$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22804a65-5ba0-3e39-9879-79f48400c3e2.roa File: 22804a65-5ba0-3e39-9879-79f48400c3e2.roa (raw, json) Hash identifier: Tl14PamJzkLaXTi7um8c608KzHZEOfbLc6PXoBNAS4c= Subject key identifier: B5:B0:65:81:00:1C:A6:0C:D3:22:CA:BF:D6:65:52:4C:97:47:C3:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB94C4E0591E2F568A576A8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22804a65-5ba0-3e39-9879-79f48400c3e2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33652 IP address blocks: 96.220.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:4c:4e:05:91:e2:f5:68:a5:76:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=fcfd5afb-b051-470b-b66b-bcd30bebca9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:66:dd:90:cd:c3:05:58:80:ee:8d:38:eb: 77:eb:e5:c6:2d:c3:0b:28:07:29:46:72:a7:ec:4d: ee:0e:d7:93:ae:03:bb:bd:90:0c:05:34:68:0b:e0: 42:d9:ef:ba:c2:ab:a0:d2:df:fa:79:f0:31:4c:bf: 1c:5a:37:f1:66:4f:6e:b1:d4:0d:62:6f:a5:1d:b7: c9:2b:8d:e1:4b:af:95:df:62:95:10:86:77:2f:c9: 6d:fe:50:97:9c:c7:e5:56:9d:0d:c9:d6:e8:c3:25: ee:11:32:6d:ec:57:52:c9:2f:c0:1d:f7:9c:a9:56: c6:bd:a0:20:9b:df:ef:1d:db:1d:e7:ce:89:8e:f4: bc:62:3d:0d:74:b2:98:08:db:ba:30:ce:9a:c6:4b: 1d:f0:b4:a8:7d:37:ef:fa:56:86:31:c5:7e:b7:d8: 5c:f7:58:d3:c8:8e:43:cf:45:7f:f7:22:1b:be:28: b4:48:3f:05:4e:d4:f7:6a:b7:07:0c:bd:1b:71:10: 23:2d:d5:ea:88:9c:72:9a:ea:66:98:02:ba:dc:e4: 9c:09:26:69:10:73:ae:b6:20:d2:5c:ad:7a:65:51: 2d:f5:b1:ea:47:fa:73:24:b4:03:4e:a1:ae:32:c3: 87:c8:7b:91:32:64:58:43:00:8d:9b:0a:fc:bc:cb: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:65:81:00:1C:A6:0C:D3:22:CA:BF:D6:65:52:4C:97:47:C3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22804a65-5ba0-3e39-9879-79f48400c3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.220.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:47:93:3f:b1:71:8d:91:e7:ea:22:28:3c:d1:62:7d:04:df: 29:84:81:7f:46:58:87:36:a7:88:41:70:e9:e7:9f:bd:b8:6e: 7f:63:8e:6a:45:90:bb:bf:a7:a5:f7:39:7b:fc:7b:f9:6d:28: 82:18:25:b4:b0:e5:41:92:c9:06:51:03:dc:05:7c:76:27:0c: cf:24:10:cf:1b:ac:a8:11:f7:50:31:13:ac:75:24:e5:a6:2a: 4e:f1:f9:9f:a5:f0:1c:8b:3b:da:4e:f3:df:e4:fb:66:55:e2: 40:05:27:97:88:da:0a:16:41:f1:7e:0c:d0:5f:68:16:70:18: 13:e4:df:b2:0b:72:d7:98:33:63:4b:f5:a9:c3:d4:8b:39:f1: 96:4c:a5:ee:7d:bd:03:ce:dd:2a:ea:66:85:98:0f:d0:15:3d: 24:bb:5c:a1:15:69:25:a9:d2:9b:b5:3a:06:74:f6:75:62:4f: de:28:62:f5:1d:9a:0d:fa:7a:89:a2:c5:3e:6b:fb:26:4a:7d: 82:49:a9:35:b7:48:24:00:a1:bf:54:02:f3:81:9b:98:2a:56: a2:ce:73:22:c9:1a:d8:23:f0:bb:9c:57:bd:a4:fd:ad:c6:ff: d0:1a:30:ec:3d:22:3b:ca:48:3f:48:ca:83:9f:09:90:13:df: b3:03:75:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uUxOBZHi9WildqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZmNmZDVhZmItYjA1MS00NzBiLWI2NmItYmNkMzBiZWJjYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXJm3ZDNwwVYgO6NOOt36+XGLcMLKAcpRnKn 7E3uDteTrgO7vZAMBTRoC+BC2e+6wqug0t/6efAxTL8cWjfxZk9usdQNYm+lHbfJ K43hS6+V32KVEIZ3L8lt/lCXnMflVp0NydbowyXuETJt7FdSyS/AHfecqVbGvaAg m9/vHdsd586JjvS8Yj0NdLKYCNu6MM6axksd8LSofTfv+laGMcV+t9hc91jTyI5D z0V/9yIbvii0SD8FTtT3arcHDL0bcRAjLdXqiJxymupmmAK63OScCSZpEHOutiDS XK16ZVEt9bHqR/pzJLQDTqGuMsOHyHuRMmRYQwCNmwr8vMttpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWwZYEAHKYM0yLKv9ZlUkyXR8NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI4MDRhNjUtNWJhMC0z ZTM5LTk4NzktNzlmNDg0MDBjM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYNwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBHkz+xcY2R5+oiKDzRYn0E3ymEgX9GWIc2p4hBcOnnn724bn9jjmpF kLu/p6X3OXv8e/ltKIIYJbSw5UGSyQZRA9wFfHYnDM8kEM8brKgR91AxE6x1JOWm Kk7x+Z+l8ByLO9pO89/k+2ZV4kAFJ5eI2goWQfF+DNBfaBZwGBPk37ILcteYM2NL 9anD1Is58ZZMpe59vQPO3SrqZoWYD9AVPSS7XKEVaSWp0pu1OgZ09nViT94oYvUd mg36eomixT5r+yZKfYJJqTW3SCQAob9UAvOBm5gqVqLOcyLJGtgj8LucV72k/a3G /9AaMOw9IjvKSD9IyoOfCZAT37MDdTE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:10:55 2025 by rpki-client