$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9da89d-a1ca-39f7-a2ea-943ca9e62a13.roa File: 5d9da89d-a1ca-39f7-a2ea-943ca9e62a13.roa (raw, json) Hash identifier: Kj/3iUhAmZo30Y0aM/6waBgiSvwxlvSX9jtuniOYx1Q= Subject key identifier: A8:2E:F5:B8:E5:D7:9C:32:AC:C4:F5:27:AA:83:F7:37:6A:1F:D7:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D35C030A1F295AD8CBA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9da89d-a1ca-39f7-a2ea-943ca9e62a13.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 96.7.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:35:c0:30:a1:f2:95:ad:8c:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8f5f65be-41ff-42bd-bc6e-a4f4b5ced913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:94:2e:2e:34:2e:a9:da:f0:78:ff:82:0b: ac:f5:71:da:c3:e3:8a:a0:71:ed:de:ed:aa:61:19: 79:44:ac:29:5c:36:d1:2f:6b:97:2b:fe:f3:49:a2: 69:e9:10:07:28:8e:39:e0:60:04:c8:01:7e:2c:6a: 81:e5:72:fd:ca:62:25:98:7c:20:93:f9:00:5b:96: 67:4f:45:df:fa:42:32:19:da:af:db:94:e9:1f:76: 1f:f6:e4:f6:84:79:b6:56:3c:e5:ea:6b:0a:10:fc: 0f:67:9a:f8:37:f7:c0:9b:77:6f:21:d0:55:fa:3e: 68:cd:d6:66:9c:5a:a6:79:1f:ad:3d:2f:43:01:68: 60:cd:de:db:87:aa:e5:57:9c:ac:46:2d:43:69:59: 51:dd:5a:78:16:8c:e5:2c:5c:1b:e5:16:77:e1:f1: ad:a7:ce:43:88:63:42:f9:b0:5f:d5:5e:f7:4c:2b: 01:48:ce:0a:52:2e:62:26:89:e4:e7:19:1d:49:12: 19:b6:55:c8:c3:ea:80:69:1e:ac:a0:4f:d9:fc:b3: ab:ed:94:65:ef:f2:ca:7a:21:45:ab:63:e7:57:83: 38:ce:9a:8d:34:19:73:0c:94:fa:9a:3a:36:b7:21: 2a:06:66:14:9d:47:db:cf:be:25:e1:96:8e:23:47: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:F5:B8:E5:D7:9C:32:AC:C4:F5:27:AA:83:F7:37:6A:1F:D7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9da89d-a1ca-39f7-a2ea-943ca9e62a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e1:b3:3b:aa:a3:38:fc:42:2e:86:88:07:69:8e:36:70:8b: 25:16:87:75:df:18:41:68:59:74:4c:65:b4:b0:63:80:1a:75: 49:04:29:c2:8e:94:7e:2a:a7:20:d2:71:87:39:82:27:2a:8d: c2:f1:81:10:ba:a2:01:e7:34:11:83:34:d1:11:d8:52:8c:e6: 8f:5b:54:da:71:a6:14:f1:2a:d9:ab:ff:68:67:be:b2:1f:31: dd:42:26:04:93:d2:a7:4e:4e:ec:a8:f2:93:b1:b6:62:41:81: 56:5d:bf:68:aa:88:c8:9c:08:65:c9:1b:61:14:27:23:f5:7e: 6b:67:78:8b:98:f9:83:14:1f:69:cd:a7:9a:c4:21:df:cc:d3: ee:a3:cb:4c:70:70:60:ca:c0:51:6a:3e:c0:ce:6e:bb:97:a4: a2:f3:7c:10:db:bf:e9:a9:a2:8f:15:2a:34:62:ed:0f:b4:7e: af:06:71:84:08:c9:63:f8:50:e1:b2:c4:f6:53:ab:83:2a:24: a9:c4:c4:f5:a6:ea:0a:1e:62:78:6f:33:cd:c5:6a:11:aa:c8: 43:1f:5a:18:40:e4:43:a5:ce:6f:70:0d:81:d5:ad:9f:e6:25: ba:b2:af:95:c7:dc:9d:90:42:87:79:5b:6e:72:15:1b:0f:c3: 72:d0:0a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTXAMKHyla2MukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OGY1ZjY1YmUtNDFmZi00MmJkLWJjNmUtYTRmNGI1Y2VkOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YuULi40Lqna8Hj/ggus9XHaw+OKoHHt3u2q YRl5RKwpXDbRL2uXK/7zSaJp6RAHKI454GAEyAF+LGqB5XL9ymIlmHwgk/kAW5Zn T0Xf+kIyGdqv25TpH3Yf9uT2hHm2Vjzl6msKEPwPZ5r4N/fAm3dvIdBV+j5ozdZm nFqmeR+tPS9DAWhgzd7bh6rlV5ysRi1DaVlR3Vp4FozlLFwb5RZ34fGtp85DiGNC +bBf1V73TCsBSM4KUi5iJonk5xkdSRIZtlXIw+qAaR6soE/Z/LOr7ZRl7/LKeiFF q2PnV4M4zpqNNBlzDJT6mjo2tyEqBmYUnUfbz74l4ZaOI0cbvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgu9bjl15wyrMT1J6qD9zdqH9fHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ5ZGE4OWQtYTFjYS0z OWY3LWEyZWEtOTQzY2E5ZTYyYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHhszuqozj8Qi6GiAdpjjZwiyUWh3XfGEFoWXRMZbSwY4AadUkEKcKO lH4qpyDScYc5gicqjcLxgRC6ogHnNBGDNNER2FKM5o9bVNpxphTxKtmr/2hnvrIf Md1CJgST0qdOTuyo8pOxtmJBgVZdv2iqiMicCGXJG2EUJyP1fmtneIuY+YMUH2nN p5rEId/M0+6jy0xwcGDKwFFqPsDObruXpKLzfBDbv+mpoo8VKjRi7Q+0fq8GcYQI yWP4UOGyxPZTq4MqJKnExPWm6goeYnhvM83FahGqyEMfWhhA5EOlzm9wDYHVrZ/m Jbqyr5XH3J2QQod5W25yFRsPw3LQClM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:30 2025 by rpki-client