$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa File: c162141d-e85e-3661-95e8-c0baecb23358.roa (raw, json) Hash identifier: zQtKu3d9OuwSK19p3nuwAwVpk2GoRWvnSjd3eSt2Sak= Subject key identifier: 28:42:74:74:20:29:72:B8:36:5C:78:24:59:25:AE:3C:93:29:1C:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD2DB2C0EDBFE318FD6C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 35994 IP address blocks: 96.17.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:2d:b2:c0:ed:bf:e3:18:fd:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=cca0169e-e2a4-49b4-820b-be9ddf9c65e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:69:20:52:78:f3:ee:6a:36:b9:f4:13:5f: 10:30:75:2d:ea:55:67:58:a5:9e:f9:cc:c8:c2:70: 9e:3b:e7:ef:b1:16:9f:26:d4:8c:1a:41:c6:bf:bc: 4f:2e:53:7e:e8:66:b5:22:1c:56:68:68:16:8b:0f: e9:93:1e:8a:9d:5b:6c:8b:0f:a2:fe:c8:66:74:44: a7:e6:09:a1:ac:fc:da:75:60:f3:31:c5:9b:90:34: a0:5a:b1:a8:f4:7b:f4:c0:5c:66:24:dd:db:c6:fe: 44:c5:b4:51:a5:1e:28:4c:7b:1c:af:de:a7:d7:c7: 22:cb:1a:44:59:b6:86:7a:9c:9d:c4:b0:14:3c:ae: b7:34:df:86:62:f5:a1:9b:2b:02:0c:47:78:6e:93: e9:b8:48:0c:73:8c:29:e3:01:bb:4f:8f:38:65:38: a3:f8:39:3d:c6:81:bc:b7:8b:74:f3:01:e8:e7:b2: 22:2f:56:20:b0:89:3a:e9:24:4d:0b:e5:43:84:ca: 45:e2:b5:44:29:f9:98:85:03:82:bb:77:69:5c:e2: 7b:9a:0f:de:23:ed:fa:66:b2:1f:8d:30:14:14:1c: 09:8f:a1:4a:57:7a:91:83:fb:cc:90:64:ec:db:59: 4c:aa:43:03:a7:89:e1:af:0b:fe:25:60:2b:da:65: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:42:74:74:20:29:72:B8:36:5C:78:24:59:25:AE:3C:93:29:1C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:77:8b:6f:5a:10:d7:ee:ce:76:c0:06:cd:3b:27:81:51:fc: 26:c1:f9:99:57:69:73:38:1b:b3:fb:e4:94:09:7f:a0:17:c0: ed:8f:c9:de:d4:e4:83:ed:05:f4:8e:3a:49:55:76:e2:93:74: 05:b6:bf:be:88:18:6c:af:87:ea:69:d7:41:c7:94:69:01:91: e3:4d:be:74:7a:a6:a3:ac:dd:da:8f:83:fe:15:1f:fb:b0:6c: ff:4a:03:b4:be:3a:bd:e1:de:4b:e3:34:c3:df:9b:e3:f2:ef: d5:48:db:38:85:00:51:e9:7d:1f:7b:35:66:37:a3:c6:1b:53: 15:5f:68:ab:6f:82:76:da:d1:e5:d3:56:7d:cf:8c:70:14:4e: 1c:8a:44:e5:88:b8:67:9b:ea:00:cd:92:1d:65:fe:cd:8b:b4: 82:3f:8f:09:0d:c6:89:a7:d1:de:cb:7f:3a:18:2d:2b:92:06: 0e:f0:6e:fb:fe:f1:e3:7f:91:f6:96:cb:49:9f:ec:0d:55:d9: 6c:27:92:f9:88:5d:a4:4b:a0:25:32:2e:a0:66:dc:68:c6:e8: 1e:53:f3:15:bf:c0:0f:72:d3:0a:bd:2b:a5:15:92:83:98:f0: 3b:1e:1d:3c:d6:48:17:d3:64:54:16:5e:2f:c9:20:e9:5b:81: b2:6a:1d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/S2ywO2/4xj9bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2NhMDE2OWUtZTJhNC00OWI0LTgyMGItYmU5ZGRmOWM2NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nRpIFJ48+5qNrn0E18QMHUt6lVnWKWe+czI wnCeO+fvsRafJtSMGkHGv7xPLlN+6Ga1IhxWaGgWiw/pkx6KnVtsiw+i/shmdESn 5gmhrPzadWDzMcWbkDSgWrGo9Hv0wFxmJN3bxv5ExbRRpR4oTHscr96n18ciyxpE WbaGepydxLAUPK63NN+GYvWhmysCDEd4bpPpuEgMc4wp4wG7T484ZTij+Dk9xoG8 t4t08wHo57IiL1YgsIk66SRNC+VDhMpF4rVEKfmYhQOCu3dpXOJ7mg/eI+36ZrIf jTAUFBwJj6FKV3qRg/vMkGTs21lMqkMDp4nhrwv+JWAr2mVeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChCdHQgKXK4Nlx4JFklrjyTKRxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzE2MjE0MWQtZTg1ZS0z NjYxLTk1ZTgtYzBiYWVjYjIzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI53i29aENfuznbABs07J4FR/CbB+ZlXaXM4G7P75JQJf6AXwO2Pyd7U 5IPtBfSOOklVduKTdAW2v76IGGyvh+pp10HHlGkBkeNNvnR6pqOs3dqPg/4VH/uw bP9KA7S+Or3h3kvjNMPfm+Py79VI2ziFAFHpfR97NWY3o8YbUxVfaKtvgnba0eXT Vn3PjHAUThyKROWIuGeb6gDNkh1l/s2LtII/jwkNxomn0d7LfzoYLSuSBg7wbvv+ 8eN/kfaWy0mf7A1V2WwnkvmIXaRLoCUyLqBm3GjG6B5T8xW/wA9y0wq9K6UVkoOY 8DseHTzWSBfTZFQWXi/JIOlbgbJqHTU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:03 2025 by rpki-client