$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bca41cfa-86b1-3f92-bac8-b1a24e0148a5.roa File: bca41cfa-86b1-3f92-bac8-b1a24e0148a5.roa (raw, json) Hash identifier: HuzajrXrSZaaplLUWBbTrfJ+UvTNl5I+Ga6EwexdvYo= Subject key identifier: 3A:76:A2:3B:C7:7E:32:08:7F:E3:D5:6E:C0:CB:B4:52:41:F8:81:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9B33B67021FCBD8EAF200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bca41cfa-86b1-3f92-bac8-b1a24e0148a5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 96.108.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:b3:3b:67:02:1f:cb:d8:ea:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=63a16952-10f4-4028-938f-564e8a5b7dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:3a:de:07:e4:3f:18:f0:e6:c0:f0:56:86: 1e:f3:4e:be:e4:88:c2:84:f8:bd:94:b1:ca:d9:dc: 8e:f2:43:b4:a7:11:af:50:84:28:36:94:fe:6d:1f: 4b:6a:5c:bf:60:c7:d7:83:90:cc:73:fd:f2:a7:a3: 19:97:f9:2b:3b:48:f3:0f:5f:2f:fb:46:54:01:e2: 79:0a:bf:1e:dd:2d:72:94:db:d3:58:3e:32:5b:0e: 45:2c:1d:35:6b:9c:60:e6:b6:d7:68:cd:a0:87:84: fa:62:1c:b6:b2:40:03:48:c1:a0:7e:51:35:fa:29: 92:38:2c:73:8f:8a:69:74:f0:22:1d:c9:73:af:d4: 82:1c:00:c1:0c:f9:a7:b9:d2:31:b6:bd:08:d5:d9: 18:e6:32:85:b6:0f:51:5e:a4:9a:0a:c4:fc:b9:2a: 00:5d:6e:58:f2:66:b0:18:8d:41:24:45:9c:eb:7c: 3f:7e:a3:fc:13:98:8d:60:2f:7f:0e:5e:92:b7:4e: c6:30:81:87:aa:21:42:82:8d:48:ee:65:20:59:d5: 07:a9:da:fa:1e:4d:64:dc:16:70:a1:7c:31:85:0d: 43:1e:23:3d:d3:6e:88:f4:71:6a:26:95:44:9f:92: 03:1f:bf:91:02:55:0e:cf:55:e6:32:7e:fa:8e:06: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:A2:3B:C7:7E:32:08:7F:E3:D5:6E:C0:CB:B4:52:41:F8:81:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bca41cfa-86b1-3f92-bac8-b1a24e0148a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:01:68:b3:53:f0:90:d0:7c:f4:9c:fb:13:d0:7f:59:71:c4: 89:3f:91:9a:32:c2:e7:10:04:65:61:f2:5d:f4:57:ca:24:22: c0:49:ca:7d:72:73:9b:7d:1e:73:96:da:fc:39:11:b9:a9:82: 93:2b:0e:39:59:bd:d4:92:44:a9:d7:e4:25:e7:82:22:30:68: dd:2f:9a:c7:4b:d5:7a:9e:ac:05:a7:0d:92:9a:69:24:ac:37: 09:ea:b7:bb:06:26:0d:43:a8:3f:8a:46:e9:3a:95:fc:f2:0c: 5a:d3:53:f4:c5:2c:37:7f:f9:82:49:f7:81:25:1b:a9:e4:5c: 38:5b:2b:d7:33:9b:e9:a4:f5:ea:fb:0c:09:64:13:66:dd:7b: 40:0b:de:4b:50:78:ba:e0:c8:58:bc:37:94:6a:ad:25:77:aa: 4b:57:a7:35:47:0d:27:c0:4f:89:5b:8b:75:0a:26:04:78:ce: 09:a8:1d:06:5f:87:a4:db:47:1f:ed:ea:91:4b:95:28:a2:79: ae:bc:01:16:b9:5a:f4:7c:ad:2d:4d:28:37:93:9a:3a:95:46: 3b:75:f3:1d:9c:d6:5d:24:42:ad:78:4f:40:e7:20:ae:14:49: 12:4a:97:0a:88:aa:fd:7f:7b:37:23:ee:99:d9:bb:80:0d:39: 4c:75:21:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ubM7ZwIfy9jq8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjNhMTY5NTItMTBmNC00MDI4LTkzOGYtNTY0ZThhNWI3ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN863gfkPxjw5sDwVoYe806+5IjChPi9lLHK 2dyO8kO0pxGvUIQoNpT+bR9Laly/YMfXg5DMc/3yp6MZl/krO0jzD18v+0ZUAeJ5 Cr8e3S1ylNvTWD4yWw5FLB01a5xg5rbXaM2gh4T6Yhy2skADSMGgflE1+imSOCxz j4ppdPAiHclzr9SCHADBDPmnudIxtr0I1dkY5jKFtg9RXqSaCsT8uSoAXW5Y8maw GI1BJEWc63w/fqP8E5iNYC9/Dl6St07GMIGHqiFCgo1I7mUgWdUHqdr6Hk1k3BZw oXwxhQ1DHiM9026I9HFqJpVEn5IDH7+RAlUOz1XmMn76jgYP1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp2ojvHfjIIf+PVbsDLtFJB+IHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNhNDFjZmEtODZiMS0z ZjkyLWJhYzgtYjFhMjRlMDE0OGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4BaLNT8JDQfPSc+xPQf1lxxIk/kZoywucQBGVh8l30V8okIsBJyn1y c5t9HnOW2vw5EbmpgpMrDjlZvdSSRKnX5CXngiIwaN0vmsdL1XqerAWnDZKaaSSs Nwnqt7sGJg1DqD+KRuk6lfzyDFrTU/TFLDd/+YJJ94ElG6nkXDhbK9czm+mk9er7 DAlkE2bde0AL3ktQeLrgyFi8N5RqrSV3qktXpzVHDSfAT4lbi3UKJgR4zgmoHQZf h6TbRx/t6pFLlSiiea68ARa5WvR8rS1NKDeTmjqVRjt18x2c1l0kQq14T0DnIK4U SRJKlwqIqv1/ezcj7pnZu4ANOUx1IXM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:04 2025 by rpki-client