$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cf664fc-cfa9-3792-8edb-313946cf9af0.roa File: 8cf664fc-cfa9-3792-8edb-313946cf9af0.roa (raw, json) Hash identifier: FUQgXtyEnh1Eb4/XXIeOs5XNsPCoZchiJe+WaLKtM9I= Subject key identifier: F2:47:24:95:17:1A:1F:DD:7A:7A:F6:30:EC:A2:46:89:05:60:69:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D33CF15ACE8D748D6BBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cf664fc-cfa9-3792-8edb-313946cf9af0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 96.6.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:33:cf:15:ac:e8:d7:48:d6:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=d80b0891-b280-46a0-a3bd-da0e85aa751b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:1e:53:b2:12:30:0c:84:2f:30:77:48:32: ca:e5:b4:9e:aa:b5:88:ac:bc:6e:7c:5e:a0:e5:6d: 50:5e:b9:c7:57:c7:65:d8:5b:b8:43:1d:61:b6:b5: 88:ae:97:f0:8c:3d:c3:0e:99:07:33:c6:2e:e2:dc: 57:a0:c9:d4:fe:3b:f1:82:14:c1:d5:b1:ca:94:19: bf:b3:de:ef:75:d5:6e:ad:0c:25:69:61:7e:0e:bc: 47:c1:a2:21:b7:e2:69:d1:5a:f8:f2:0c:03:31:7b: f0:01:24:1d:f3:08:96:ab:45:b0:f9:1c:19:d0:e9: 7f:c6:44:b5:f5:4c:27:f4:69:06:47:dc:08:14:88: 0a:7c:c4:f1:3e:fc:fa:21:aa:3b:61:dc:c7:75:64: 00:15:af:5c:9c:6d:21:81:2a:8d:ed:2e:f9:cb:59: 8a:d9:04:d2:2c:ce:d6:f6:67:67:ad:dc:01:f0:4c: b5:7c:15:e9:73:39:59:2b:b4:68:75:8a:70:ed:2c: c4:fd:98:f5:2b:80:b9:9a:e3:f1:bf:3a:08:25:0a: df:7a:da:22:13:bb:e2:4d:4c:90:11:2e:0e:e2:fd: f8:ed:53:2d:97:bf:4a:0b:22:2d:6e:90:d7:09:da: 84:bc:43:b5:12:06:43:e9:66:ce:0e:29:6c:85:8d: 85:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:47:24:95:17:1A:1F:DD:7A:7A:F6:30:EC:A2:46:89:05:60:69:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cf664fc-cfa9-3792-8edb-313946cf9af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:48:b6:c4:69:54:84:e7:2f:ed:ca:57:1b:93:ea:63:40:e2: 1c:5e:2c:10:15:ee:5a:4f:73:79:64:09:3d:92:42:d2:32:60: ce:fd:94:ec:46:12:d5:56:3d:42:d0:49:25:20:79:e0:9e:5a: 49:71:be:e5:43:b1:8d:5b:16:ce:5c:61:6b:0b:70:5a:d7:a4: 30:1e:77:2e:a8:0a:f3:19:8d:c8:93:97:00:d0:8a:c0:93:f2: 51:12:a7:33:60:46:d0:54:06:56:f7:ea:61:fc:6f:0f:12:a7: fb:90:94:b4:bc:a9:77:3c:f3:87:6f:2c:7c:b8:d1:ce:25:c0: 1c:13:10:ab:08:07:83:cb:44:96:4c:3d:d6:79:8b:60:85:03: f5:14:bf:68:24:30:d0:38:00:89:6c:50:2b:32:b1:1b:57:fc: 48:bb:96:48:63:3d:ca:83:0f:9c:95:14:60:42:16:f3:3e:ed: e8:6d:7d:41:69:9e:3f:42:fb:78:90:32:67:f8:83:fb:59:7f: eb:29:a6:05:04:89:80:32:88:0f:e9:f7:c4:66:60:af:14:5b: 49:9b:d7:3b:db:9e:50:06:66:eb:50:22:fd:e8:e1:71:b9:cf: 83:e6:53:76:72:58:87:2f:1a:cc:93:12:af:57:04:06:8e:cd: 71:0e:a6:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTPPFazo10jWu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDgwYjA4OTEtYjI4MC00NmEwLWEzYmQtZGEwZTg1YWE3NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAQeU7ISMAyELzB3SDLK5bSeqrWIrLxufF6g 5W1QXrnHV8dl2Fu4Qx1htrWIrpfwjD3DDpkHM8Yu4txXoMnU/jvxghTB1bHKlBm/ s97vddVurQwlaWF+DrxHwaIht+Jp0Vr48gwDMXvwASQd8wiWq0Ww+RwZ0Ol/xkS1 9Uwn9GkGR9wIFIgKfMTxPvz6Iao7YdzHdWQAFa9cnG0hgSqN7S75y1mK2QTSLM7W 9mdnrdwB8Ey1fBXpczlZK7RodYpw7SzE/Zj1K4C5muPxvzoIJQrfetoiE7viTUyQ ES4O4v347VMtl79KCyItbpDXCdqEvEO1EgZD6WbODilshY2F9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJHJJUXGh/denr2MOyiRokFYGllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNmNjY0ZmMtY2ZhOS0z NzkyLThlZGItMzEzOTQ2Y2Y5YWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJItsRpVITnL+3KVxuT6mNA4hxeLBAV7lpPc3lkCT2SQtIyYM79lOxG EtVWPULQSSUgeeCeWklxvuVDsY1bFs5cYWsLcFrXpDAedy6oCvMZjciTlwDQisCT 8lESpzNgRtBUBlb36mH8bw8Sp/uQlLS8qXc884dvLHy40c4lwBwTEKsIB4PLRJZM PdZ5i2CFA/UUv2gkMNA4AIlsUCsysRtX/Ei7lkhjPcqDD5yVFGBCFvM+7ehtfUFp nj9C+3iQMmf4g/tZf+sppgUEiYAyiA/p98RmYK8UW0mb1zvbnlAGZutQIv3o4XG5 z4PmU3ZyWIcvGsyTEq9XBAaOzXEOpvw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:32 2025 by rpki-client