$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db4be09-c417-386a-9087-f5bc7011a3f1.roa File: 5db4be09-c417-386a-9087-f5bc7011a3f1.roa (raw, json) Hash identifier: bMj4YBqB1mVYPLvTsuwPrYnIk/mXR4hf0zfp5ty8bF0= Subject key identifier: 2D:09:C5:E9:87:1E:71:35:DA:17:58:41:F4:2B:A4:13:D5:1F:AE:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB921F8570F1A37DB1D8F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db4be09-c417-386a-9087-f5bc7011a3f1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 96.71.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:21:f8:57:0f:1a:37:db:1d:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5811b6fb-568a-42ad-98e3-ce61128e951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:51:ac:23:a0:35:b4:8c:03:6b:89:0a:25: aa:b4:df:54:67:8b:2f:58:41:6a:60:6d:38:b7:6a: 94:bd:10:7e:fb:92:3e:cb:e0:77:23:e1:cb:d9:e1: 6d:37:8f:f2:6a:75:7c:bb:97:f6:17:9d:fe:04:4b: 0a:41:44:4b:33:5f:75:3c:93:2e:21:07:c4:29:cc: da:4b:57:45:45:1c:55:ed:fc:67:dc:1e:02:c4:db: 16:88:b2:e6:7f:7e:bf:49:25:d8:8f:0d:1f:ab:33: ed:27:07:9a:9d:26:39:28:7b:30:30:ce:30:8a:eb: c2:8d:8d:60:7a:5e:df:b3:fd:18:e0:7f:99:bf:54: ca:86:94:a1:12:c2:a5:0e:eb:36:bc:32:dc:93:cc: 6d:b0:b2:10:5d:d7:e2:5f:70:1e:23:af:53:5e:a6: b0:24:e3:14:b0:e7:b3:bc:c8:7d:13:c5:3b:84:95: f7:bd:a2:46:50:7f:52:fc:6c:bf:a0:aa:0b:ae:6d: c3:8e:62:4c:e3:df:82:e9:e3:12:c1:c6:5b:cb:89: 04:4a:e0:b9:09:44:ef:1f:d2:89:e0:96:37:4a:1a: d9:1f:c9:b4:4e:81:f7:ca:a6:de:d3:cd:fd:b1:34: 62:ff:49:16:33:45:1a:7e:e2:d6:c8:29:f1:33:e3: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:09:C5:E9:87:1E:71:35:DA:17:58:41:F4:2B:A4:13:D5:1F:AE:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5db4be09-c417-386a-9087-f5bc7011a3f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.71.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:c9:f4:cd:6f:56:5d:b7:c2:9b:9b:7c:ce:e6:b1:73:c0: d6:ff:f5:57:12:b0:83:61:45:35:a6:f0:5a:98:f2:69:46:61: 17:f6:f1:b4:aa:0e:e3:d6:64:b6:1d:73:51:b7:eb:d0:6f:52: cf:c4:f5:ca:34:cc:cc:46:71:5b:17:58:7c:c5:f5:69:36:28: 59:39:8e:00:a3:9a:2f:36:37:bb:b2:cd:70:4f:84:d2:7e:78: 47:4b:a0:eb:b1:ce:e5:6f:80:50:35:c7:cb:e5:06:0d:da:22: 20:6f:b7:86:1f:4b:16:cf:07:de:fb:e9:67:cf:ed:41:37:a0: 3d:ab:bc:e4:f3:bd:e1:c1:d7:d2:d8:ac:7f:d2:54:a1:ae:dc: 3b:55:0e:16:b4:b7:44:93:06:df:90:6b:aa:78:3b:62:09:d7: 8d:aa:c1:e9:b3:9c:c9:78:68:fb:32:c5:95:ed:bf:91:d6:14: e6:2c:27:ac:57:82:b3:30:08:98:33:b8:4b:23:96:8f:ad:ba: 3b:93:66:95:93:14:34:8d:be:15:95:b6:3f:eb:10:d4:7a:07: 4e:b7:5c:8f:65:f7:c2:28:27:ed:f2:6f:1b:5e:1f:e6:29:4e: ef:8b:8b:e8:ab:b6:fc:45:23:bb:82:7c:62:da:be:3d:53:c7: f8:77:b0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSH4Vw8aN9sdj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTgxMWI2ZmItNTY4YS00MmFkLTk4ZTMtY2U2MTEyOGU5NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKBRrCOgNbSMA2uJCiWqtN9UZ4svWEFqYG04 t2qUvRB++5I+y+B3I+HL2eFtN4/yanV8u5f2F53+BEsKQURLM191PJMuIQfEKcza S1dFRRxV7fxn3B4CxNsWiLLmf36/SSXYjw0fqzPtJweanSY5KHswMM4wiuvCjY1g el7fs/0Y4H+Zv1TKhpShEsKlDus2vDLck8xtsLIQXdfiX3AeI69TXqawJOMUsOez vMh9E8U7hJX3vaJGUH9S/Gy/oKoLrm3DjmJM49+C6eMSwcZby4kESuC5CUTvH9KJ 4JY3ShrZH8m0ToH3yqbe0839sTRi/0kWM0UafuLWyCnxM+M3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0JxemHHnE12hdYQfQrpBPVH66KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRiNGJlMDktYzQxNy0z ODZhLTkwODctZjViYzcwMTFhM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3cyfTNb1Zdt8Kbm3zO5rFzwNb/9VcSsINhRTWm8FqY8mlGYRf28bSq DuPWZLYdc1G369BvUs/E9co0zMxGcVsXWHzF9Wk2KFk5jgCjmi82N7uyzXBPhNJ+ eEdLoOuxzuVvgFA1x8vlBg3aIiBvt4YfSxbPB9776WfP7UE3oD2rvOTzveHB19LY rH/SVKGu3DtVDha0t0STBt+Qa6p4O2IJ142qwemznMl4aPsyxZXtv5HWFOYsJ6xX grMwCJgzuEsjlo+tujuTZpWTFDSNvhWVtj/rENR6B063XI9l98IoJ+3ybxteH+Yp Tu+Li+irtvxFI7uCfGLavj1Tx/h3sKY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:46 2025 by rpki-client