$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c658928c-998a-33b9-abe0-e0d160e10a37.roa File: c658928c-998a-33b9-abe0-e0d160e10a37.roa (raw, json) Hash identifier: T3yF6OQKxmOVkfmNri/SZ5klw4Xk/o7qz6GHPNvtL6Y= Subject key identifier: B3:26:06:EA:18:06:CC:81:4B:18:E3:2A:D9:08:34:A3:D6:AD:22:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD162C021A821257695380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c658928c-998a-33b9-abe0-e0d160e10a37.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 96.16.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:16:2c:02:1a:82:12:57:69:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=7de93a00-bc51-4a10-b560-e80317cd85f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:73:f7:e9:cb:62:05:ef:12:68:33:80:52: 74:96:f3:cd:1f:8f:cd:0e:08:ba:2c:b6:97:05:72: b1:fe:8c:cb:d5:30:a6:64:e8:06:82:44:58:06:36: b4:ae:57:2b:57:fc:8c:27:0a:3e:e3:1e:a7:02:45: 6b:99:2f:75:2c:94:e4:29:98:41:eb:43:a2:64:c5: 0f:50:55:e4:5f:cc:8e:c2:de:e9:d7:e4:4a:ad:07: 1a:19:03:90:0f:56:e0:59:35:00:2e:80:07:e4:53: a9:8f:bf:e6:e5:27:5e:6a:e5:5b:aa:25:cf:4c:12: 35:b8:48:a7:b0:77:8b:f2:40:79:72:56:21:f5:b9: 9f:a2:9b:26:62:fe:40:52:52:38:a4:89:dc:b6:96: 11:21:75:44:56:b4:7d:43:e7:0e:84:aa:de:14:cb: 48:0e:8e:3f:2f:c2:1a:17:11:98:69:a7:54:4c:03: 09:39:f1:7e:bc:8d:d3:27:53:22:55:1d:0f:b9:fb: 72:00:fb:bf:65:82:98:a5:d6:79:f4:6f:dc:06:c9: 76:b3:fa:e9:07:bc:d5:e7:57:72:42:66:fc:61:36: 7f:c3:bd:69:72:82:51:68:08:61:c3:ae:04:62:b3: 18:68:6d:c3:e3:f6:03:bd:52:dc:58:19:93:f6:70: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:26:06:EA:18:06:CC:81:4B:18:E3:2A:D9:08:34:A3:D6:AD:22:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c658928c-998a-33b9-abe0-e0d160e10a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dc:17:74:eb:3a:03:7d:c7:46:70:e0:74:a0:26:23:f6:cd: 65:89:5e:7b:fd:2e:07:c9:45:7e:3e:4d:de:d8:01:15:26:06: a8:4b:f0:ee:3d:87:50:7a:04:15:fb:84:8e:14:fd:b7:7e:a9: a5:f3:5d:ad:6c:1f:e7:e4:aa:b2:9a:fc:24:93:b6:2c:60:91: 98:0f:08:ef:af:1b:dd:c9:bc:a8:47:72:2b:17:7a:33:26:0b: f4:ee:2b:94:67:7c:a1:eb:07:19:da:9b:94:6c:71:e7:28:b3: a9:35:95:b5:e1:b1:8f:e9:c8:ef:40:69:11:7a:59:32:8a:ea: ba:39:79:c4:02:6d:d9:bf:ea:c6:55:3c:79:8c:47:1e:41:fb: 2d:8f:6b:06:be:47:a8:9e:25:fd:7d:77:c6:0d:de:52:88:13: dc:07:96:82:fb:41:67:14:9b:43:70:d6:cb:66:70:91:9d:90: b2:f9:b9:84:0c:16:31:96:73:15:7a:63:d5:0c:11:e1:26:48: 66:1d:48:9a:8d:eb:72:03:ed:f5:c7:89:37:7c:65:96:e5:67: 37:e3:1e:85:54:d4:84:11:4d:f8:d1:e3:2c:e5:eb:92:5f:01: 11:d4:96:ff:40:54:9a:a6:f7:08:b3:9b:53:6e:dd:1d:b6:38: fa:af:dd:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RYsAhqCEldpU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk N2RlOTNhMDAtYmM1MS00YTEwLWI1NjAtZTgwMzE3Y2Q4NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihFz9+nLYgXvEmgzgFJ0lvPNH4/NDgi6LLaX BXKx/ozL1TCmZOgGgkRYBja0rlcrV/yMJwo+4x6nAkVrmS91LJTkKZhB60OiZMUP UFXkX8yOwt7p1+RKrQcaGQOQD1bgWTUALoAH5FOpj7/m5SdeauVbqiXPTBI1uEin sHeL8kB5clYh9bmfopsmYv5AUlI4pInctpYRIXVEVrR9Q+cOhKreFMtIDo4/L8Ia FxGYaadUTAMJOfF+vI3TJ1MiVR0PuftyAPu/ZYKYpdZ59G/cBsl2s/rpB7zV51dy Qmb8YTZ/w71pcoJRaAhhw64EYrMYaG3D4/YDvVLcWBmT9nDg1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMmBuoYBsyBSxjjKtkINKPWrSKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY1ODkyOGMtOTk4YS0z M2I5LWFiZTAtZTBkMTYwZTEwYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBAzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/cF3TrOgN9x0Zw4HSgJiP2zWWJXnv9LgfJRX4+Td7YARUmBqhL8O49 h1B6BBX7hI4U/bd+qaXzXa1sH+fkqrKa/CSTtixgkZgPCO+vG93JvKhHcisXejMm C/TuK5RnfKHrBxnam5Rscecos6k1lbXhsY/pyO9AaRF6WTKK6ro5ecQCbdm/6sZV PHmMRx5B+y2Pawa+R6ieJf19d8YN3lKIE9wHloL7QWcUm0Nw1stmcJGdkLL5uYQM FjGWcxV6Y9UMEeEmSGYdSJqN63ID7fXHiTd8ZZblZzfjHoVU1IQRTfjR4yzl65Jf ARHUlv9AVJqm9wizm1Nu3R22OPqv3U0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:27 2025 by rpki-client