$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f226c7-3e52-3f31-b20b-d6fd71acc546.roa File: 41f226c7-3e52-3f31-b20b-d6fd71acc546.roa (raw, json) Hash identifier: wHI6y9DDDKVPTM+PNqNjiW5YTsDRnPutGXgSXjXo8pY= Subject key identifier: 7C:19:42:88:2D:1E:22:D9:DF:A0:8D:9D:34:E0:F9:48:6C:0B:E8:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9E5709DF3360F74C11140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f226c7-3e52-3f31-b20b-d6fd71acc546.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33491 IP address blocks: 96.216.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:e5:70:9d:f3:36:0f:74:c1:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9a22a3d2-2e4d-4f9c-93f4-e4c5bcbb5dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:40:9f:10:fd:b0:56:47:f2:c9:80:6d:26: 05:c6:cb:8a:44:59:8f:b3:e3:c0:3e:5a:43:e6:75: 02:06:6f:d4:a8:7d:26:30:04:e6:e9:51:99:a3:8b: 32:e8:a7:d5:7c:c3:10:49:5f:38:fb:ba:da:9d:b3: ee:05:75:62:ba:4e:ed:15:1d:d9:b3:84:bd:95:ab: da:5d:34:4c:0a:05:96:b2:58:4d:f4:0e:ec:6c:ce: e7:df:b6:a3:4a:90:37:7b:e1:96:3c:1c:45:94:ef: bf:52:60:4f:e2:73:c4:62:96:1f:e2:7d:6a:ec:03: 69:fc:06:24:33:19:16:39:12:5f:3e:0b:52:cc:0e: 17:b2:60:02:e3:47:23:53:be:d7:e6:e4:08:8b:2b: a8:c2:ab:c9:d1:a0:8d:e7:22:ba:03:c0:ad:e9:76: 3c:d5:9a:30:d4:0f:97:3a:b5:b2:86:c0:52:43:d3: 81:1b:f9:c1:c0:b9:f9:6c:18:9c:09:95:8d:82:ec: fc:7e:4c:66:40:67:bd:07:65:68:01:22:3a:da:66: 89:40:3e:53:15:45:c2:d8:e4:31:6a:18:39:06:9d: 93:e1:bd:1d:cc:e2:3b:98:8d:0d:68:07:d9:96:37: 59:6e:58:14:b7:c2:4a:e4:8a:0a:34:52:ba:dd:fb: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:19:42:88:2D:1E:22:D9:DF:A0:8D:9D:34:E0:F9:48:6C:0B:E8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41f226c7-3e52-3f31-b20b-d6fd71acc546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.216.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cf:5b:30:5f:f9:e3:24:c4:d5:ab:a9:52:c4:57:df:b7:2c: c9:01:95:e8:fd:09:15:0e:c3:bf:ef:05:91:35:27:c6:87:1e: 9c:cb:24:df:bd:06:a4:73:04:77:d3:de:37:0e:95:fb:4c:29: 31:e0:73:87:81:f8:f3:10:3f:bf:af:ca:cf:ab:ee:37:a4:f3: 84:77:b8:94:04:d4:dd:ac:af:1c:16:23:b8:a2:87:29:72:52: 00:4f:d6:f7:32:f3:29:5a:5d:2d:ca:7a:70:55:12:e5:47:6a: cb:f2:20:67:18:c5:c3:3f:8f:dd:ab:90:44:7c:f3:1f:5b:f0: f5:59:c5:67:db:50:e8:67:c3:76:b5:c4:a3:d6:df:68:df:b4: 83:89:2c:65:a8:65:22:0c:bc:7e:e5:6f:fc:08:af:28:00:88: 1c:a2:32:44:d1:1b:16:af:89:93:ad:44:24:1c:f5:b7:f6:7d: 3e:37:30:dc:c9:ce:df:b9:50:6c:67:e3:1b:c3:bd:19:4f:13: d2:52:3a:a1:cf:5c:8f:97:9a:95:69:1c:b0:9f:0a:ac:f6:cd: e2:9b:be:d7:0b:01:57:93:1a:4b:ac:af:70:2f:3a:f9:ea:69: 32:c5:ea:65:48:92:08:17:14:1a:1a:97:fa:96:60:6c:2b:d5: a1:f4:bb:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ueVwnfM2D3TBEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OWEyMmEzZDItMmU0ZC00ZjljLTkzZjQtZTRjNWJjYmI1ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BBAnxD9sFZH8smAbSYFxsuKRFmPs+PAPlpD 5nUCBm/UqH0mMATm6VGZo4sy6KfVfMMQSV84+7ranbPuBXViuk7tFR3Zs4S9lava XTRMCgWWslhN9A7sbM7n37ajSpA3e+GWPBxFlO+/UmBP4nPEYpYf4n1q7ANp/AYk MxkWORJfPgtSzA4XsmAC40cjU77X5uQIiyuowqvJ0aCN5yK6A8Ct6XY81Zow1A+X OrWyhsBSQ9OBG/nBwLn5bBicCZWNguz8fkxmQGe9B2VoASI62maJQD5TFUXC2OQx ahg5Bp2T4b0dzOI7mI0NaAfZljdZblgUt8JK5IoKNFK63fuz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwZQogtHiLZ36CNnTTg+UhsC+jmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFmMjI2YzctM2U1Mi0z ZjMxLWIyMGItZDZmZDcxYWNjNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYNjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfPWzBf+eMkxNWrqVLEV9+3LMkBlej9CRUOw7/vBZE1J8aHHpzLJN+9 BqRzBHfT3jcOlftMKTHgc4eB+PMQP7+vys+r7jek84R3uJQE1N2srxwWI7iihyly UgBP1vcy8ylaXS3KenBVEuVHasvyIGcYxcM/j92rkER88x9b8PVZxWfbUOhnw3a1 xKPW32jftIOJLGWoZSIMvH7lb/wIrygAiByiMkTRGxaviZOtRCQc9bf2fT43MNzJ zt+5UGxn4xvDvRlPE9JSOqHPXI+XmpVpHLCfCqz2zeKbvtcLAVeTGkusr3AvOvnq aTLF6mVIkggXFBoal/qWYGwr1aH0u1I= -----END CERTIFICATE-----Generated at Mon Oct 20 07:06:47 2025 by rpki-client