$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0340ab7-0991-306f-b1ac-e6ee7c51b5dc.roa File: b0340ab7-0991-306f-b1ac-e6ee7c51b5dc.roa (raw, json) Hash identifier: 54uA6YPq1u1aQVll6jX9vN+Dc4x8yZci7G6pyI59UIw= Subject key identifier: F4:F9:B0:B0:D9:E5:25:3C:C4:AD:A3:95:66:C7:24:1D:7D:D8:97:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141D4F1346A683BFCEA7E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0340ab7-0991-306f-b1ac-e6ee7c51b5dc.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 96.97.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d4:f1:34:6a:68:3b:fc:ea:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=a8529b06-f3b7-4fce-bfba-abf7eaef2a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:1e:2e:47:ae:2a:73:5b:b3:aa:d3:af:05: 46:e0:25:29:45:15:17:ca:07:e3:26:56:b1:d0:55: 81:6a:49:5a:69:94:eb:4f:3d:c9:f0:47:1a:a3:f6: 48:1e:b8:54:e2:b0:95:8e:71:cf:6f:0e:a0:93:54: 36:7d:34:78:eb:eb:a0:7e:97:7c:10:e1:3b:51:b9: 07:09:6b:95:f8:36:08:f6:c3:3c:e8:19:69:d0:f4: c7:6a:c0:c5:6b:d2:2f:70:a8:8f:b6:f2:39:a0:c5: f6:ee:5d:e9:dc:cc:01:a8:dc:44:b5:32:bd:67:25: 71:82:58:21:17:86:4e:1c:fe:6c:3d:bd:62:95:dd: 0d:ec:9b:69:5d:f4:5c:23:d2:36:fd:63:6a:55:a2: 4a:63:3d:4e:50:51:6b:1f:40:ed:d0:eb:6c:62:4a: 28:fb:bb:a0:42:b8:18:75:05:39:c7:3c:9e:a5:9e: 49:97:1e:be:c0:62:90:89:23:27:82:49:44:7d:bf: d7:8e:2a:d5:f3:41:e0:b7:31:86:b1:4f:4a:ae:01: e5:29:45:05:ef:18:15:c5:cb:38:cf:26:be:b4:11: 89:1d:2b:3d:12:0d:dd:a6:3d:eb:64:a3:74:67:27: 21:24:f3:a8:41:66:57:b9:ac:5d:51:53:67:43:20: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:B0:B0:D9:E5:25:3C:C4:AD:A3:95:66:C7:24:1D:7D:D8:97:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0340ab7-0991-306f-b1ac-e6ee7c51b5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.97.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e8:38:35:32:c9:12:1d:aa:5a:c0:28:12:da:75:1c:41:40: 65:bc:69:75:01:65:94:2a:c9:65:4a:56:b7:fb:81:a7:a9:55: e3:10:e2:7e:be:96:91:53:e1:8d:29:3f:ae:c3:bb:e6:94:55: 2a:be:de:07:f8:40:79:bf:0a:17:a8:4f:fa:2f:c1:c7:25:34: 11:51:71:11:ad:5c:58:a5:17:98:0d:05:c9:9d:3f:7d:1a:a9: 12:34:7d:1f:76:9b:d4:31:6d:62:21:34:d0:39:00:0b:32:04: b4:c9:f0:15:cf:08:ff:a2:45:24:05:29:b4:d1:98:3d:74:3e: 8d:40:06:44:93:9b:f4:7c:ac:86:85:e7:d3:11:c3:8c:1b:b0: c2:5e:5c:78:e5:be:7e:09:e3:f0:c4:d6:c8:68:00:3d:98:e2: 38:07:54:e6:03:63:45:01:2d:ec:40:cc:70:b7:e3:09:08:82: 54:00:8c:c5:cc:03:99:9f:d5:cf:55:cc:e5:1a:91:3e:61:f7: 03:81:f1:7a:72:d0:4f:de:4f:30:cb:4c:c4:36:2c:da:5f:af: 54:68:cb:47:29:92:b0:4f:0b:41:b0:54:d0:ec:1a:b7:16:97: d8:d6:95:e9:3b:89:f9:69:22:c8:16:d7:48:d0:fb:5b:2d:4e: 60:47:b7:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdTxNGpoO/zqfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YTg1MjliMDYtZjNiNy00ZmNlLWJmYmEtYWJmN2VhZWYyYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EceLkeuKnNbs6rTrwVG4CUpRRUXygfjJlax 0FWBaklaaZTrTz3J8Ecao/ZIHrhU4rCVjnHPbw6gk1Q2fTR46+ugfpd8EOE7UbkH CWuV+DYI9sM86Blp0PTHasDFa9IvcKiPtvI5oMX27l3p3MwBqNxEtTK9ZyVxglgh F4ZOHP5sPb1ild0N7JtpXfRcI9I2/WNqVaJKYz1OUFFrH0Dt0OtsYkoo+7ugQrgY dQU5xzyepZ5Jlx6+wGKQiSMngklEfb/XjirV80HgtzGGsU9KrgHlKUUF7xgVxcs4 zya+tBGJHSs9Eg3dpj3rZKN0ZychJPOoQWZXuaxdUVNnQyA5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT5sLDZ5SU8xK2jlWbHJB192JcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjAzNDBhYjctMDk5MS0z MDZmLWIxYWMtZTZlZTdjNTFiNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzoODUyyRIdqlrAKBLadRxBQGW8aXUBZZQqyWVKVrf7gaepVeMQ4n6+ lpFT4Y0pP67Du+aUVSq+3gf4QHm/CheoT/ovwcclNBFRcRGtXFilF5gNBcmdP30a qRI0fR92m9QxbWIhNNA5AAsyBLTJ8BXPCP+iRSQFKbTRmD10Po1ABkSTm/R8rIaF 59MRw4wbsMJeXHjlvn4J4/DE1shoAD2Y4jgHVOYDY0UBLexAzHC34wkIglQAjMXM A5mf1c9VzOUakT5h9wOB8Xpy0E/eTzDLTMQ2LNpfr1Roy0cpkrBPC0GwVNDsGrcW l9jWlek7iflpIsgW10jQ+1stTmBHt9I= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:27 2025 by rpki-client