$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c89c589-d09a-3d4a-a5e0-694411c5c709.roa File: 6c89c589-d09a-3d4a-a5e0-694411c5c709.roa (raw, json) Hash identifier: Npe7/AKfnhSv46jppvQAyclsQnm5N31de/3O/K2s5xw= Subject key identifier: FA:F3:B0:15:1C:D6:4C:92:34:7E:A4:8F:5B:58:B0:27:02:A5:B4:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB73730DE166B47C0004180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c89c589-d09a-3d4a-a5e0-694411c5c709.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 96.79.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:37:30:de:16:6b:47:c0:00:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=30b42028-3d42-49f2-9971-c9f2bcd959ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:12:94:6b:57:be:21:89:c5:c8:40:9b:df: 07:f3:a7:fc:bc:7e:92:36:67:be:78:98:0d:48:17: da:f5:f8:f0:ef:6b:04:2d:9c:16:15:95:01:03:28: 38:63:bb:0f:22:6e:2e:aa:ce:ea:8c:90:5c:a7:8a: 19:b6:3e:c4:4e:86:9f:94:8b:f7:14:38:cd:51:b9: 8a:57:e3:c7:50:88:d3:d5:51:6f:d9:b1:55:4d:c7: c5:ea:c2:c3:b5:1e:3d:7d:be:6f:c6:f1:26:73:35: e1:8d:11:05:46:12:1a:aa:84:c6:a8:2d:db:b0:a6: dd:ec:61:d6:78:a9:97:0d:ee:7d:c8:b3:67:23:43: 95:c9:05:a1:ce:97:8c:b8:04:8e:99:d4:4c:a7:9b: b9:e2:02:02:e4:cb:0f:34:ca:d1:22:50:a5:1f:04: f2:52:3b:ea:f7:7f:05:e9:c2:8a:b9:f2:48:ed:38: c8:1e:e9:cb:1d:2d:a4:0c:43:14:0f:71:18:e8:e2: c9:f6:62:c9:80:bb:26:4d:a7:23:4d:38:89:df:42: 19:81:1a:a3:67:83:90:ea:1b:76:40:f9:6d:84:9c: f2:11:b7:40:15:33:77:86:e2:83:6c:ad:b6:49:b9: 22:2a:16:b8:93:3b:be:7b:e1:80:41:4c:c0:b7:ba: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:B0:15:1C:D6:4C:92:34:7E:A4:8F:5B:58:B0:27:02:A5:B4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c89c589-d09a-3d4a-a5e0-694411c5c709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.79.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:51:57:73:d3:35:6c:81:55:42:8c:df:24:7e:a3:03:af:f5: d0:b5:79:63:03:08:6a:9f:21:33:39:69:0f:77:30:45:75:b6: b9:cf:b0:69:67:b6:5d:b5:0a:27:24:26:fa:27:46:dc:dd:22: ea:9d:14:9f:8c:c7:10:08:fa:a3:03:fb:0b:b2:46:a1:75:1f: 13:65:5c:85:a6:8d:f0:89:a6:c0:96:8d:21:ea:48:9b:37:e0: bf:b3:08:cc:22:fc:01:e7:25:9b:0b:95:04:3b:2b:18:80:5f: 2f:0e:ef:55:51:ae:3d:63:63:27:08:86:ea:85:94:bd:8b:81: a6:d6:13:b5:ec:b4:c1:5f:01:f3:8e:00:8f:9c:4c:76:51:60: 22:81:6d:f2:62:95:c4:04:dd:fb:c4:dc:e0:ef:3d:83:da:a1: 60:2e:6d:d2:dc:df:cc:e7:67:a2:cc:9f:73:74:25:3a:76:ba: 96:b9:37:4e:77:4b:8a:9e:a8:47:0e:f8:4a:3e:ad:9a:3b:ac: 03:15:d3:80:7f:68:09:39:a5:78:52:5d:2b:35:7e:47:24:bb: 93:24:f3:ff:1e:6f:8c:4d:98:24:45:47:f3:dc:ae:ab:22:ad: 26:54:7d:af:f6:e7:21:9b:41:1f:60:5e:a3:6d:6f:34:de:42: 39:8e:71:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzcw3hZrR8AAQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzBiNDIwMjgtM2Q0Mi00OWYyLTk5NzEtYzlmMmJjZDk1OWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGASlGtXviGJxchAm98H86f8vH6SNme+eJgN SBfa9fjw72sELZwWFZUBAyg4Y7sPIm4uqs7qjJBcp4oZtj7EToaflIv3FDjNUbmK V+PHUIjT1VFv2bFVTcfF6sLDtR49fb5vxvEmczXhjREFRhIaqoTGqC3bsKbd7GHW eKmXDe59yLNnI0OVyQWhzpeMuASOmdRMp5u54gIC5MsPNMrRIlClHwTyUjvq938F 6cKKufJI7TjIHunLHS2kDEMUD3EY6OLJ9mLJgLsmTacjTTiJ30IZgRqjZ4OQ6ht2 QPlthJzyEbdAFTN3huKDbK22SbkiKha4kzu+e+GAQUzAt7qwkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrzsBUc1kySNH6kj1tYsCcCpbQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmM4OWM1ODktZDA5YS0z ZDRhLWE1ZTAtNjk0NDExYzVjNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYE/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZRV3PTNWyBVUKM3yR+owOv9dC1eWMDCGqfITM5aQ93MEV1trnPsGln tl21CickJvonRtzdIuqdFJ+MxxAI+qMD+wuyRqF1HxNlXIWmjfCJpsCWjSHqSJs3 4L+zCMwi/AHnJZsLlQQ7KxiAXy8O71VRrj1jYycIhuqFlL2LgabWE7XstMFfAfOO AI+cTHZRYCKBbfJilcQE3fvE3ODvPYPaoWAubdLc38znZ6LMn3N0JTp2upa5N053 S4qeqEcO+Eo+rZo7rAMV04B/aAk5pXhSXSs1fkcku5Mk8/8eb4xNmCRFR/Pcrqsi rSZUfa/25yGbQR9gXqNtbzTeQjmOcVY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:43:51 2025 by rpki-client