$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa File: 65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa (raw, json) Hash identifier: wGyIQuH2bfIfDVgWB9q/n8v9EBD2oJVjAsTZhqHokl0= Subject key identifier: EB:6D:84:3F:31:8C:31:8A:EA:A7:32:77:24:83:C7:99:D1:04:2B:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD163EF28112C258C19B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 96.16.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:16:3e:f2:81:12:c2:58:c1:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=7c2b4c1e-f2d5-4d08-9397-37787ffa2e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:6d:c7:2d:c0:7c:06:90:74:e9:e8:75:71: 3f:3c:67:1b:38:6e:c5:20:28:ab:01:22:a4:c1:d9: cc:53:41:31:10:e2:ab:86:32:71:e5:1c:2b:33:eb: a1:fa:d4:20:22:98:eb:de:44:d4:ce:f4:d8:4f:04: 09:9f:50:7a:79:b2:69:15:9f:56:8d:df:02:28:e1: a5:a4:85:a3:2b:07:0d:90:0e:5a:4b:c3:78:82:71: aa:d3:d3:78:2f:e8:60:86:63:55:77:fc:4c:b4:9e: e9:07:12:30:12:11:54:5e:ba:b5:06:0e:f1:7c:39: ff:08:60:85:b8:44:61:ca:6a:84:a7:72:0f:4a:63: 59:af:9e:42:6c:ba:b7:f0:c6:c1:ce:c1:0a:6b:be: 86:ba:84:97:46:68:68:66:e2:73:60:cc:fe:8b:48: dc:87:6b:40:0b:5a:b2:09:c6:28:20:05:ae:d0:6b: 11:94:81:62:c3:1c:7b:af:d8:e1:3d:20:86:f3:d2: 11:bb:b0:a3:4a:c2:e6:94:7e:64:59:eb:6a:12:be: d6:d0:f3:73:c1:c6:2f:ca:af:89:5a:61:36:97:ac: 9a:f4:b4:21:11:68:9b:98:fc:54:66:65:2d:74:68: 12:d9:84:4b:7d:04:f6:2b:79:00:1a:4b:fa:83:c5: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:84:3F:31:8C:31:8A:EA:A7:32:77:24:83:C7:99:D1:04:2B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:65:9e:4c:35:02:83:ab:2d:66:49:c0:d0:a6:07:cb:31:31: bb:02:ec:fe:6c:b8:a9:6b:21:61:f8:8f:8f:6d:b2:9d:c4:d9: 79:d1:a3:69:d0:1d:b2:9d:25:78:0a:43:e0:b9:02:2d:d8:34: ac:32:c3:af:ab:51:33:bd:c1:12:ba:1c:95:d0:8f:82:0d:56: 7c:a8:5e:1c:1e:41:24:0b:e7:5e:66:4a:c9:59:21:5a:d4:f3: 5f:a2:66:9e:09:26:bc:a2:cd:1f:25:45:4a:88:41:f4:65:90: 90:85:c2:a4:f0:74:69:c6:eb:d9:fe:d8:b0:af:0f:1e:58:0b: 3a:e6:03:a9:4d:5d:f3:eb:00:24:74:3b:bc:ac:cc:45:4b:b9: 8f:a9:e2:84:c4:df:1c:74:9b:e6:35:a3:2b:30:86:94:58:b4: 2b:14:ea:24:60:f7:8b:75:0c:7d:10:56:d7:5a:ad:3e:97:a9: d5:15:a2:d3:5a:d8:4d:46:d5:49:26:e1:fc:e1:d6:26:34:8b: 04:c7:b0:bb:25:5b:ec:2b:42:2e:6f:da:c1:84:72:4f:e3:f3: f9:9c:03:c7:8d:f9:48:ea:53:76:07:4a:bf:40:da:29:b8:f3: 35:fd:85:fd:92:84:9b:6f:84:0f:42:9b:67:b9:fc:18:4f:51: e9:6e:50:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RY+8oESwljBm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk N2MyYjRjMWUtZjJkNS00ZDA4LTkzOTctMzc3ODdmZmEyZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBltxy3AfAaQdOnodXE/PGcbOG7FICirASKk wdnMU0ExEOKrhjJx5RwrM+uh+tQgIpjr3kTUzvTYTwQJn1B6ebJpFZ9Wjd8CKOGl pIWjKwcNkA5aS8N4gnGq09N4L+hghmNVd/xMtJ7pBxIwEhFUXrq1Bg7xfDn/CGCF uERhymqEp3IPSmNZr55CbLq38MbBzsEKa76GuoSXRmhoZuJzYMz+i0jch2tAC1qy CcYoIAWu0GsRlIFiwxx7r9jhPSCG89IRu7CjSsLmlH5kWetqEr7W0PNzwcYvyq+J WmE2l6ya9LQhEWibmPxUZmUtdGgS2YRLfQT2K3kAGkv6g8W1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtthD8xjDGK6qcydySDx5nRBCs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVkNDBjMWMtZjg2Zi0z ZWRmLThmNmEtYWE3MDM4NTdiZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGplnkw1AoOrLWZJwNCmB8sxMbsC7P5suKlrIWH4j49tsp3E2XnRo2nQ HbKdJXgKQ+C5Ai3YNKwyw6+rUTO9wRK6HJXQj4INVnyoXhweQSQL515mSslZIVrU 81+iZp4JJryizR8lRUqIQfRlkJCFwqTwdGnG69n+2LCvDx5YCzrmA6lNXfPrACR0 O7yszEVLuY+p4oTE3xx0m+Y1oyswhpRYtCsU6iRg94t1DH0QVtdarT6XqdUVotNa 2E1G1Ukm4fzh1iY0iwTHsLslW+wrQi5v2sGEck/j8/mcA8eN+UjqU3YHSr9A2im4 8zX9hf2ShJtvhA9Cm2e5/BhPUeluUOk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:20 2025 by rpki-client