$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa File: 91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa (raw, json) Hash identifier: 8xnhi2KBr35SYExacB94PVIFatEiNlsJdGFRcp06II8= Subject key identifier: E9:8C:49:C1:6E:C3:17:54:AA:03:2A:F1:95:7A:97:9D:4F:8D:08:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7AB26DC1A24AAB6E23800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33652 IP address blocks: 96.109.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ab:26:dc:1a:24:aa:b6:e2:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cd34271b-2480-4155-8a3e-8310675d19c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:1e:56:8c:51:f4:15:1b:be:c7:52:4c:c2: a8:93:18:60:4c:26:fb:d7:11:93:87:24:b1:17:f8: d0:df:27:e2:00:40:14:d3:4a:58:9e:8a:a2:08:2a: 79:40:d0:e3:97:f2:9d:b9:15:1c:b6:3f:be:be:eb: f5:c5:78:2c:41:52:cc:c5:2a:49:0a:c4:ce:fd:1d: f8:78:6f:cd:24:a3:6b:54:6a:5e:40:92:75:17:b1: f7:a9:5d:87:41:ee:5a:00:14:0b:3d:63:69:02:00: f9:00:e5:9c:cd:60:d0:74:a7:92:c7:82:e1:9b:47: 7f:95:37:26:e4:15:69:b1:60:6a:d6:86:74:9e:1a: 5b:46:bf:75:bf:47:78:8e:3a:6c:2f:96:6e:c9:5f: b9:01:f2:5b:d6:7d:f4:1c:53:0b:4b:2a:64:24:98: ff:86:8c:d0:4e:37:82:14:65:4b:1b:63:e1:0c:cd: df:2b:65:0c:72:79:86:b0:28:91:a8:96:63:07:14: c8:19:ff:b3:90:04:a1:c4:e9:23:80:9d:a2:90:e9: 4d:8f:8b:60:51:37:0d:f6:e6:89:27:eb:ad:95:44: f1:85:38:66:13:22:cf:19:ea:88:99:17:0b:bd:57: 0c:58:8e:50:df:c7:c1:58:4e:a9:41:fb:42:4c:89: 05:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:49:C1:6E:C3:17:54:AA:03:2A:F1:95:7A:97:9D:4F:8D:08:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:49:b3:ee:d5:3c:1b:f9:c1:13:c4:66:55:c0:48:e6:38: 30:95:58:b0:05:ae:77:f2:a7:75:b0:09:c5:eb:a9:a8:bc:89: db:b3:3f:dd:93:bd:72:79:b1:8e:0f:72:7b:15:64:ff:55:43: 28:d9:c4:13:c2:9b:d3:a7:ed:f0:5c:2f:72:36:53:49:ba:39: 6e:35:a3:b8:ed:46:61:92:7c:5f:65:17:cc:6f:19:9f:35:45: 0b:5a:a9:6f:dc:bb:a8:2f:3e:c8:95:c6:2b:19:43:93:61:81: c0:52:e6:48:ef:a5:0b:e7:dc:52:44:e9:93:a8:2a:f6:a2:96: 37:fd:da:53:b5:6a:8a:c0:f3:d2:19:b3:41:7b:d3:e3:ec:88: 81:76:48:d1:7d:aa:d4:3f:ba:89:84:02:74:fd:14:9c:dc:69: 87:d8:7d:8d:37:34:5b:16:63:ef:97:01:aa:8b:b9:e5:c7:dd: 6c:00:9c:96:5d:a1:55:36:89:92:ff:f7:bd:87:2e:be:04:5e: bf:d5:2f:9e:d6:87:c1:84:46:3e:22:54:25:0e:93:8e:a9:91: 8d:95:19:13:c0:a6:50:9e:bc:d3:6e:b8:c5:a7:9c:4b:1e:39: 5b:55:6b:64:7b:eb:85:c3:50:59:df:cb:9a:ad:ab:9e:b0:af: 30:c0:c7:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t6sm3BokqrbiOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2QzNDI3MWItMjQ4MC00MTU1LThhM2UtODMxMDY3NWQxOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSMeVoxR9BUbvsdSTMKokxhgTCb71xGThySx F/jQ3yfiAEAU00pYnoqiCCp5QNDjl/KduRUctj++vuv1xXgsQVLMxSpJCsTO/R34 eG/NJKNrVGpeQJJ1F7H3qV2HQe5aABQLPWNpAgD5AOWczWDQdKeSx4Lhm0d/lTcm 5BVpsWBq1oZ0nhpbRr91v0d4jjpsL5ZuyV+5AfJb1n30HFMLSypkJJj/hozQTjeC FGVLG2PhDM3fK2UMcnmGsCiRqJZjBxTIGf+zkAShxOkjgJ2ikOlNj4tgUTcN9uaJ J+utlUTxhThmEyLPGeqImRcLvVcMWI5Q38fBWE6pQftCTIkF+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmMScFuwxdUqgMq8ZV6l51PjQgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFhMzllMDQtYTRiZC0z ZjZlLThiM2MtMDZjM2M5YzZlNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCoSbPu1Twb+cETxGZVwEjmODCVWLAFrnfyp3WwCcXrqai8iduzP92T vXJ5sY4PcnsVZP9VQyjZxBPCm9On7fBcL3I2U0m6OW41o7jtRmGSfF9lF8xvGZ81 RQtaqW/cu6gvPsiVxisZQ5NhgcBS5kjvpQvn3FJE6ZOoKvailjf92lO1aorA89IZ s0F70+PsiIF2SNF9qtQ/uomEAnT9FJzcaYfYfY03NFsWY++XAaqLueXH3WwAnJZd oVU2iZL/972HLr4EXr/VL57Wh8GERj4iVCUOk46pkY2VGRPAplCevNNuuMWnnEse OVtVa2R764XDUFnfy5qtq56wrzDAxzI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:09:24 2025 by rpki-client