$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa File: f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa (raw, json) Hash identifier: nrPeqZa6CTP6YRC9PsO+EmszEOwBHPceSXu3Hnwe2Ag= Subject key identifier: D6:B0:6D:D1:A3:C7:A7:B7:BD:24:8A:F5:79:86:D6:CC:9E:0E:9E:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA39D120B4C4C9B6964957580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 35994 IP address blocks: 96.6.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:0b:4c:4c:9b:69:64:95:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=4c7a2d2a-5059-4b88-a17d-e5c62b90e7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:84:3a:d9:b4:26:21:c3:e2:a1:3d:43:67: 9b:0b:e9:c4:20:8d:6a:7c:15:6b:8d:90:81:de:05: 50:75:0a:3b:8d:6c:44:67:71:65:90:b8:1a:81:d6: 71:a2:ae:13:de:25:58:46:e8:94:5c:f7:29:b3:52: 1c:a7:01:87:75:8c:94:88:e5:d6:6f:ab:f2:b3:dd: c8:f6:33:ea:76:f0:b5:0c:e6:09:58:e6:8a:24:d1: f0:3f:3e:38:af:1a:0f:82:5f:d6:ca:9a:49:54:f8: 57:b8:6d:0c:d2:95:45:1f:d9:4d:6e:fb:99:75:21: b3:30:d7:41:86:2a:14:ed:e9:6b:81:25:7d:84:2b: 08:ae:08:95:59:72:40:78:1a:7f:99:bd:44:82:76: e2:0d:00:df:33:9b:9f:ed:93:0b:bf:84:81:55:03: 11:ab:d4:5f:95:28:d3:8d:dd:cd:2e:8c:09:4e:42: 32:44:3d:d4:9e:b4:3a:e6:4f:bb:d0:d6:30:73:d6: 31:72:8c:e7:be:c2:6c:69:7d:af:51:87:ce:34:49: 4c:0d:58:92:d9:89:5d:4d:22:9b:0a:f7:23:9d:58: ee:0a:78:ec:cb:37:4d:d6:1e:07:31:57:2b:0d:13: 67:35:b4:80:0d:fd:85:55:25:77:86:40:9a:8c:0f: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:6D:D1:A3:C7:A7:B7:BD:24:8A:F5:79:86:D6:CC:9E:0E:9E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f49136dc-f7eb-38bf-a2ba-b01bcd68e9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:60:6e:e4:22:12:9c:f8:c8:7d:d4:55:e2:58:bb:92:1b:c0: b1:15:e3:6c:bf:d8:1b:19:c2:ac:ec:04:d2:d7:af:15:4c:df: 12:63:11:f2:86:dc:70:3c:b9:32:d3:fb:1c:5a:69:76:fa:ab: b3:f8:63:7f:ab:8e:59:68:75:b9:88:20:04:8e:8b:34:bd:2d: 5e:b8:16:11:24:07:bd:49:8d:bd:da:1b:f0:c9:6f:8e:a3:fa: 0b:9d:2f:b7:bb:b6:9f:c3:8f:d9:65:f2:f7:31:9f:eb:a5:6d: 96:cb:dd:4b:a3:15:b7:11:38:38:54:ad:42:5b:ca:d3:39:79: 20:5b:20:93:ac:b6:8a:40:83:67:c5:76:8d:82:08:fa:08:78: 53:ea:6a:d5:c5:05:f3:5d:5a:33:b4:14:a6:df:d0:8c:3d:30: 23:3c:26:49:20:34:72:45:7e:96:97:e8:55:e0:89:2e:a6:a4: 3b:ed:17:e8:7c:04:3a:6c:d9:ba:67:cc:4c:4a:cf:36:94:79: 50:96:3f:24:17:90:39:d0:fe:c9:aa:80:b9:10:89:ec:4d:a8: c5:f7:7c:bd:30:48:5b:00:15:63:36:73:7a:87:45:c4:9c:c4: dc:ed:17:ad:3c:d3:90:13:67:bf:dd:98:30:33:72:9f:be:99: a5:92:ed:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRILTEybaWSVdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGM3YTJkMmEtNTA1OS00Yjg4LWExN2QtZTVjNjJiOTBlN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig6EOtm0JiHD4qE9Q2ebC+nEII1qfBVrjZCB 3gVQdQo7jWxEZ3FlkLgagdZxoq4T3iVYRuiUXPcps1IcpwGHdYyUiOXWb6vys93I 9jPqdvC1DOYJWOaKJNHwPz44rxoPgl/WyppJVPhXuG0M0pVFH9lNbvuZdSGzMNdB hioU7elrgSV9hCsIrgiVWXJAeBp/mb1EgnbiDQDfM5uf7ZMLv4SBVQMRq9RflSjT jd3NLowJTkIyRD3UnrQ65k+70NYwc9YxcoznvsJsaX2vUYfONElMDViS2YldTSKb CvcjnVjuCnjsyzdN1h4HMVcrDRNnNbSADf2FVSV3hkCajA+PNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNawbdGjx6e3vSSK9XmG1syeDp5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQ5MTM2ZGMtZjdlYi0z OGJmLWEyYmEtYjAxYmNkNjhlOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBgbuQiEpz4yH3UVeJYu5IbwLEV42y/2BsZwqzsBNLXrxVM3xJjEfKG 3HA8uTLT+xxaaXb6q7P4Y3+rjllodbmIIASOizS9LV64FhEkB71Jjb3aG/DJb46j +gudL7e7tp/Dj9ll8vcxn+ulbZbL3UujFbcRODhUrUJbytM5eSBbIJOstopAg2fF do2CCPoIeFPqatXFBfNdWjO0FKbf0Iw9MCM8JkkgNHJFfpaX6FXgiS6mpDvtF+h8 BDps2bpnzExKzzaUeVCWPyQXkDnQ/smqgLkQiexNqMX3fL0wSFsAFWM2c3qHRcSc xNztF60805ATZ7/dmDAzcp++maWS7RE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:01 2025 by rpki-client