$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78874e10-8e0d-3800-9aef-569ebf36ecff.roa File: 78874e10-8e0d-3800-9aef-569ebf36ecff.roa (raw, json) Hash identifier: J/MynR0SEYvPJNY5vRP1jTfnv0ESFKEUkUXq8+mxV9A= Subject key identifier: 5C:5F:BC:A3:D2:2B:66:61:C6:4E:A2:6F:A1:8A:45:88:C4:66:7F:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB76F31C5B55F9BB10AF0D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78874e10-8e0d-3800-9aef-569ebf36ecff.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7725 IP address blocks: 96.108.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:6f:31:c5:b5:5f:9b:b1:0a:f0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d6888f04-7186-43bb-b7a5-1743c86132e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:81:95:22:0d:60:a0:f8:2b:f2:fd:04:a1: b7:6f:8b:89:37:46:c5:22:8d:0e:1b:50:0c:cc:a3: 7e:91:53:fb:8f:44:3e:f5:28:d2:2f:8e:af:ac:65: c4:f1:92:bf:67:66:e1:2a:68:fb:ea:19:92:be:0f: 4a:79:f8:e7:7b:84:e5:8c:3f:e8:18:72:c7:7f:b3: 6d:6e:5d:89:8b:83:a3:d5:96:1e:40:47:83:c0:22: 23:92:1e:91:d2:7c:de:3a:18:c3:56:c5:0d:c0:f1: 82:ac:fb:e4:dd:2a:0b:b3:2d:da:0b:57:d9:a8:81: ff:e9:d5:b4:e9:2f:82:37:f5:1e:72:fe:85:4c:e9: 42:80:94:9a:21:db:e8:28:3e:df:91:36:bd:07:00: 02:ab:d6:2e:71:9a:19:15:b1:8a:71:b3:55:6d:7a: 48:95:c6:0f:ae:fc:4c:bf:0c:ea:f7:61:08:d4:8e: 94:e8:17:35:84:50:f6:82:55:c2:05:d3:d6:09:0a: 1b:d5:14:50:70:3d:13:22:54:d9:5e:93:ef:f9:a9: b2:5f:d8:30:ec:df:20:40:04:67:d6:cf:fa:f7:11: 61:67:6a:15:64:92:69:c6:27:bb:1d:45:74:76:bc: af:87:62:e3:91:20:53:52:87:cd:f5:4b:a6:48:da: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:BC:A3:D2:2B:66:61:C6:4E:A2:6F:A1:8A:45:88:C4:66:7F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78874e10-8e0d-3800-9aef-569ebf36ecff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:06:ce:f5:9b:e8:55:c5:32:03:b7:3f:7f:e0:de:2c:53:9d: c3:65:08:ef:25:9f:8d:d2:8b:4a:5e:b7:5a:0b:87:18:7e:39: 89:31:ee:c7:dd:18:da:c6:d6:b9:ac:97:20:ca:80:e1:af:3b: d0:9f:37:22:df:f6:be:61:8b:67:39:95:20:38:10:c6:30:d2: 74:11:15:2a:d6:66:f6:95:98:e7:d8:00:08:b8:c7:08:a8:f2: e6:5d:b2:43:35:d2:f3:3e:dd:cb:51:ad:e9:2f:96:e1:44:f9: 3e:dc:04:4e:8e:f0:cb:83:14:e0:15:b7:41:44:ec:24:b2:dc: a9:6b:f9:1a:ad:15:d7:d4:03:07:96:81:87:e3:eb:b6:7e:0f: 45:aa:a1:3e:b0:d5:87:ce:7e:55:d5:28:8b:47:cd:c3:35:6f: e1:54:13:52:69:da:44:eb:13:e7:68:c6:8d:ae:5c:30:5d:bb: 79:7b:d3:cb:4d:18:18:42:04:0b:0a:a9:4c:1b:31:d1:af:01: 04:ab:a9:82:23:d8:cd:d7:34:e1:75:d0:8e:50:c5:af:09:5d: a1:14:a4:4e:1d:a7:5e:9f:15:50:9a:06:32:68:a6:78:88:61: 77:22:32:09:b6:a0:11:9e:a1:db:5c:71:ee:55:12:aa:42:8c: 31:b3:b7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t28xxbVfm7EK8NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDY4ODhmMDQtNzE4Ni00M2JiLWI3YTUtMTc0M2M4NjEzMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvuBlSINYKD4K/L9BKG3b4uJN0bFIo0OG1AM zKN+kVP7j0Q+9SjSL46vrGXE8ZK/Z2bhKmj76hmSvg9Kefjne4TljD/oGHLHf7Nt bl2Ji4Oj1ZYeQEeDwCIjkh6R0nzeOhjDVsUNwPGCrPvk3SoLsy3aC1fZqIH/6dW0 6S+CN/Uecv6FTOlCgJSaIdvoKD7fkTa9BwACq9YucZoZFbGKcbNVbXpIlcYPrvxM vwzq92EI1I6U6Bc1hFD2glXCBdPWCQob1RRQcD0TIlTZXpPv+amyX9gw7N8gQARn 1s/69xFhZ2oVZJJpxie7HUV0dryvh2LjkSBTUofN9UumSNrOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxfvKPSK2Zhxk6ib6GKRYjEZn+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzg4NzRlMTAtOGUwZC0z ODAwLTlhZWYtNTY5ZWJmMzZlY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAGzvWb6FXFMgO3P3/g3ixTncNlCO8ln43Si0pet1oLhxh+OYkx7sfd GNrG1rmslyDKgOGvO9CfNyLf9r5hi2c5lSA4EMYw0nQRFSrWZvaVmOfYAAi4xwio 8uZdskM10vM+3ctRrekvluFE+T7cBE6O8MuDFOAVt0FE7CSy3Klr+RqtFdfUAweW gYfj67Z+D0WqoT6w1YfOflXVKItHzcM1b+FUE1Jp2kTrE+doxo2uXDBdu3l708tN GBhCBAsKqUwbMdGvAQSrqYIj2M3XNOF10I5Qxa8JXaEUpE4dp16fFVCaBjJopniI YXciMgm2oBGeodtcce5VEqpCjDGzt2M= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:07 2025 by rpki-client