$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0832f4-4f89-30b3-90b9-a945d3209f5e.roa File: 9a0832f4-4f89-30b3-90b9-a945d3209f5e.roa (raw, json) Hash identifier: AFlUjpqyHxpo8tgeqgiK6o5li0ryFmNkeW3dckNWHig= Subject key identifier: 37:9F:83:37:C5:BD:2D:7B:36:8E:30:13:01:26:0C:06:5A:AE:41:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB93500BDCA772D128BC480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0832f4-4f89-30b3-90b9-a945d3209f5e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 96.113.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:35:00:bd:ca:77:2d:12:8b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4d02e535-5d9a-475f-a697-294fe39f0cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:03:40:98:f0:22:21:04:86:df:8b:18:0b: a4:21:46:b2:29:cb:8a:35:fd:27:87:7f:d9:37:67: fe:2e:b6:86:ae:cc:7b:06:db:90:ea:0c:c2:b7:28: 51:68:ed:1e:59:2f:7c:1a:4f:7b:4b:ad:da:9d:51: f2:a4:ea:b4:ce:34:78:a4:59:0a:3b:15:cc:09:47: db:ef:40:a8:cf:b9:ad:b2:c9:ea:0c:e6:94:b4:60: 8a:de:f2:d7:c2:3f:48:22:30:9c:d0:ed:9d:1e:c0: 43:c8:25:ef:e6:97:92:49:ec:9a:a4:eb:da:77:0a: df:9a:c1:00:70:b9:ba:74:eb:20:ab:f0:3c:ec:3a: ff:b3:de:48:4b:00:d0:3a:fe:17:2b:dd:34:9e:23: e3:15:d4:78:8f:6e:5b:4b:92:d7:72:a3:20:28:66: bc:1d:b3:7b:df:7c:88:b1:86:88:9e:48:64:d9:48: 61:93:86:70:18:71:0b:c5:12:76:b4:a6:68:30:dc: a3:4b:8c:0e:94:fd:15:fd:8b:a7:ac:be:84:52:4f: 3e:c0:bd:cd:40:f9:9e:8b:37:67:01:92:26:b4:54: a5:28:51:11:29:5f:25:17:6d:2c:21:8e:37:34:a7: cd:da:be:01:41:4a:91:f6:91:62:f7:fe:6b:cf:6a: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:83:37:C5:BD:2D:7B:36:8E:30:13:01:26:0C:06:5A:AE:41:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a0832f4-4f89-30b3-90b9-a945d3209f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.113.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5b:a4:6e:93:5d:a7:2d:a4:2c:22:e7:3d:e8:1b:b0:5c:d1: 00:21:ca:01:75:c9:2b:28:23:61:1d:52:90:eb:54:e0:cb:3f: d9:00:ad:98:cf:52:63:8e:ad:50:27:93:17:5e:05:a8:2f:a6: be:20:04:c4:df:b7:93:86:72:59:da:bb:7c:5e:ae:77:85:a4: 2c:b3:4b:46:d8:56:56:26:ff:13:bf:84:7d:87:db:93:00:31: a1:c0:4f:e3:eb:98:d7:15:54:30:be:0a:08:4c:50:c6:51:41: 83:98:94:3e:b3:9d:d6:b9:86:b9:fc:c7:33:aa:a1:10:1e:5c: 7e:d4:17:c3:92:17:45:dd:43:f9:e4:c9:d3:18:b1:53:a9:84: 5b:b5:32:05:c2:81:e5:1d:9a:65:3b:21:84:ca:ec:ff:76:d4: 83:58:20:7b:5f:8a:e4:e8:e3:72:e3:4a:87:3c:db:0a:fb:6d: 8f:15:fd:6e:e4:1e:1a:47:68:15:53:da:0e:6d:c0:4a:4a:74: 28:ee:b3:cb:bf:d2:45:99:d5:9e:73:04:9e:cf:f6:64:8b:68: 53:40:34:41:12:be:66:4c:19:5e:94:6b:32:1d:41:97:c6:67: b6:16:4c:90:b7:7c:01:bb:e4:d5:a2:d3:f8:25:76:41:04:3f: e4:e0:4d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uTUAvcp3LRKLxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGQwMmU1MzUtNWQ5YS00NzVmLWE2OTctMjk0ZmUzOWYwY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy0DQJjwIiEEht+LGAukIUayKcuKNf0nh3/Z N2f+LraGrsx7BtuQ6gzCtyhRaO0eWS98Gk97S63anVHypOq0zjR4pFkKOxXMCUfb 70Coz7mtssnqDOaUtGCK3vLXwj9IIjCc0O2dHsBDyCXv5peSSeyapOvadwrfmsEA cLm6dOsgq/A87Dr/s95ISwDQOv4XK900niPjFdR4j25bS5LXcqMgKGa8HbN733yI sYaInkhk2Uhhk4ZwGHELxRJ2tKZoMNyjS4wOlP0V/YunrL6EUk8+wL3NQPmeizdn AZImtFSlKFERKV8lF20sIY43NKfN2r4BQUqR9pFi9/5rz2oT0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDefgzfFvS17No4wEwEmDAZarkF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWEwODMyZjQtNGY4OS0z MGIzLTkwYjktYTk0NWQzMjA5ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRbpG6TXactpCwi5z3oG7Bc0QAhygF1ySsoI2EdUpDrVODLP9kArZjP UmOOrVAnkxdeBagvpr4gBMTft5OGclnau3xerneFpCyzS0bYVlYm/xO/hH2H25MA MaHAT+PrmNcVVDC+CghMUMZRQYOYlD6znda5hrn8xzOqoRAeXH7UF8OSF0XdQ/nk ydMYsVOphFu1MgXCgeUdmmU7IYTK7P921INYIHtfiuTo43LjSoc82wr7bY8V/W7k HhpHaBVT2g5twEpKdCjus8u/0kWZ1Z5zBJ7P9mSLaFNANEESvmZMGV6UazIdQZfG Z7YWTJC3fAG75NWi0/gldkEEP+TgTVE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:32 2025 by rpki-client