$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b97f680d-4b4a-37ee-95ad-c674e81a3b33.roa File: b97f680d-4b4a-37ee-95ad-c674e81a3b33.roa (raw, json) Hash identifier: hwE5OB7ezwyXR2g007Abgr3Iu+Jiw3gctjJK9V7Tq1k= Subject key identifier: 39:C3:0D:A4:91:40:5A:A1:29:BC:1F:FA:A7:8B:A5:60:D9:08:D8:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D2F4077BB18C1043B21C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b97f680d-4b4a-37ee-95ad-c674e81a3b33.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 96.7.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2f:40:77:bb:18:c1:04:3b:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3e06974c-860e-4489-a167-30a4618e7a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:fb:6e:c6:0d:0a:cb:76:89:3c:41:b4:35: 5d:25:66:da:41:ba:12:f0:17:9a:9e:6b:19:1c:65: f7:b4:3d:61:4d:79:a7:a9:a0:14:0a:23:50:0d:03: cd:f5:1a:4a:99:e6:2e:3d:f7:8e:9d:1e:03:96:8f: 30:3a:79:40:97:9d:82:14:7f:3c:00:1b:70:05:82: 39:35:7f:b1:e9:d8:9d:15:c7:0a:d1:f4:39:28:9a: b0:b8:b6:f4:9e:c5:8c:71:f5:74:c5:25:c9:c4:7b: 4f:63:ca:20:9e:a4:d9:c1:19:ae:a4:6f:f4:10:3c: 0b:0e:8e:ac:c7:6c:88:f8:bb:ba:dc:b5:ce:42:70: 89:c3:7a:21:0f:d7:68:ba:6a:96:14:3f:d8:ba:b3: 21:5e:70:1e:a4:0e:b9:32:4f:1f:8a:b3:6f:bf:cd: e2:3f:2c:3e:f3:b6:cf:af:a5:d2:29:75:c4:31:0c: 96:2a:13:16:48:49:a6:2c:c0:67:8c:b7:21:3b:7c: ff:7e:b5:3c:02:a7:ef:a4:6f:e8:74:58:eb:e5:c6: f1:7a:8c:d9:38:94:a4:2b:32:f0:ed:1b:ed:b7:e7: 41:27:c9:ac:ab:11:0e:6b:ad:aa:62:dc:32:b9:92: a7:16:08:72:9b:d3:f4:c0:30:ac:7c:fa:7b:a3:ed: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:0D:A4:91:40:5A:A1:29:BC:1F:FA:A7:8B:A5:60:D9:08:D8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b97f680d-4b4a-37ee-95ad-c674e81a3b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:89:00:c8:7f:af:8c:63:14:c3:66:28:2c:87:94:d1:1e:9e: d5:ae:06:ab:83:e1:fe:77:97:a5:9f:5e:b7:1b:30:4b:05:1d: 6b:27:b9:3b:03:6e:95:cf:d8:f9:be:b0:d2:4b:89:49:85:ce: 2f:2b:63:bb:52:64:d8:05:2b:42:0d:99:7b:99:e6:4d:6f:60: 03:e6:2c:a1:02:ff:6c:ea:e4:a7:ec:44:a9:01:81:18:9a:30: 7e:5f:c9:50:d3:03:c1:97:97:9f:07:55:bc:e5:04:d4:e6:f4: ce:a5:dc:df:a3:11:92:69:7a:ec:b4:d2:59:32:ed:dd:18:7c: 50:9e:8e:6c:12:8a:9c:a5:63:0f:1c:33:83:f2:aa:c7:23:56: 4f:79:c1:b6:63:f8:df:c1:8b:a4:e1:cd:23:9b:f1:d3:ea:81: 72:a5:c7:64:8b:af:52:29:ce:8b:89:6d:2a:7e:34:28:11:a9: e0:bb:5b:1d:82:51:d7:8f:b3:cd:29:00:1e:86:a6:f9:77:20: 30:9f:23:ca:6d:56:22:97:d4:bf:97:e2:2f:6a:f1:27:52:4f: e6:22:e8:d2:c2:29:c4:6f:c2:16:16:fa:38:4b:35:63:e4:b2: 26:94:32:91:98:5c:f4:d5:be:86:59:93:26:33:8c:d2:77:00: 4b:b4:fa:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS9Ad7sYwQQ7IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2UwNjk3NGMtODYwZS00NDg5LWExNjctMzBhNDYxOGU3YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2f7bsYNCst2iTxBtDVdJWbaQboS8BeanmsZ HGX3tD1hTXmnqaAUCiNQDQPN9RpKmeYuPfeOnR4Dlo8wOnlAl52CFH88ABtwBYI5 NX+x6didFccK0fQ5KJqwuLb0nsWMcfV0xSXJxHtPY8ognqTZwRmupG/0EDwLDo6s x2yI+Lu63LXOQnCJw3ohD9doumqWFD/YurMhXnAepA65Mk8firNvv83iPyw+87bP r6XSKXXEMQyWKhMWSEmmLMBnjLchO3z/frU8AqfvpG/odFjr5cbxeozZOJSkKzLw 7Rvtt+dBJ8msqxEOa62qYtwyuZKnFghym9P0wDCsfPp7o+0RowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnDDaSRQFqhKbwf+qeLpWDZCNi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjk3ZjY4MGQtNGI0YS0z N2VlLTk1YWQtYzY3NGU4MWEzYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESJAMh/r4xjFMNmKCyHlNEentWuBquD4f53l6WfXrcbMEsFHWsnuTsD bpXP2Pm+sNJLiUmFzi8rY7tSZNgFK0INmXuZ5k1vYAPmLKEC/2zq5KfsRKkBgRia MH5fyVDTA8GXl58HVbzlBNTm9M6l3N+jEZJpeuy00lky7d0YfFCejmwSipylYw8c M4PyqscjVk95wbZj+N/Bi6ThzSOb8dPqgXKlx2SLr1IpzouJbSp+NCgRqeC7Wx2C UdePs80pAB6Gpvl3IDCfI8ptViKX1L+X4i9q8SdST+Yi6NLCKcRvwhYW+jhLNWPk siaUMpGYXPTVvoZZkyYzjNJ3AEu0+tA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:55:39 2025 by rpki-client