$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa File: 540179f1-12c7-36b3-82d6-626a329ee8e2.roa (raw, json) Hash identifier: JRhJgN6/KRPpHmP0HQP4ghDQGlXCXfYlOJIPmopmqKs= Subject key identifier: 75:7B:37:81:C4:3E:9A:88:BB:FB:7A:91:71:31:F4:6B:50:84:0A:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D3459E04C0327E7083A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 96.7.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:34:59:e0:4c:03:27:e7:08:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=69cbd23e-064a-4ef6-96d3-00b7af03f171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:83:43:a4:93:32:2a:b9:d0:59:c0:81:df: 15:d5:6c:06:ed:f3:e0:1e:98:7e:11:8d:96:d2:96: 2f:f9:b7:2b:e0:c8:71:44:4f:7b:90:ca:3b:b1:b3: 97:c3:42:45:3b:de:37:25:92:97:a3:bc:12:24:3a: 31:8e:b3:a1:05:95:36:98:15:f8:ec:87:2f:b9:69: 4a:ae:40:d5:60:61:14:51:e8:82:cf:c6:df:24:22: d5:91:66:f3:96:47:6d:b3:09:10:36:a9:64:82:e5: e3:2b:b6:4f:70:3f:6b:2e:68:44:04:e7:cb:eb:09: f7:d8:a3:f6:c3:f8:6e:d1:6f:9a:18:fd:be:c5:b3: 93:9a:8c:1d:6d:b8:40:97:33:01:5f:d6:2e:fe:b7: ea:66:5e:d9:87:2c:d8:51:5a:e5:1e:a7:93:97:ae: d8:a2:5a:bb:3c:a0:cc:00:2d:e7:96:26:39:3c:79: 34:45:9c:8b:63:3a:3f:e5:9a:63:a1:16:92:68:d5: 26:32:7d:1e:3c:28:24:1d:7a:bd:d3:2c:90:f7:0c: 6f:84:8d:b5:0c:7b:aa:94:f1:b7:df:a5:ec:45:37: 03:10:95:63:4d:c9:b3:73:e0:ce:ea:2a:4f:ec:f6: b3:de:0c:49:fe:57:65:7d:6d:01:f9:b0:6e:c8:18: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:37:81:C4:3E:9A:88:BB:FB:7A:91:71:31:F4:6B:50:84:0A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0f:70:cb:b8:dc:af:07:19:81:d7:a3:51:1f:b8:de:9d:31: 6e:b8:17:41:ee:9a:4c:25:d9:07:83:af:f6:2b:d1:9a:15:d9: 4e:75:f4:d1:1e:9a:ea:c1:2e:60:56:98:70:31:f1:90:eb:85: 3f:c3:af:fe:ad:03:4d:58:15:1b:de:59:58:0d:69:73:35:ae: 38:41:e8:90:04:5f:fb:5f:ea:e8:2a:c2:23:46:8d:f7:72:ab: 4f:13:43:04:30:0d:02:28:99:26:78:c0:98:c6:aa:65:98:a1: 77:4d:6d:78:9d:a3:c7:02:ec:56:a0:4d:1a:f9:6d:e6:0f:d5: 25:00:64:1f:52:76:83:f9:9a:37:10:a8:d4:13:d4:04:7b:b7: 29:d6:e0:95:d4:72:ad:6b:bd:cf:97:47:3f:99:ae:5d:29:05: 55:09:82:57:7f:9b:d0:08:42:75:c4:4a:7a:af:ba:f7:25:ed: 1d:9d:15:ee:00:b9:31:5f:ef:48:cb:f3:44:10:9b:d0:d1:66: 49:ea:fa:40:06:f7:4c:c3:f0:56:4b:e8:45:22:e8:d1:15:3c: 10:f2:18:bc:81:09:14:21:61:aa:ea:e3:ce:49:61:c0:1e:42: e4:76:4d:63:46:50:15:3e:d4:37:7d:bd:0b:f3:c4:bf:13:7d: 31:65:b3:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTRZ4EwDJ+cIOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjljYmQyM2UtMDY0YS00ZWY2LTk2ZDMtMDBiN2FmMDNmMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SyDQ6STMiq50FnAgd8V1WwG7fPgHph+EY2W 0pYv+bcr4MhxRE97kMo7sbOXw0JFO943JZKXo7wSJDoxjrOhBZU2mBX47IcvuWlK rkDVYGEUUeiCz8bfJCLVkWbzlkdtswkQNqlkguXjK7ZPcD9rLmhEBOfL6wn32KP2 w/hu0W+aGP2+xbOTmowdbbhAlzMBX9Yu/rfqZl7ZhyzYUVrlHqeTl67Yolq7PKDM AC3nliY5PHk0RZyLYzo/5ZpjoRaSaNUmMn0ePCgkHXq90yyQ9wxvhI21DHuqlPG3 36XsRTcDEJVjTcmzc+DO6ipP7Paz3gxJ/ldlfW0B+bBuyBgg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV7N4HEPpqIu/t6kXEx9GtQhAosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQwMTc5ZjEtMTJjNy0z NmIzLTgyZDYtNjI2YTMyOWVlOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcPcMu43K8HGYHXo1EfuN6dMW64F0Humkwl2QeDr/Yr0ZoV2U519NEe murBLmBWmHAx8ZDrhT/Dr/6tA01YFRveWVgNaXM1rjhB6JAEX/tf6ugqwiNGjfdy q08TQwQwDQIomSZ4wJjGqmWYoXdNbXido8cC7FagTRr5beYP1SUAZB9SdoP5mjcQ qNQT1AR7tynW4JXUcq1rvc+XRz+Zrl0pBVUJgld/m9AIQnXESnqvuvcl7R2dFe4A uTFf70jL80QQm9DRZknq+kAG90zD8FZL6EUi6NEVPBDyGLyBCRQhYarq485JYcAe QuR2TWNGUBU+1Dd9vQvzxL8TfTFls7o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:08 2025 by rpki-client