$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38bafc05-18bf-395f-a3ce-03e6e9c13a7e.roa File: 38bafc05-18bf-395f-a3ce-03e6e9c13a7e.roa (raw, json) Hash identifier: nqyWSLDqKBYXyaHLcEPwC9UspnSj1ACBQ5Oed7U1uns= Subject key identifier: 2B:EA:95:CD:83:3C:F3:59:B5:23:C9:62:8F:0C:F4:37:E9:F9:BD:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C942DFFE53C4E89E2740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38bafc05-18bf-395f-a3ce-03e6e9c13a7e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 96.114.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c9:42:df:fe:53:c4:e8:9e:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9711db1d-a6b7-4390-83af-515bbe98260a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:34:b5:8a:7d:e3:27:b1:71:8e:56:4b:2e: b9:2b:4d:8e:bb:fe:72:9f:47:9b:c8:f2:13:c6:2b: 3b:9a:07:21:f4:3f:69:a9:3b:08:ea:14:f0:46:a7: f5:26:94:db:18:c2:6c:70:ae:4d:bc:ef:97:29:97: 0f:e8:71:8a:2c:8d:bd:b2:44:13:1b:f6:5a:a1:6a: ae:d3:d1:a6:2e:9c:9e:f4:18:5c:04:59:1b:0e:ea: 32:68:f4:8c:01:5c:8b:07:4a:b5:b6:2e:0a:8e:ae: 93:80:a1:a9:f0:c0:22:9c:bc:73:84:24:3e:f6:ae: 49:2c:ea:1f:04:73:e7:9d:97:13:16:5a:86:f1:ca: ec:90:38:f5:f1:f6:89:63:de:fe:b5:66:fd:bc:a9: c8:b3:08:12:07:ec:48:1e:fb:75:b7:3d:06:75:b6: 5a:5a:99:b0:3f:62:ee:4b:d4:7d:dd:4f:08:96:ba: 09:7c:78:9e:25:8f:6a:35:44:1a:57:cc:de:0e:df: 60:3e:f8:ab:e7:22:aa:cd:aa:81:6c:e9:56:21:91: ee:5b:19:36:24:69:1c:90:c9:63:0b:62:3e:4d:24: 79:46:17:76:f6:3a:e6:9f:c0:32:02:76:73:1f:0d: f1:a4:da:30:3e:fc:9e:78:c1:ff:1c:52:80:8a:0b: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:95:CD:83:3C:F3:59:B5:23:C9:62:8F:0C:F4:37:E9:F9:BD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38bafc05-18bf-395f-a3ce-03e6e9c13a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.114.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bc:e9:20:05:c7:26:45:00:ed:57:e1:ea:b6:5c:52:1c:48: 67:2f:d4:4e:96:3d:9a:eb:b6:a5:9c:2e:1e:af:16:4a:e0:84: a5:59:e2:7f:f2:f7:8e:57:b4:f1:b8:eb:aa:0f:fd:39:3c:07: c7:62:ee:ed:41:eb:5c:6b:d2:15:ab:e9:b9:40:e2:f2:cf:fb: e9:57:ff:0d:b6:25:39:92:5f:63:36:2f:f0:da:0c:78:46:32: cc:1f:00:fd:e1:a2:9c:87:9a:25:8f:9e:5f:e3:1c:03:20:bb: b9:1b:85:85:90:15:5b:ce:d0:12:3a:f8:11:70:c4:43:79:05: ec:40:70:a5:9e:1a:dd:49:54:84:a5:10:48:25:ec:0d:b3:ea: 3d:b7:95:2e:e0:4d:ff:ec:5b:dd:64:df:a6:bb:bb:c2:bc:f5: 9b:d4:32:6f:9e:49:ba:87:14:e0:a6:fc:6d:16:2f:81:35:f8: 47:6a:75:91:19:8b:2f:71:04:c1:2b:50:84:e2:da:1d:e1:3f: e0:a6:6d:80:a4:2d:2f:9d:da:2e:f4:fb:27:32:f4:41:5d:e4: c8:14:48:11:d9:c5:dc:e3:98:eb:7c:6d:9e:4d:bb:a3:78:e9: ad:eb:fa:ff:d6:43:0c:d2:b5:c2:fe:f1:92:cb:aa:e9:98:34: de:79:04:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uclC3/5TxOieJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTcxMWRiMWQtYTZiNy00MzkwLTgzYWYtNTE1YmJlOTgyNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT40tYp94yexcY5WSy65K02Ou/5yn0ebyPIT xis7mgch9D9pqTsI6hTwRqf1JpTbGMJscK5NvO+XKZcP6HGKLI29skQTG/ZaoWqu 09GmLpye9BhcBFkbDuoyaPSMAVyLB0q1ti4Kjq6TgKGp8MAinLxzhCQ+9q5JLOof BHPnnZcTFlqG8crskDj18faJY97+tWb9vKnIswgSB+xIHvt1tz0GdbZaWpmwP2Lu S9R93U8IlroJfHieJY9qNUQaV8zeDt9gPvir5yKqzaqBbOlWIZHuWxk2JGkckMlj C2I+TSR5Rhd29jrmn8AyAnZzHw3xpNowPvyeeMH/HFKAigukiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvqlc2DPPNZtSPJYo8M9Dfp+b0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhiYWZjMDUtMThiZi0z OTVmLWEzY2UtMDNlNmU5YzEzYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy86SAFxyZFAO1X4eq2XFIcSGcv1E6WPZrrtqWcLh6vFkrghKVZ4n/y 945XtPG466oP/Tk8B8di7u1B61xr0hWr6blA4vLP++lX/w22JTmSX2M2L/DaDHhG MswfAP3hopyHmiWPnl/jHAMgu7kbhYWQFVvO0BI6+BFwxEN5BexAcKWeGt1JVISl EEgl7A2z6j23lS7gTf/sW91k36a7u8K89ZvUMm+eSbqHFOCm/G0WL4E1+EdqdZEZ iy9xBMErUITi2h3hP+CmbYCkLS+d2i70+ycy9EFd5MgUSBHZxdzjmOt8bZ5Nu6N4 6a3r+v/WQwzStcL+8ZLLqumYNN55BNg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:10 2025 by rpki-client