$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74ed7099-e68c-3641-9ea9-06597c4415de.roa File: 74ed7099-e68c-3641-9ea9-06597c4415de.roa (raw, json) Hash identifier: E9OlcZl7dZOwYrSH/2lrE2iRwAC3/B7dxKwwA7QKDHE= Subject key identifier: B3:A9:CF:E1:6B:A8:E5:6B:44:41:91:4C:C5:59:F0:C7:4D:84:17:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8D0C12E0EFEDB6A73E600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74ed7099-e68c-3641-9ea9-06597c4415de.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 96.99.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:d0:c1:2e:0e:fe:db:6a:73:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d0da2e32-f65d-46dc-acd0-eb79464e2c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:b9:dc:51:27:d2:21:d5:d2:cf:de:1a:25: 25:10:09:aa:a0:b3:70:4a:66:6d:a9:5e:05:ec:49: 41:3a:e8:27:d4:18:d3:76:85:f1:be:b6:e3:25:d9: 65:35:c2:45:43:e0:e0:f0:e9:86:4a:0d:33:50:95: 1e:e9:9e:e4:e4:df:6c:d7:c8:ef:eb:28:d5:1a:bc: 76:92:2d:a3:32:78:42:f5:cd:fc:6a:f0:4e:77:9f: 1b:e4:24:7d:64:cb:2c:d7:0d:60:45:a8:72:1b:cd: 3b:16:1a:53:0e:22:9f:27:72:4f:4b:9f:7d:6c:1a: 62:00:c4:ec:bb:98:03:2c:be:36:37:ed:5e:a9:9d: 44:bc:7b:9d:dc:55:7e:9d:34:4e:13:b6:64:61:90: 57:b5:8b:e4:31:8a:54:b0:ff:60:96:fb:de:04:04: 74:be:de:80:4b:cc:99:46:5d:c8:9f:96:a8:04:de: fb:f4:82:b0:46:41:da:f5:03:79:84:2c:8e:7d:f7: b9:29:a1:b8:6b:3c:f3:a9:47:71:37:5e:a8:11:83: a0:f8:bd:59:43:53:c0:1a:53:8d:94:f0:f3:2e:95: de:dd:5c:77:9f:6e:44:db:61:ed:0d:18:28:75:e6: 69:10:c0:f7:45:9d:e0:60:a4:55:cb:18:84:24:64: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:CF:E1:6B:A8:E5:6B:44:41:91:4C:C5:59:F0:C7:4D:84:17:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/74ed7099-e68c-3641-9ea9-06597c4415de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.99.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9a:67:12:9a:45:eb:e7:fe:f9:7c:25:bb:38:09:f7:7b:3c: 6f:63:d3:72:19:32:12:11:4d:24:7e:9a:7c:31:01:76:76:89: ac:b0:a0:58:f7:1b:cb:8c:94:4f:23:85:2e:30:51:09:3f:9e: ca:35:65:26:4a:ca:8e:a0:c7:7b:6a:6b:c6:21:3b:d0:28:c6: 2b:9e:51:74:c4:22:07:54:a5:77:c3:c2:64:0c:c9:40:31:ac: 1f:41:43:f7:42:44:c9:a1:01:80:89:45:c3:d1:ed:b5:de:39: 58:8f:6f:f3:2a:b7:17:65:70:93:e6:a0:ac:04:36:2e:82:58: f5:a8:2d:99:b8:9c:a6:c6:e9:3e:20:61:63:27:a1:17:68:6f: 9e:b0:c8:c3:25:12:d5:6f:e7:dc:51:d7:ac:e9:ba:f1:8f:e3: 7c:99:5d:76:03:c1:b0:6b:e8:e4:e2:8e:d6:50:24:06:c6:cd: 0a:a2:9f:85:ce:d9:74:09:29:08:5c:bc:2e:d5:95:21:77:b5: 0e:bc:28:db:ff:b9:49:2e:71:62:17:5d:3c:5a:e5:6b:5e:1a: 93:82:3d:32:db:28:f2:3a:cf:50:d5:bf:42:0b:4e:3d:6f:fa: 8f:20:3a:e1:5b:48:4f:4c:f0:d0:dc:75:69:0d:f5:c1:fc:6c: 21:4e:e8:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uNDBLg7+22pz5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDBkYTJlMzItZjY1ZC00NmRjLWFjZDAtZWI3OTQ2NGUyYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbC53FEn0iHV0s/eGiUlEAmqoLNwSmZtqV4F 7ElBOugn1BjTdoXxvrbjJdllNcJFQ+Dg8OmGSg0zUJUe6Z7k5N9s18jv6yjVGrx2 ki2jMnhC9c38avBOd58b5CR9ZMss1w1gRahyG807FhpTDiKfJ3JPS599bBpiAMTs u5gDLL42N+1eqZ1EvHud3FV+nTROE7ZkYZBXtYvkMYpUsP9glvveBAR0vt6AS8yZ Rl3In5aoBN779IKwRkHa9QN5hCyOffe5KaG4azzzqUdxN16oEYOg+L1ZQ1PAGlON lPDzLpXe3Vx3n25E22HtDRgodeZpEMD3RZ3gYKRVyxiEJGSqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOpz+FrqOVrREGRTMVZ8MdNhBcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzRlZDcwOTktZTY4Yy0z NjQxLTllYTktMDY1OTdjNDQxNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOaZxKaRevn/vl8Jbs4Cfd7PG9j03IZMhIRTSR+mnwxAXZ2iaywoFj3 G8uMlE8jhS4wUQk/nso1ZSZKyo6gx3tqa8YhO9AoxiueUXTEIgdUpXfDwmQMyUAx rB9BQ/dCRMmhAYCJRcPR7bXeOViPb/MqtxdlcJPmoKwENi6CWPWoLZm4nKbG6T4g YWMnoRdob56wyMMlEtVv59xR16zpuvGP43yZXXYDwbBr6OTijtZQJAbGzQqin4XO 2XQJKQhcvC7VlSF3tQ68KNv/uUkucWIXXTxa5WteGpOCPTLbKPI6z1DVv0ILTj1v +o8gOuFbSE9M8NDcdWkN9cH8bCFO6GI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:09 2025 by rpki-client