$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638b1401-e127-350a-a48c-c1d94f445c5e.roa File: 638b1401-e127-350a-a48c-c1d94f445c5e.roa (raw, json) Hash identifier: NKONiQqB9Skyk86GKNcjrq4sFzW6WkBnFpDI0JkiBB4= Subject key identifier: C1:4C:BF:07:55:EB:FB:05:0E:3D:EA:37:2C:09:32:A3:AF:EE:96:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B51F07B60D22DD8FB998 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638b1401-e127-350a-a48c-c1d94f445c5e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 96.115.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b5:1f:07:b6:0d:22:dd:8f:b9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=58e750b2-ad5f-4d49-9aa3-8cb5019f738e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:72:74:e4:85:2c:cb:68:b5:7b:17:97:be: 61:66:72:03:8d:5f:81:cc:8a:dd:01:f7:30:66:03: ed:da:ca:63:b2:a3:c8:cf:47:7e:8b:74:24:d0:b7: 4e:60:30:63:4b:48:0d:3c:a2:25:26:83:f3:fe:df: be:9c:d2:9b:fb:1f:44:a6:d4:26:dc:76:6f:4e:5d: f4:39:4d:5a:a2:44:a8:06:f0:8a:61:00:f7:22:53: df:0a:5b:fb:d2:7c:86:4a:3a:d0:55:d6:c8:1c:94: f8:1d:96:f4:75:b9:63:de:99:45:06:97:0f:68:dc: dd:b2:74:e8:6b:54:6c:bf:b2:af:76:12:87:d2:d4: d4:98:1f:ee:44:01:d9:fb:b0:90:c0:20:cd:58:77: 43:de:d5:8f:32:31:cc:58:2a:6f:98:b7:e8:40:43: de:05:ae:74:4d:1c:e4:4d:15:88:02:e4:73:ae:1c: a5:5f:99:94:89:f3:fb:c2:a9:af:ed:74:f6:70:2f: d8:fc:23:20:8b:fa:6c:66:f9:e0:2f:ba:8b:d5:6b: 1d:a2:8d:56:e5:c7:86:dc:b6:82:eb:31:69:67:d5: fd:8d:46:38:c3:17:a9:17:e5:f9:b8:e3:02:2c:20: 28:e5:f0:01:cb:18:e4:e7:9a:52:6f:30:c6:fc:5d: de:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4C:BF:07:55:EB:FB:05:0E:3D:EA:37:2C:09:32:A3:AF:EE:96:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/638b1401-e127-350a-a48c-c1d94f445c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.115.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ba:73:04:bb:cb:a1:fa:63:c1:c9:84:a7:45:33:05:0a:25: cd:59:c2:f4:d1:82:7f:0c:4b:f2:9c:56:8f:5b:8d:41:51:7a: 5f:00:77:98:ec:97:90:f8:78:02:48:c4:94:01:c5:9b:bd:93: 20:02:08:c4:d6:b0:1b:71:29:1c:a0:93:1f:af:94:2e:8b:eb: 62:04:0a:19:17:4d:01:27:4f:0a:0f:c7:41:cd:e7:d9:29:fa: 19:70:9f:f2:bd:70:9d:b8:b3:a8:89:1f:3c:39:5c:3b:32:9e: 00:d7:58:95:32:b7:51:f2:f0:5e:ff:40:2e:27:3b:e4:c7:9a: df:98:27:74:53:dc:45:00:19:c7:1c:47:5a:57:be:ee:5a:6d: b1:45:29:32:8e:ac:fb:22:b2:02:03:97:e3:94:20:d9:c4:6e: 5f:26:3f:83:02:d7:59:b7:1c:be:da:a2:72:b3:5c:65:59:b9: b6:4e:fd:8b:f6:80:7a:45:e0:bc:a7:36:91:ef:82:9d:7c:16: 74:73:c1:60:19:20:de:73:57:a1:2b:36:20:94:06:4e:e0:af: 86:60:7f:d7:4c:1e:fa:b7:cb:91:c8:de:32:88:26:4c:c6:4b: ca:de:fd:82:7e:15:b6:68:4b:63:ba:cc:9d:9b:d6:67:0d:d2: ab:65:9d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t7UfB7YNIt2PuZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NThlNzUwYjItYWQ1Zi00ZDQ5LTlhYTMtOGNiNTAxOWY3MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK5ydOSFLMtotXsXl75hZnIDjV+BzIrdAfcw ZgPt2spjsqPIz0d+i3Qk0LdOYDBjS0gNPKIlJoPz/t++nNKb+x9EptQm3HZvTl30 OU1aokSoBvCKYQD3IlPfClv70nyGSjrQVdbIHJT4HZb0dblj3plFBpcPaNzdsnTo a1Rsv7KvdhKH0tTUmB/uRAHZ+7CQwCDNWHdD3tWPMjHMWCpvmLfoQEPeBa50TRzk TRWIAuRzrhylX5mUifP7wqmv7XT2cC/Y/CMgi/psZvngL7qL1Wsdoo1W5ceG3LaC 6zFpZ9X9jUY4wxepF+X5uOMCLCAo5fAByxjk55pSbzDG/F3e5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFMvwdV6/sFDj3qNywJMqOv7paZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjM4YjE0MDEtZTEyNy0z NTBhLWE0OGMtYzFkOTRmNDQ1YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe6cwS7y6H6Y8HJhKdFMwUKJc1ZwvTRgn8MS/KcVo9bjUFRel8Ad5js l5D4eAJIxJQBxZu9kyACCMTWsBtxKRygkx+vlC6L62IEChkXTQEnTwoPx0HN59kp +hlwn/K9cJ24s6iJHzw5XDsyngDXWJUyt1Hy8F7/QC4nO+THmt+YJ3RT3EUAGccc R1pXvu5abbFFKTKOrPsisgIDl+OUINnEbl8mP4MC11m3HL7aonKzXGVZubZO/Yv2 gHpF4LynNpHvgp18FnRzwWAZIN5zV6ErNiCUBk7gr4Zgf9dMHvq3y5HI3jKIJkzG S8re/YJ+FbZoS2O6zJ2b1mcN0qtlnZw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:14 2025 by rpki-client