$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e291a164-c3cc-3c3c-9f50-c183ef2384a0.roa File: e291a164-c3cc-3c3c-9f50-c183ef2384a0.roa (raw, json) Hash identifier: rnlUkwRWLxdzB7LLZtcVFhZb9ed3QxnRS4SQ/Psg+Vc= Subject key identifier: DC:C2:2A:78:09:5A:FD:B1:E9:D6:59:FA:58:F4:EB:C6:25:AF:1D:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D354633F737E135255A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e291a164-c3cc-3c3c-9f50-c183ef2384a0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 96.7.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:35:46:33:f7:37:e1:35:25:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=455bebe3-0dc4-4072-aff5-737d94358795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:07:90:10:27:85:e0:79:e2:79:d3:75:36: 78:f8:8a:59:13:a0:0b:92:3a:c2:08:1b:e8:ed:d1: 69:ae:46:ef:90:67:c3:07:d6:69:24:06:11:91:39: fa:ae:d1:35:53:18:fc:f4:1d:c3:5e:f9:15:12:1a: d6:32:29:c1:3f:4a:1b:ed:df:92:45:d3:45:53:c8: b3:71:50:cd:ec:4a:a3:e7:91:70:ad:d3:bf:90:1e: ff:e8:f4:d4:e7:a9:12:ae:b9:c6:70:a6:08:08:d7: 11:b0:07:1b:e4:09:c0:fa:e7:6a:21:fc:71:df:da: 3d:06:9a:72:8f:bc:bc:69:88:88:06:75:d0:ee:0e: a5:f2:14:45:7e:18:d2:28:72:3f:92:88:aa:8e:de: 28:f5:da:d6:41:3f:b7:df:80:be:24:ad:58:76:8a: bd:f5:00:bf:d8:5f:05:62:95:3f:42:93:2b:9e:d3: 26:6c:d9:95:7b:04:0b:0a:e5:35:ac:f7:22:df:58: cd:f2:7f:cb:49:6a:7e:ca:1b:b1:4b:3d:66:81:34: 82:92:7e:2d:70:0c:28:28:1e:55:ce:53:13:ca:ea: bf:88:fd:43:6d:6f:ca:b2:27:3f:95:82:7f:ac:33: 38:ec:ef:85:94:ac:3a:77:b4:b7:75:88:fa:28:6c: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:2A:78:09:5A:FD:B1:E9:D6:59:FA:58:F4:EB:C6:25:AF:1D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e291a164-c3cc-3c3c-9f50-c183ef2384a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b5:e1:b2:fe:56:c9:64:c7:cb:c8:e4:ca:70:f4:0b:08:9f: b5:7a:7f:0e:e9:8e:0c:b5:c5:18:7c:16:0a:92:a3:b8:3d:61: f1:3e:11:8b:38:46:99:aa:12:cd:b8:5b:8f:14:ab:84:9d:5e: 2e:69:fa:e0:14:b4:84:75:bd:f4:0d:80:6f:82:7c:20:5f:a2: 90:ca:bf:35:76:7c:8b:9d:12:ff:64:07:f1:6e:75:1b:05:d4: 1f:48:e2:bd:8a:3a:ca:f8:f5:86:7f:4a:0b:b9:01:d9:1f:97: 55:06:68:82:e9:14:b2:da:f9:dd:ca:03:f9:78:7f:46:a7:a9: a5:40:bd:34:d9:8e:00:8e:62:97:03:c3:ba:51:9b:1c:2c:45: fe:e2:0a:a9:ed:26:59:7c:86:ae:5c:af:64:d7:6e:7f:85:2c: 32:71:cb:c9:b0:ef:d7:4e:31:8a:ef:9d:23:dc:77:3b:9e:ab: 8f:77:bb:b9:46:78:18:9c:97:fa:9d:8a:2c:66:be:77:74:8d: a9:0a:cd:94:44:34:25:64:32:50:a3:ae:b0:cd:6a:87:92:20: 34:2b:68:64:1c:86:30:73:e4:84:77:1c:04:cd:9e:81:c0:0c: 0e:7a:60:a2:5b:7b:9c:72:d3:a4:5e:0d:e2:c1:5a:2e:86:3b: 44:e7:a1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTVGM/c34TUlWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDU1YmViZTMtMGRjNC00MDcyLWFmZjUtNzM3ZDk0MzU4Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVAHkBAnheB54nnTdTZ4+IpZE6ALkjrCCBvo 7dFprkbvkGfDB9ZpJAYRkTn6rtE1Uxj89B3DXvkVEhrWMinBP0ob7d+SRdNFU8iz cVDN7Eqj55FwrdO/kB7/6PTU56kSrrnGcKYICNcRsAcb5AnA+udqIfxx39o9Bppy j7y8aYiIBnXQ7g6l8hRFfhjSKHI/koiqjt4o9drWQT+334C+JK1Ydoq99QC/2F8F YpU/QpMrntMmbNmVewQLCuU1rPci31jN8n/LSWp+yhuxSz1mgTSCkn4tcAwoKB5V zlMTyuq/iP1DbW/Ksic/lYJ/rDM47O+FlKw6d7S3dYj6KGzo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzCKngJWv2x6dZZ+lj068Ylrx2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI5MWExNjQtYzNjYy0z YzNjLTlmNTAtYzE4M2VmMjM4NGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW14bL+Vslkx8vI5Mpw9AsIn7V6fw7pjgy1xRh8FgqSo7g9YfE+EYs4 RpmqEs24W48Uq4SdXi5p+uAUtIR1vfQNgG+CfCBfopDKvzV2fIudEv9kB/FudRsF 1B9I4r2KOsr49YZ/Sgu5Adkfl1UGaILpFLLa+d3KA/l4f0anqaVAvTTZjgCOYpcD w7pRmxwsRf7iCqntJll8hq5cr2TXbn+FLDJxy8mw79dOMYrvnSPcdzueq493u7lG eBicl/qdiixmvnd0jakKzZRENCVkMlCjrrDNaoeSIDQraGQchjBz5IR3HATNnoHA DA56YKJbe5xy06ReDeLBWi6GO0TnoSA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:49 2025 by rpki-client