$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa File: 37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa (raw, json) Hash identifier: UJTuuEaxaXGY4l+lch9Nu8uWGzoElYpO7Lle4mucfFA= Subject key identifier: 1E:6E:13:7D:BD:B3:D9:5A:BA:E2:C1:4E:12:F7:00:F5:0D:02:C3:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D2DFC4EA2E2BC1284F480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 96.6.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2d:fc:4e:a2:e2:bc:12:84:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4050b655-f45a-45b3-a08b-843cb5bc9462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:90:22:24:c8:bd:af:a5:c2:35:5b:94:e9: d0:dd:1e:b1:1a:00:d1:c1:f5:0a:d0:8b:cc:88:42: fe:46:30:91:07:57:6b:ce:52:d7:1a:49:8e:9c:fe: e3:2b:37:ba:72:f9:1c:2b:8a:19:f5:39:65:18:47: 67:70:67:fa:34:e8:02:0e:a6:9d:c3:34:dd:fa:66: 30:5d:1a:52:46:e0:2c:e4:cb:7d:ca:90:9e:a8:34: f0:e2:76:c5:9f:a1:ca:7b:4f:3e:35:d7:c1:fc:53: 1b:3c:cc:c6:b8:9a:ee:5f:07:37:24:91:d0:de:95: d1:27:2a:bd:41:a9:f9:14:ff:82:25:b8:28:7a:0a: f2:42:16:07:67:a5:b5:2e:09:9b:2f:ef:69:10:61: 07:d6:74:ae:e5:41:b9:27:27:01:7f:14:d4:41:8d: f9:92:f7:12:4c:c6:bb:7e:60:4d:95:d4:1a:21:94: 57:80:89:a9:4e:27:01:74:98:cd:df:bb:15:ca:65: 73:1f:04:70:bc:f0:10:6f:1d:cd:b7:49:99:a1:9c: af:9b:54:24:6b:b7:3c:54:4a:9e:f2:97:b0:61:37: 28:19:7c:bf:f6:1c:41:b6:42:21:56:5e:e1:c9:ca: 4e:8e:5c:78:db:55:86:90:27:1c:d1:f8:ff:ac:08: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6E:13:7D:BD:B3:D9:5A:BA:E2:C1:4E:12:F7:00:F5:0D:02:C3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:2f:ea:41:51:08:74:ca:00:7f:15:92:69:3b:39:c6:30: c4:11:14:c7:4f:a8:ac:cb:37:47:7a:d4:c0:c8:f6:fc:dd:57: fe:02:de:53:ed:82:ba:54:61:ea:1b:6b:8b:41:00:b8:09:19: 79:ee:fc:ec:15:06:99:04:5d:a0:65:f6:3b:f7:67:16:43:61: 2b:8a:08:ac:0f:6d:c1:d6:03:2f:77:2f:ef:c1:5d:40:52:d5: fd:ed:bd:92:85:3c:e4:ca:3a:7a:da:c4:07:a8:49:3b:96:88: 03:64:67:d1:db:44:3e:80:33:5f:76:07:b1:91:75:f8:23:9e: e9:8e:eb:39:99:68:a0:23:25:76:b2:2f:0e:cd:e2:90:a6:3d: c8:69:22:9f:86:72:09:91:d3:15:2d:18:98:1d:1a:6b:fd:3e: 85:b2:4e:d5:30:1d:9b:f7:ae:c6:83:1d:8e:83:4b:53:a8:5a: e7:27:95:a1:1c:94:4a:d6:bc:4c:50:04:19:b5:49:07:c7:15: 3e:80:6f:7b:7c:d8:89:86:6b:2e:d4:97:c0:fc:32:d4:63:58: f0:03:85:ba:23:ab:3e:4e:0b:32:eb:80:a2:2a:8e:de:57:20: 2c:9d:5a:93:86:a7:3d:51:0c:d1:10:0f:11:bf:53:32:11:41: b0:a8:9c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS38TqLivBKE9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDA1MGI2NTUtZjQ1YS00NWIzLWEwOGItODQzY2I1YmM5NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt82QIiTIva+lwjVblOnQ3R6xGgDRwfUK0IvM iEL+RjCRB1drzlLXGkmOnP7jKze6cvkcK4oZ9TllGEdncGf6NOgCDqadwzTd+mYw XRpSRuAs5Mt9ypCeqDTw4nbFn6HKe08+NdfB/FMbPMzGuJruXwc3JJHQ3pXRJyq9 Qan5FP+CJbgoegryQhYHZ6W1LgmbL+9pEGEH1nSu5UG5JycBfxTUQY35kvcSTMa7 fmBNldQaIZRXgImpTicBdJjN37sVymVzHwRwvPAQbx3Nt0mZoZyvm1Qka7c8VEqe 8pewYTcoGXy/9hxBtkIhVl7hycpOjlx421WGkCcc0fj/rAjAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5uE329s9lauuLBThL3APUNAsOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdhM2UzOGMtMzIzNS0z ZGNiLWI1OTQtNTFmNWU0YTQ5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0BL+pBUQh0ygB/FZJpOznGMMQRFMdPqKzLN0d61MDI9vzdV/4C3lPt grpUYeoba4tBALgJGXnu/OwVBpkEXaBl9jv3ZxZDYSuKCKwPbcHWAy93L+/BXUBS 1f3tvZKFPOTKOnraxAeoSTuWiANkZ9HbRD6AM192B7GRdfgjnumO6zmZaKAjJXay Lw7N4pCmPchpIp+GcgmR0xUtGJgdGmv9PoWyTtUwHZv3rsaDHY6DS1OoWucnlaEc lErWvExQBBm1SQfHFT6Ab3t82ImGay7Ul8D8MtRjWPADhbojqz5OCzLrgKIqjt5X ICydWpOGpz1RDNEQDxG/UzIRQbConE0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:04 2025 by rpki-client