIaPj1CiFYRyRccGF+MdOWws+55efWJp3h46QjOKzruYkMGFTPbqhEQmdSZAnZ yYLRNAK6quGs7LB/BLqkGjRPbPC87TpyUb61dHO8NffaZWklTQJ9sFJcCcKD3ZMK 5V6UbpH1XFzlRWxohRADBOaxOAOXl/hZdjcT5XxpruWdDYa3Eqeaw/lXHSL2ZKbs SR8a7u8FmNrDhjRMsPrpaeL8Ow844OHPHk+2SgZLRxpG5/WYWB35Fx0O72Ze7iUe Kc0vcStJny51lYDRukzSVFfapsgWrm/CRg/AyqukSjGygNWQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETdPYrJp2EggfMOi/p/t235AdUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNhMzBiNzgtZmU4MS0z ZjVjLThiYTgtMGE1NjBlMzBlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSmPeeECCawTbr+wbcRs02yxrUEgm4pbWlOE8NDRAlwUxTSKIPp7c3K pHxHRFCyc4nw63UOhFX3c+R+FACUZgcQmtsTyZeX7eOhcxzdxfm8s7VN+8j8KgED kaCEB14/CZtuhsZ7E82UC15dch3RhLlKAk6+K7zpB0Zyv6OtaIFSFrO/gTdXRRxp Vr3mRdHyStJW7YvfyfrCnEmShFU0CLkaEqbGuc8VO9IFRSRFHy26e6eU2IU1skBO BJUQxmvrdh2rQnhOGsY5AhaS+LG5MwVicKUS4Tm4IM19SUaHc1vij7CxwaN9jF24 y0ki0jTjG7F4ajNvPiC/sTAXnQDvBlg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:40:23 2025 by rpki-client