$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa File: 444991fd-cae5-3f39-a5b6-05da59ccf602.roa (raw, json) Hash identifier: e0olXSI00drV0SI+/1WmEto78HpYqAvd37LWoO+rh+A= Subject key identifier: 3C:6B:CA:91:88:6E:8A:92:4C:E0:03:BF:4B:60:A1:48:06:05:4A:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39CF3341F490E857EB6A540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 200005 IP address blocks: 96.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f3:34:1f:49:0e:85:7e:b6:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=85b11539-c779-47f6-a0c2-a39b116da912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:2b:3d:25:1d:33:96:69:cc:1a:b1:39:ad: 91:26:6d:53:be:ab:04:df:f1:31:d0:2c:a8:3a:61: f1:27:a8:9e:0f:9c:f6:fa:bc:91:c8:58:e4:c9:59: 3f:67:5c:dc:2b:25:e7:81:52:d7:3b:59:ff:d2:49: 5a:41:03:f8:ec:12:25:8b:f8:c6:36:2d:36:bd:5b: bc:8f:9e:0f:b4:c6:cd:c2:f8:0d:06:9b:00:06:30: 07:cc:f9:b1:3c:08:de:b9:31:3d:8a:7b:58:d4:06: 0f:d5:d3:0b:23:28:78:cf:ee:7f:54:72:b0:75:61: f1:99:45:14:02:2a:45:ff:9d:ac:bd:bc:51:ab:e7: 83:8b:da:59:b1:9a:a5:6f:a5:0b:d1:cc:55:47:0d: 05:45:66:cc:e8:93:4c:27:c3:8e:47:0a:f1:65:1d: d2:95:51:b8:00:d2:c2:f0:f0:f3:f1:37:86:49:3d: a7:82:91:22:7c:fb:7b:94:d8:91:92:34:f4:1e:3a: b2:32:7b:6a:49:71:fb:dc:cc:02:f0:85:89:47:dd: ad:5b:31:4f:4c:ae:7d:e6:7d:e8:98:a4:30:55:46: ad:92:1c:aa:2d:2d:86:7c:69:ab:0b:71:84:1c:e1: 3d:7b:8d:07:fb:a9:6f:a4:4b:4f:93:40:ee:74:fa: 64:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:CA:91:88:6E:8A:92:4C:E0:03:BF:4B:60:A1:48:06:05:4A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/444991fd-cae5-3f39-a5b6-05da59ccf602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:24:33:74:13:04:cc:a5:7e:91:36:6b:82:f4:22:66:2a:bc: f9:9d:e3:11:b7:cd:cd:64:94:57:e1:23:5c:71:46:1a:f8:c4: 25:3a:fb:ff:ea:69:c7:cf:1e:71:45:13:e5:f8:97:51:6e:d4: 07:e4:e3:de:13:48:3b:79:81:d7:6c:4d:9f:fc:d7:fb:f5:e7: 2b:54:7c:eb:f7:ad:58:8d:87:57:84:b7:66:90:1e:7c:87:8b: 2f:f6:c0:fe:e4:87:3e:08:bc:4f:eb:3c:f2:57:21:78:43:a6: 27:b6:c8:ef:4f:c7:39:31:25:a0:7c:5c:4d:aa:e2:76:d9:64: ce:0e:0b:73:ea:ca:fa:35:9d:2c:f9:8d:3a:58:3d:c7:9b:cf: 41:0f:05:09:72:20:cd:44:5f:f4:b9:06:9c:ee:12:77:67:6c: f8:8e:ff:64:4f:9d:e3:cb:94:12:9c:1e:c2:f5:ec:43:6f:78: fc:72:0b:20:a0:ba:19:cd:49:b1:2e:2d:2a:2b:23:f8:05:cb: bc:cb:db:2e:d6:b1:a1:e0:07:34:53:12:92:d8:f9:84:a3:84: be:5f:b3:d7:59:b3:15:d5:42:87:00:e7:ae:ab:49:f1:70:43: 5f:82:d0:36:74:f5:83:6d:8c:2b:88:b1:77:58:90:50:bd:40: f2:c6:e1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPM0H0kOhX62pUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODViMTE1MzktYzc3OS00N2Y2LWEwYzItYTM5YjExNmRhOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpIrPSUdM5ZpzBqxOa2RJm1TvqsE3/Ex0Cyo OmHxJ6ieD5z2+ryRyFjkyVk/Z1zcKyXngVLXO1n/0klaQQP47BIli/jGNi02vVu8 j54PtMbNwvgNBpsABjAHzPmxPAjeuTE9intY1AYP1dMLIyh4z+5/VHKwdWHxmUUU AipF/52svbxRq+eDi9pZsZqlb6UL0cxVRw0FRWbM6JNMJ8OORwrxZR3SlVG4ANLC 8PDz8TeGST2ngpEifPt7lNiRkjT0HjqyMntqSXH73MwC8IWJR92tWzFPTK595n3o mKQwVUatkhyqLS2GfGmrC3GEHOE9e40H+6lvpEtPk0DudPpknwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxrypGIboqSTOADv0tgoUgGBUqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ0OTkxZmQtY2FlNS0z ZjM5LWE1YjYtMDVkYTU5Y2NmNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0kM3QTBMylfpE2a4L0ImYqvPmd4xG3zc1klFfhI1xxRhr4xCU6+//q acfPHnFFE+X4l1Fu1Afk494TSDt5gddsTZ/81/v15ytUfOv3rViNh1eEt2aQHnyH iy/2wP7khz4IvE/rPPJXIXhDpie2yO9PxzkxJaB8XE2q4nbZZM4OC3Pqyvo1nSz5 jTpYPcebz0EPBQlyIM1EX/S5BpzuEndnbPiO/2RPnePLlBKcHsL17ENvePxyCyCg uhnNSbEuLSorI/gFy7zL2y7WsaHgBzRTEpLY+YSjhL5fs9dZsxXVQocA566rSfFw Q1+C0DZ09YNtjCuIsXdYkFC9QPLG4c4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:43 2025 by rpki-client