$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a197cb22-1502-3de4-a812-cf4a6fbb1d85.roa File: a197cb22-1502-3de4-a812-cf4a6fbb1d85.roa (raw, json) Hash identifier: duEzTuREVvJyp+Qt9OTT87Fv+kiIjsLAKUSTisXF8F4= Subject key identifier: E9:93:D1:C7:4A:3B:3F:DC:14:8C:F4:10:E8:F1:AC:73:46:1C:82:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E772193F04995FA630D4980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a197cb22-1502-3de4-a812-cf4a6fbb1d85.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 96.110.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:21:93:f0:49:95:fa:63:0d:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=bf985941-e669-406b-a5b1-cd675ed450ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:e4:0c:d9:7d:80:2a:f7:f7:2a:cc:9a:81: 3f:fe:15:e5:72:ba:7e:a6:7c:15:dc:3e:54:33:a7: 28:9f:4c:32:58:a4:7a:25:bb:25:f2:50:80:60:9b: 99:74:26:c3:86:f4:b4:f0:26:01:0b:a8:12:1f:7d: 63:eb:15:70:5e:56:2e:4e:4d:bd:cf:e7:c7:a3:55: 42:ea:97:af:69:9c:4a:3e:21:32:10:a0:54:50:b6: da:b6:cb:95:5d:dc:d5:58:81:b9:ac:d0:ba:63:96: a0:54:2c:11:5b:0a:91:ca:1d:39:be:45:1e:59:22: 54:57:16:57:76:84:3a:dd:97:10:37:e9:0a:36:30: 7c:79:24:4f:51:68:60:db:43:34:8b:5d:c9:5b:af: 73:71:eb:55:b7:72:ee:ce:5f:e2:04:75:c5:36:e9: 10:25:ec:ff:3d:bf:f7:d4:a9:21:70:34:6e:74:15: 28:b6:08:52:44:c7:1b:80:8f:a1:2e:ca:66:75:4f: 0b:3c:db:e1:6a:a8:bb:e7:45:96:0a:7b:34:d3:8d: ef:1b:39:ca:7e:98:1e:62:f8:67:ce:ba:1b:fb:f6: 43:89:95:d6:ab:a6:57:6c:8d:97:d9:d2:ce:ba:28: ce:12:ce:65:f9:8a:bb:61:61:c4:ff:7f:0c:dc:78: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:D1:C7:4A:3B:3F:DC:14:8C:F4:10:E8:F1:AC:73:46:1C:82:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a197cb22-1502-3de4-a812-cf4a6fbb1d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.110.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d5:8e:4a:cc:6e:ac:cd:96:9e:0f:b9:13:51:d8:23:d8:27: ae:d8:2e:4c:be:06:ff:a1:be:bc:30:3c:75:2e:1e:5b:64:fa: 20:8e:aa:e5:06:2a:bf:34:a1:b3:ee:c5:9c:68:46:38:55:bb: a3:3f:5f:12:b7:91:b3:8b:c0:7c:57:58:72:c4:71:70:64:4e: 32:0b:f6:e3:4a:b1:99:9b:a0:15:bc:f1:a0:83:05:a8:3b:11: 49:87:f4:17:e9:ea:6b:7a:4d:2a:7d:c7:26:1a:12:45:b6:4a: ae:f7:81:be:af:55:4c:d5:96:81:93:b8:29:cc:91:37:1b:bb: e7:1a:2f:16:31:c4:6d:e5:38:61:7a:ad:db:9d:a2:75:9e:f8: 49:bb:7e:c6:9a:91:67:48:d7:d7:ff:09:0b:c1:d8:b5:50:31: 3f:d2:04:9a:79:0a:b1:91:e1:4d:b6:de:c7:7b:61:94:fe:08: 20:7b:dc:72:7b:78:83:fb:c7:ab:6b:17:e8:f5:07:16:23:64: 92:df:44:f4:e0:e7:9f:d2:d0:0a:b6:fe:8a:2b:f6:7e:76:ca: f1:7e:9c:71:80:85:97:47:14:a5:6e:bd:12:e9:e0:df:6f:62: 59:68:26:34:e7:31:c4:ed:dc:c5:6a:2f:8a:6f:96:58:48:67: 73:7c:b9:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyGT8EmV+mMNSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YmY5ODU5NDEtZTY2OS00MDZiLWE1YjEtY2Q2NzVlZDQ1MGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4rkDNl9gCr39yrMmoE//hXlcrp+pnwV3D5U M6con0wyWKR6Jbsl8lCAYJuZdCbDhvS08CYBC6gSH31j6xVwXlYuTk29z+fHo1VC 6pevaZxKPiEyEKBUULbatsuVXdzVWIG5rNC6Y5agVCwRWwqRyh05vkUeWSJUVxZX doQ63ZcQN+kKNjB8eSRPUWhg20M0i13JW69zcetVt3Luzl/iBHXFNukQJez/Pb/3 1KkhcDRudBUotghSRMcbgI+hLspmdU8LPNvhaqi750WWCns0043vGznKfpgeYvhn zrob+/ZDiZXWq6ZXbI2X2dLOuijOEs5l+Yq7YWHE/38M3HjA7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmT0cdKOz/cFIz0EOjxrHNGHIIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE5N2NiMjItMTUwMi0z ZGU0LWE4MTItY2Y0YTZmYmIxZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXVjkrMbqzNlp4PuRNR2CPYJ67YLky+Bv+hvrwwPHUuHltk+iCOquUG Kr80obPuxZxoRjhVu6M/XxK3kbOLwHxXWHLEcXBkTjIL9uNKsZmboBW88aCDBag7 EUmH9Bfp6mt6TSp9xyYaEkW2Sq73gb6vVUzVloGTuCnMkTcbu+caLxYxxG3lOGF6 rdudonWe+Em7fsaakWdI19f/CQvB2LVQMT/SBJp5CrGR4U223sd7YZT+CCB73HJ7 eIP7x6trF+j1BxYjZJLfRPTg55/S0Aq2/oor9n52yvF+nHGAhZdHFKVuvRLp4N9v YlloJjTnMcTt3MVqL4pvllhIZ3N8uVU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:52 2025 by rpki-client