$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa File: caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa (raw, json) Hash identifier: rs3G1n7Nf4BDCwhWScc3vxTBhSlwtclPvGYX84BURQY= Subject key identifier: 48:7C:94:98:5E:92:B8:1A:37:C4:35:26:19:54:30:23:F3:60:8F:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D34A75B3DCEB70282AC46 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 96.7.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:34:a7:5b:3d:ce:b7:02:82:ac:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=950ab4da-091b-439b-8c88-0b0cf2c7f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:ae:80:35:fb:26:d7:b5:92:70:b8:cc:20: 3d:5c:dc:fb:e6:ec:10:59:92:98:46:ad:ed:1c:23: 44:9c:19:52:6d:45:96:ba:e9:a1:5f:4b:a5:f4:98: cf:49:9f:e5:00:6f:b9:9d:5a:f3:44:bd:5d:a6:85: ed:f6:62:a2:a9:d9:c3:90:c4:1c:1e:dd:bd:e1:4c: 57:6c:4c:4f:60:0c:5f:d0:9e:52:88:75:b0:04:c3: 90:09:19:f5:00:73:e1:1d:b2:da:68:54:aa:25:d2: 3b:27:f9:7e:b8:44:7c:6b:ea:b8:77:df:39:34:ff: 77:83:89:a4:c2:20:d9:df:c2:a5:da:e0:c0:d2:c4: 7e:f3:df:9a:51:99:5e:4c:30:bd:eb:ff:fa:c5:8b: cf:d1:26:1e:08:40:59:aa:da:62:f4:34:59:4e:f8: e1:85:85:f1:09:e9:b8:28:21:16:2d:ec:be:35:0f: 11:db:74:2b:89:0b:4f:3e:70:3d:9a:68:49:cf:7a: ff:4e:4b:f7:e3:d7:96:d1:97:e8:88:de:ff:f8:b9: 3e:2f:0b:4b:81:22:12:87:f7:12:b9:ca:5b:67:ea: 2d:f4:b7:f8:93:62:44:c2:6e:20:28:99:af:08:3a: b4:b4:87:5d:3f:6e:89:35:ba:ac:99:c9:6c:0b:5f: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7C:94:98:5E:92:B8:1A:37:C4:35:26:19:54:30:23:F3:60:8F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:36:24:27:52:03:45:d8:ea:c1:7a:d5:cb:d8:87:23:32:3c: aa:4f:dd:70:67:49:c5:dd:e5:f2:7c:d2:6a:11:04:06:b4:69: 35:0b:59:5f:9f:c8:bd:5e:11:e9:d0:8b:12:8f:67:54:c1:11: f6:6d:23:cd:94:8d:27:3a:2c:b7:a0:40:33:70:a3:49:91:77: dd:d2:e8:26:35:01:5a:da:18:e7:cd:55:ee:dd:b7:1f:27:82: 31:ed:48:02:b6:c6:d8:3e:4b:10:7f:95:c7:e5:1a:18:57:bf: 63:58:8c:63:5a:a7:da:b6:69:96:22:d3:a7:72:85:53:32:51: fd:51:14:63:cb:d3:4d:7b:7d:57:59:68:2e:19:e2:44:4d:db: fd:fd:85:ad:63:16:e7:cd:50:e5:8f:6c:bb:6b:ab:28:20:54: 2a:d8:ec:33:14:33:d2:09:b5:12:54:de:36:54:af:e6:4a:0f: d5:47:5d:50:6a:1d:f2:a8:d4:32:50:e4:81:7b:ae:28:6a:c7: a1:64:b5:a8:41:aa:54:9f:39:8d:1a:39:15:9f:6b:53:9c:79: 51:b0:b3:b5:d0:e3:a9:7c:c8:06:a7:d6:24:8b:a3:32:98:fa: f8:89:fb:1d:8e:d5:6a:68:6d:aa:b9:93:a3:8d:63:38:d9:4f: 55:c2:ca:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTSnWz3OtwKCrEYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTUwYWI0ZGEtMDkxYi00MzliLThjODgtMGIwY2YyYzdmNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdqugDX7Jte1knC4zCA9XNz75uwQWZKYRq3t HCNEnBlSbUWWuumhX0ul9JjPSZ/lAG+5nVrzRL1dpoXt9mKiqdnDkMQcHt294UxX bExPYAxf0J5SiHWwBMOQCRn1AHPhHbLaaFSqJdI7J/l+uER8a+q4d985NP93g4mk wiDZ38Kl2uDA0sR+89+aUZleTDC96//6xYvP0SYeCEBZqtpi9DRZTvjhhYXxCem4 KCEWLey+NQ8R23QriQtPPnA9mmhJz3r/Tkv349eW0ZfoiN7/+Lk+LwtLgSISh/cS ucpbZ+ot9Lf4k2JEwm4gKJmvCDq0tIddP26JNbqsmclsC18ucwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh8lJhekrgaN8Q1JhlUMCPzYI/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FhZjdlYzQtNGIxNy0z ZjE1LWFhMTItZjU1OWRkMThkMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY2JCdSA0XY6sF61cvYhyMyPKpP3XBnScXd5fJ80moRBAa0aTULWV+f yL1eEenQixKPZ1TBEfZtI82UjSc6LLegQDNwo0mRd93S6CY1AVraGOfNVe7dtx8n gjHtSAK2xtg+SxB/lcflGhhXv2NYjGNap9q2aZYi06dyhVMyUf1RFGPL0017fVdZ aC4Z4kRN2/39ha1jFufNUOWPbLtrqyggVCrY7DMUM9IJtRJU3jZUr+ZKD9VHXVBq HfKo1DJQ5IF7rihqx6FktahBqlSfOY0aORWfa1OceVGws7XQ46l8yAan1iSLozKY +viJ+x2O1Wpobaq5k6ONYzjZT1XCyro= -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:19 2025 by rpki-client