$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2370ff-1bac-3968-8511-ec785a20d1ab.roa File: 2e2370ff-1bac-3968-8511-ec785a20d1ab.roa (raw, json) Hash identifier: 9Dnele86c8fJcdkMzl9WMFGjaGKePkb1ZIH8nGPB8Ko= Subject key identifier: CA:C4:4B:D7:12:22:B2:CD:82:CE:8F:CD:46:13:29:F2:62:68:5B:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD0E175576F15163619A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2370ff-1bac-3968-8511-ec785a20d1ab.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 96.16.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0e:17:55:76:f1:51:63:61:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=e8202709-0f81-4f33-8ffd-dee65c0967b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:3b:84:32:04:94:e8:91:45:f6:f9:ca:0b: 00:b6:da:ff:48:76:e6:e4:0c:ca:6e:76:3e:15:86: c8:e9:7f:05:0e:46:8f:29:78:a6:09:91:7f:90:49: 05:46:2a:44:29:8c:7c:3f:c8:24:59:13:38:51:19: 7b:55:40:90:b8:4d:2b:0c:61:7a:09:5e:0f:4c:ee: f1:43:a8:1f:29:65:e3:fc:2f:0d:0f:cb:6e:19:42: b6:d5:ab:a9:de:48:13:09:31:18:37:a1:a4:d2:ad: b3:d1:f3:35:74:8e:59:70:34:aa:fb:81:6b:49:c7: e5:1b:ca:8c:b1:fb:28:e3:fd:08:c3:79:7c:5a:47: 57:9c:ec:98:a1:33:0c:ba:27:52:bc:82:df:c0:84: 0d:69:26:79:f0:a3:47:63:59:01:76:6b:5e:4d:6b: 0b:99:30:db:1b:b9:86:cb:97:d0:d1:c5:de:4e:bd: 7e:0b:db:a7:f8:e7:10:c7:8e:c2:db:c8:08:af:54: 7e:33:08:67:f9:b8:f3:69:8d:77:e9:d3:53:6a:71: 85:56:a2:f0:7b:a2:f6:ad:64:95:16:d0:b1:5c:cd: 76:0e:ed:13:3d:42:b1:75:38:9e:73:66:85:0d:40: d0:ad:1b:bc:d9:95:9e:81:2a:07:12:75:9d:e8:4e: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C4:4B:D7:12:22:B2:CD:82:CE:8F:CD:46:13:29:F2:62:68:5B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e2370ff-1bac-3968-8511-ec785a20d1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5b:9c:3e:0c:0d:70:bc:da:ad:30:ed:9b:94:c6:60:76:79: 16:89:56:b7:f4:06:b8:f6:bc:55:cc:88:cc:eb:69:5b:42:36: b8:9c:5a:f0:ee:f5:32:9f:ef:d5:dd:92:ce:a7:82:8c:c9:7d: 18:e7:09:c8:46:69:20:cf:5d:a1:45:b7:b0:dd:65:83:d2:99: 94:49:99:7b:19:fa:b2:59:64:95:c7:77:46:69:b3:b0:20:44: a8:8c:40:09:cf:fb:38:35:4d:7d:32:fe:e0:bf:ef:79:e5:52: 57:02:8c:a1:2a:67:59:00:3b:52:fd:f2:2f:83:50:63:6d:a6: 01:03:cb:4a:c6:09:f3:51:3f:ca:9d:1f:d9:42:d0:fa:4a:49: db:3a:38:d6:7a:58:83:20:65:bd:b8:93:33:e5:01:33:ec:3d: c2:7b:33:26:cd:a2:20:a5:53:f9:93:d1:18:08:e1:d3:f6:77: 39:3d:c4:31:58:13:cf:b7:3b:c6:42:cd:d1:1e:eb:ad:5b:37: 5d:5d:22:f6:be:59:7b:fd:12:cf:52:90:c9:e9:ed:64:cb:c4: 9d:5c:06:f5:20:30:f5:db:de:fa:d4:75:66:ae:f2:cb:1c:ea: e9:4d:cb:b2:53:93:f7:e0:99:fb:68:1c:e1:02:48:2e:7a:0c: 9b:35:84:2c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/Q4XVXbxUWNhmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZTgyMDI3MDktMGY4MS00ZjMzLThmZmQtZGVlNjVjMDk2N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZg7hDIElOiRRfb5ygsAttr/SHbm5AzKbnY+ FYbI6X8FDkaPKXimCZF/kEkFRipEKYx8P8gkWRM4URl7VUCQuE0rDGF6CV4PTO7x Q6gfKWXj/C8ND8tuGUK21aup3kgTCTEYN6Gk0q2z0fM1dI5ZcDSq+4FrScflG8qM sfso4/0Iw3l8WkdXnOyYoTMMuidSvILfwIQNaSZ58KNHY1kBdmteTWsLmTDbG7mG y5fQ0cXeTr1+C9un+OcQx47C28gIr1R+Mwhn+bjzaY136dNTanGFVqLwe6L2rWSV FtCxXM12Du0TPUKxdTiec2aFDUDQrRu82ZWegSoHEnWd6E6CTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMrES9cSIrLNgs6PzUYTKfJiaFsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyMzcwZmYtMWJhYy0z OTY4LTg1MTEtZWM3ODVhMjBkMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYBAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFFucPgwNcLzarTDtm5TGYHZ5FolWt/QGuPa8VcyIzOtpW0I2uJxa8O71 Mp/v1d2SzqeCjMl9GOcJyEZpIM9doUW3sN1lg9KZlEmZexn6sllklcd3RmmzsCBE qIxACc/7ODVNfTL+4L/veeVSVwKMoSpnWQA7Uv3yL4NQY22mAQPLSsYJ81E/yp0f 2ULQ+kpJ2zo41npYgyBlvbiTM+UBM+w9wnszJs2iIKVT+ZPRGAjh0/Z3OT3EMVgT z7c7xkLN0R7rrVs3XV0i9r5Ze/0Sz1KQyentZMvEnVwG9SAw9dve+tR1Zq7yyxzq 6U3LslOT9+CZ+2gc4QJILnoMmzWELA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:16:13 2025 by rpki-client