$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa File: 420b9c63-7b08-31c3-b036-98333fad9118.roa (raw, json) Hash identifier: PxcwzYOMqr9j9B6pSptBfxU4O1wVoBI166Iv4DpMWWw= Subject key identifier: 52:63:EC:2C:FC:A6:28:90:2A:6E:C1:B4:AB:05:7C:54:AA:1F:51:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2BF86506007882370C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 96.16.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2b:f8:65:06:00:78:82:37:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=cf159f37-7c96-4c41-9264-fdb343d290ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:ab:56:03:d3:89:db:44:43:94:3a:14:a1: e3:9b:89:7b:25:d1:2f:5f:ff:8f:ae:0b:0d:d3:dc: 1c:ba:cd:b1:31:a0:ed:8a:4a:66:7b:46:ce:e1:f1: f7:b9:bb:d2:01:5b:f9:f2:6c:e2:87:53:14:d3:da: 51:67:61:0c:11:67:3b:88:fb:6d:9f:ad:db:a2:de: 7b:3e:69:db:c9:cc:cf:24:1a:24:bb:3d:a7:12:f0: 00:c7:3e:d3:f4:ed:f6:71:19:66:f5:f4:7a:29:3d: 8e:55:59:3a:65:b1:3e:a5:bb:09:63:9d:f8:76:34: df:cb:a0:2b:96:1c:6f:d3:8a:ff:f8:a1:fd:d0:70: 31:11:ce:d1:b5:8a:a8:48:46:b5:92:cd:3d:c9:22: 33:28:32:27:f5:ec:11:25:9f:4b:fc:ee:26:01:20: f1:c5:c8:ee:ce:39:75:6f:62:08:16:c3:8a:ed:e4: ca:10:5c:35:0b:a8:49:fe:36:0e:c8:4d:1a:89:cd: a4:53:46:19:04:08:93:74:d1:e0:ed:e7:04:b3:6f: 57:5d:75:41:24:87:68:b6:27:b4:a0:72:25:39:55: 0b:21:c9:30:3a:bc:87:6a:3b:80:9a:4b:46:5e:cb: 04:a7:82:06:55:a8:93:07:3d:e8:40:90:f4:6e:0a: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:63:EC:2C:FC:A6:28:90:2A:6E:C1:B4:AB:05:7C:54:AA:1F:51:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d1:dd:ea:e6:0c:f9:1b:07:e8:17:56:64:0b:13:75:e4:c4: b7:21:ca:6f:52:79:e1:0e:28:f1:e1:df:06:bf:b7:94:de:60: 85:52:f0:62:08:1b:c2:1c:b5:b1:3a:11:42:bd:f4:6d:d3:9a: 1d:0e:b9:b8:87:24:c3:50:9d:a5:75:aa:f2:1e:fd:bb:95:04: 63:c1:49:51:e0:7a:6e:76:49:0b:b0:5e:89:7e:75:f9:85:cb: f7:d7:fc:54:3e:05:3f:b1:c6:25:b0:81:0b:15:07:be:3a:6f: 5a:f1:c5:4d:90:1f:63:9f:92:23:12:bb:38:4a:cc:59:04:ad: 1a:7c:05:c8:10:23:88:f4:dd:db:7b:81:86:1f:03:fe:46:5d: 00:b4:f1:50:de:dc:6b:8d:fa:71:3a:86:48:dc:dd:5a:1f:8e: 97:20:01:28:76:00:b1:c6:b3:57:c0:8a:a1:90:db:ec:51:7e: e0:e3:ac:ef:a3:ea:a0:ff:f8:e0:60:73:27:f7:03:05:83:5e: 0f:85:3e:99:6d:6a:ae:a9:50:67:e2:e6:f4:ab:69:63:88:7f: ec:5b:d4:0e:d2:e0:84:77:8d:e4:50:87:70:2c:8f:8c:ad:42: 49:7f:51:62:17:6d:93:3c:ea:dc:64:25:1b:d0:9e:46:ac:b9: 98:ce:9f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Sv4ZQYAeII3DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2YxNTlmMzctN2M5Ni00YzQxLTkyNjQtZmRiMzQzZDI5MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYyrVgPTidtEQ5Q6FKHjm4l7JdEvX/+PrgsN 09wcus2xMaDtikpme0bO4fH3ubvSAVv58mzih1MU09pRZ2EMEWc7iPttn63bot57 PmnbyczPJBokuz2nEvAAxz7T9O32cRlm9fR6KT2OVVk6ZbE+pbsJY534djTfy6Ar lhxv04r/+KH90HAxEc7RtYqoSEa1ks09ySIzKDIn9ewRJZ9L/O4mASDxxcjuzjl1 b2IIFsOK7eTKEFw1C6hJ/jYOyE0aic2kU0YZBAiTdNHg7ecEs29XXXVBJIdotie0 oHIlOVULIckwOryHajuAmktGXssEp4IGVaiTBz3oQJD0bgpKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJj7Cz8piiQKm7BtKsFfFSqH1HGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIwYjljNjMtN2IwOC0z MWMzLWIwMzYtOTgzMzNmYWQ5MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDR3ermDPkbB+gXVmQLE3XkxLchym9SeeEOKPHh3wa/t5TeYIVS8GII G8IctbE6EUK99G3Tmh0OubiHJMNQnaV1qvIe/buVBGPBSVHgem52SQuwXol+dfmF y/fX/FQ+BT+xxiWwgQsVB746b1rxxU2QH2OfkiMSuzhKzFkErRp8BcgQI4j03dt7 gYYfA/5GXQC08VDe3GuN+nE6hkjc3VofjpcgASh2ALHGs1fAiqGQ2+xRfuDjrO+j 6qD/+OBgcyf3AwWDXg+FPpltaq6pUGfi5vSraWOIf+xb1A7S4IR3jeRQh3Asj4yt Qkl/UWIXbZM86txkJRvQnkasuZjOn04= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:10 2025 by rpki-client