$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa File: 3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa (raw, json) Hash identifier: HDBxyf/o4tSR3LsI9cG0GNgxYI8Nsgr500va8ti6Gy8= Subject key identifier: F8:53:02:50:58:46:37:F9:26:42:36:C4:55:46:46:5F:7D:4B:F3:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2B97E471CA9AB3CCC180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 96.16.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2b:97:e4:71:ca:9a:b3:cc:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=1f1a7df1-d359-4be0-ba25-ecc9eda6758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:93:6a:9e:7f:76:42:c4:f8:aa:30:6c:de: 8c:1d:4d:c4:21:13:a4:e5:62:c0:1a:06:44:fe:1b: c6:1d:db:e8:21:c7:0c:16:89:7d:17:68:ec:1e:40: d4:90:bc:75:ec:0f:7f:08:28:f4:47:73:dc:96:24: 06:4d:07:79:7a:36:e7:8f:1f:a5:ee:be:87:e1:b5: 44:a7:e0:56:43:27:6c:a5:d7:3b:ab:25:b2:bd:81: 07:c6:b8:ac:64:30:5d:be:2b:8e:96:b6:45:d5:f6: f7:8b:be:5e:21:5b:47:b7:38:bc:21:45:a8:0f:0c: d4:db:4c:98:68:ad:01:41:8a:50:8d:df:11:24:5e: f2:83:76:ce:0c:94:d1:06:37:88:2b:d3:c2:5b:b9: 7a:20:ff:c5:13:76:f1:ae:3a:ee:c5:2e:73:ee:b5: d3:4e:0e:3f:88:3d:af:14:08:17:f1:49:8c:09:f0: 2c:f3:fe:91:83:6d:67:84:da:21:d2:b2:20:d7:14: 7c:a5:9a:35:86:bf:74:cc:9b:37:6d:88:da:c4:b9: a0:4e:d4:ad:83:d8:a4:e4:72:58:59:49:1a:ce:97: 9e:fa:4a:7f:02:b0:26:4a:b4:d9:53:00:01:15:e7: c4:be:19:78:9e:71:a8:1e:1f:6a:2e:bf:97:1a:ef: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:53:02:50:58:46:37:F9:26:42:36:C4:55:46:46:5F:7D:4B:F3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:29:12:5a:ba:51:08:46:97:f7:8b:f0:45:f1:c8:79:97:e0: dd:96:87:7b:f2:30:bc:3b:b1:ae:b5:50:63:65:04:fc:4e:64: a0:2b:82:58:be:3d:c6:7f:d3:d1:bc:0c:2a:c6:dd:95:66:1e: fe:13:5f:fe:76:b4:18:e2:e8:67:0c:74:14:f3:74:d9:46:83: 8c:b8:b5:e3:e6:23:70:8a:dc:89:dc:74:1e:3a:89:82:ac:a5: 79:ae:5e:6e:6e:d4:c8:ff:fa:4b:52:bc:60:97:22:4a:05:60: 93:8f:90:18:ef:68:f8:2e:e6:83:fe:9c:15:a4:c1:0b:9b:7f: 1b:01:01:2f:b9:dc:ad:27:d1:16:d7:f6:f8:83:07:4e:cf:bd: f7:86:1d:2c:72:ea:7d:d3:f5:4d:ba:2d:9d:90:4f:38:1e:90: 3f:c2:d4:04:e2:f5:80:8d:b0:b9:31:1c:8b:5e:c6:bd:06:69: 32:9d:6d:0d:72:d5:c7:61:7f:a9:42:87:af:0d:6d:07:e3:34: 58:bc:aa:fa:ce:7e:78:94:95:5e:0e:1f:0d:3e:90:0c:df:77: e2:71:42:4f:05:df:85:41:15:00:c0:70:6e:b8:e5:74:4a:e8: e2:5e:f5:d0:df:79:85:b9:be:45:fb:41:85:60:d6:6c:7b:96: 59:d0:c7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SuX5HHKmrPMwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MWYxYTdkZjEtZDM1OS00YmUwLWJhMjUtZWNjOWVkYTY3NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkReTap5/dkLE+KowbN6MHU3EIROk5WLAGgZE /hvGHdvoIccMFol9F2jsHkDUkLx17A9/CCj0R3PcliQGTQd5ejbnjx+l7r6H4bVE p+BWQydspdc7qyWyvYEHxrisZDBdviuOlrZF1fb3i75eIVtHtzi8IUWoDwzU20yY aK0BQYpQjd8RJF7yg3bODJTRBjeIK9PCW7l6IP/FE3bxrjruxS5z7rXTTg4/iD2v FAgX8UmMCfAs8/6Rg21nhNoh0rIg1xR8pZo1hr90zJs3bYjaxLmgTtStg9ik5HJY WUkazpee+kp/ArAmSrTZUwABFefEvhl4nnGoHh9qLr+XGu9cuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhTAlBYRjf5JkI2xFVGRl99S/NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RhNDk4MDAtYmUyMC0z ZTJlLWI3M2YtZmNhN2UzMGU2YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4pElq6UQhGl/eL8EXxyHmX4N2Wh3vyMLw7sa61UGNlBPxOZKArgli+ PcZ/09G8DCrG3ZVmHv4TX/52tBji6GcMdBTzdNlGg4y4tePmI3CK3IncdB46iYKs pXmuXm5u1Mj/+ktSvGCXIkoFYJOPkBjvaPgu5oP+nBWkwQubfxsBAS+53K0n0RbX 9viDB07PvfeGHSxy6n3T9U26LZ2QTzgekD/C1ATi9YCNsLkxHItexr0GaTKdbQ1y 1cdhf6lCh68NbQfjNFi8qvrOfniUlV4OHw0+kAzfd+JxQk8F34VBFQDAcG645XRK 6OJe9dDfeYW5vkX7QYVg1mx7llnQxwU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:56:41 2025 by rpki-client