$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878df149-5dcb-34ab-98a6-25ec027bd4d6.roa File: 878df149-5dcb-34ab-98a6-25ec027bd4d6.roa (raw, json) Hash identifier: 4avvymbwV2SYQv9xIuJrY+/C6QKBeWLIQ07/9donA4o= Subject key identifier: 77:CE:6F:DC:80:D4:F6:1C:21:EB:DC:9D:5C:12:5E:DE:D3:A3:14:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D363F9C7301768C5B1800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878df149-5dcb-34ab-98a6-25ec027bd4d6.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 96.17.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:36:3f:9c:73:01:76:8c:5b:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=780ffc6a-d32d-4a0d-9373-9b4cbb2ed9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:14:13:98:1e:a7:bd:ae:51:35:f6:83:43: 4e:58:ff:d6:7f:31:43:58:97:dd:3a:9d:24:23:b2: 32:17:4c:57:34:7c:b7:d0:1e:9b:a1:31:a0:bf:88: e7:5d:1f:7f:77:59:a8:d5:e9:aa:74:ac:39:27:bc: 47:54:b9:80:7e:60:7c:cd:e6:56:dc:2f:fc:e9:b0: 4f:f2:b2:16:27:8e:0c:fe:d8:54:82:35:d7:ab:41: 22:fd:9a:4e:2f:fc:0b:1f:9d:88:3f:70:a2:1e:ca: d0:4f:5f:b5:e2:f0:03:11:72:b1:5c:1a:20:fa:30: c6:f2:71:95:88:1e:bc:4c:3e:df:08:45:fd:36:fe: f9:5f:25:cf:3f:47:1b:2f:74:5d:0e:a4:cc:7b:3c: d3:6f:49:c0:c8:38:ec:50:97:7d:d1:c0:87:8a:41: cf:69:7b:0b:b2:90:dd:ca:b3:9d:3b:70:ae:15:1a: 39:65:9f:f5:8a:54:5e:a0:aa:de:e0:80:7d:9c:66: d6:65:0a:e5:96:10:c5:e2:04:27:b6:61:03:1d:7c: c3:bb:45:7f:ee:ef:f8:d8:10:3c:8d:c1:b5:54:a2: 68:e4:80:91:80:39:4f:f2:c3:95:ca:81:10:c3:2c: dc:bf:70:1d:56:70:12:cb:a0:84:ef:a6:de:c5:1e: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CE:6F:DC:80:D4:F6:1C:21:EB:DC:9D:5C:12:5E:DE:D3:A3:14:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/878df149-5dcb-34ab-98a6-25ec027bd4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:13:39:dc:51:1d:c2:a6:2b:57:cd:f4:ee:9c:34:b7:e4:82: 28:d6:92:78:da:4f:5d:5b:83:b1:f7:55:ca:f4:bf:48:c6:98: 3d:53:89:ba:c4:2e:6b:e3:a5:2d:f2:7d:2b:4d:00:02:72:89: 40:84:22:d5:97:cb:56:b3:cc:67:ab:b4:90:fd:9c:59:35:40: 62:56:0d:9e:2f:c7:07:ac:a6:1d:14:b3:54:f0:bb:83:f3:7b: 37:b2:15:a7:f4:69:f5:50:51:24:bf:ed:73:2d:bd:ca:db:e9: a2:19:d0:a1:84:60:86:ef:1a:d7:d9:bc:d3:dd:60:8b:ce:cc: bd:71:ef:ef:a6:0a:fd:42:95:b7:49:e3:5b:11:72:14:24:42: 05:ac:4a:bc:28:31:df:0b:f0:81:67:a3:70:c3:21:7f:63:29: 76:56:1e:28:04:b5:41:35:a9:cd:46:f0:df:45:50:b0:c3:62: e5:3e:17:9b:41:98:29:0c:26:1c:db:66:40:4b:0d:97:1a:20: 4a:c4:27:38:0e:c6:4e:ba:74:19:2d:6f:26:ea:a0:2c:c5:40: d6:4b:69:29:f2:54:45:fa:4a:70:e4:32:06:87:4a:71:43:3a: af:84:c3:1d:32:8d:dc:8f:5a:8a:af:68:84:26:94:30:d1:09: 6a:e6:33:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTY/nHMBdoxbGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzgwZmZjNmEtZDMyZC00YTBkLTkzNzMtOWI0Y2JiMmVkOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT8UE5gep72uUTX2g0NOWP/WfzFDWJfdOp0k I7IyF0xXNHy30B6boTGgv4jnXR9/d1mo1emqdKw5J7xHVLmAfmB8zeZW3C/86bBP 8rIWJ44M/thUgjXXq0Ei/ZpOL/wLH52IP3CiHsrQT1+14vADEXKxXBog+jDG8nGV iB68TD7fCEX9Nv75XyXPP0cbL3RdDqTMezzTb0nAyDjsUJd90cCHikHPaXsLspDd yrOdO3CuFRo5ZZ/1ilReoKre4IB9nGbWZQrllhDF4gQntmEDHXzDu0V/7u/42BA8 jcG1VKJo5ICRgDlP8sOVyoEQwyzcv3AdVnASy6CE76bexR7FGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfOb9yA1PYcIevcnVwSXt7ToxRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc4ZGYxNDktNWRjYi0z NGFiLTk4YTYtMjVlYzAyN2JkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwTOdxRHcKmK1fN9O6cNLfkgijWknjaT11bg7H3Vcr0v0jGmD1TibrE LmvjpS3yfStNAAJyiUCEItWXy1azzGertJD9nFk1QGJWDZ4vxwesph0Us1Twu4Pz ezeyFaf0afVQUSS/7XMtvcrb6aIZ0KGEYIbvGtfZvNPdYIvOzL1x7++mCv1ClbdJ 41sRchQkQgWsSrwoMd8L8IFno3DDIX9jKXZWHigEtUE1qc1G8N9FULDDYuU+F5tB mCkMJhzbZkBLDZcaIErEJzgOxk66dBktbybqoCzFQNZLaSnyVEX6SnDkMgaHSnFD Oq+Ewx0yjdyPWoqvaIQmlDDRCWrmM5A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:03 2025 by rpki-client