$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa File: df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa (raw, json) Hash identifier: 5sCZBZ2XA51raV7EYFWx0Of0AeR+zFRtZ3M5OceCaUM= Subject key identifier: A4:5B:67:25:ED:3B:3D:13:0B:D9:8F:AC:55:0C:44:A1:C5:36:95:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB92758BD3407E39791CC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33490 IP address blocks: 96.124.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:27:58:bd:34:07:e3:97:91:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=503c155b-c69d-420a-9deb-a4ea517ebebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:d2:1b:f0:a8:7d:59:89:0d:0b:ed:fe:14: f0:5b:cd:b3:df:63:07:3b:b0:5b:53:5e:8c:3c:a7: 0e:a1:f6:f5:15:da:5d:1b:4e:4d:6e:d1:10:9f:00: 98:4b:9d:e1:00:bd:64:35:1f:4a:ec:7c:40:7e:64: 5e:94:46:12:85:f1:03:ab:d7:65:4a:c3:3a:72:bc: ea:0f:03:1c:c8:78:28:c0:3b:b4:8a:5f:c8:3c:ff: cf:9c:2e:01:bb:92:49:00:15:95:a0:ca:a1:f2:46: 00:dc:ea:de:96:2d:90:83:bd:47:67:21:09:b5:fb: 40:f3:ea:e7:01:87:6e:78:52:45:b5:4b:a7:a8:ca: ad:79:75:57:09:00:c3:95:2c:aa:19:2d:10:61:42: a7:a3:6d:8b:e6:68:9b:f4:30:f3:05:52:c7:cd:4e: ca:5d:11:48:10:ab:05:f2:f8:e6:90:a7:af:5f:6c: e6:d5:9b:e8:10:59:8a:1a:73:fe:92:26:28:9a:88: 06:94:13:a8:85:3b:fa:d1:31:61:4c:89:83:99:12: ac:fd:19:31:c9:c6:80:84:5b:b0:45:a6:53:64:54: 96:fc:77:09:57:f4:c5:59:af:65:1c:e5:ff:76:17: 5b:4a:0c:33:64:c4:4f:79:b3:aa:f4:32:fe:e8:a3: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5B:67:25:ED:3B:3D:13:0B:D9:8F:AC:55:0C:44:A1:C5:36:95:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:f3:57:25:3b:9a:68:70:4b:11:43:1b:2a:5f:fa:4e:8d:e1: b9:0c:62:d8:3f:1e:6c:d1:b0:3a:4e:db:e0:ca:8d:87:b7:7b: 78:6c:a3:bc:b6:ad:b7:f0:68:4d:e4:d3:d3:ed:eb:8f:a0:8a: e3:bc:95:dd:5c:bf:85:03:ca:aa:dd:35:f9:17:57:bf:ad:c8: ca:c3:d8:bd:c2:f6:34:51:d2:5e:f7:81:fd:30:bb:48:ed:9e: 65:6e:fa:af:09:0d:d8:48:1f:1e:58:59:a4:84:e9:db:3c:24: 35:95:43:ba:64:28:7d:d7:bd:85:60:de:e1:5e:39:3a:18:a9: b4:0a:07:73:de:9c:14:3d:51:65:cc:e7:be:c9:6b:8d:de:7f: 39:4c:a7:05:9e:fc:59:02:fc:b7:86:b6:9e:0e:14:df:65:04: a1:ce:51:1c:f7:f8:5b:bf:ad:d4:5e:12:37:13:22:5d:de:0f: 3b:86:c7:48:65:04:3b:c3:32:4d:ef:fe:c1:47:05:05:88:a0: 7f:61:3f:61:44:d8:75:77:61:f5:49:48:f1:7b:49:72:04:64: 1b:3d:46:7e:b5:fe:b4:ed:c0:4e:08:e9:29:51:95:f2:e9:43: 2a:98:38:5d:f9:19:95:5e:e6:ac:ad:3d:9a:95:46:87:1c:b0: ee:5b:cf:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSdYvTQH45eRzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTAzYzE1NWItYzY5ZC00MjBhLTlkZWItYTRlYTUxN2ViZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDLSG/CofVmJDQvt/hTwW82z32MHO7BbU16M PKcOofb1FdpdG05NbtEQnwCYS53hAL1kNR9K7HxAfmRelEYShfEDq9dlSsM6crzq DwMcyHgowDu0il/IPP/PnC4Bu5JJABWVoMqh8kYA3Oreli2Qg71HZyEJtftA8+rn AYdueFJFtUunqMqteXVXCQDDlSyqGS0QYUKno22L5mib9DDzBVLHzU7KXRFIEKsF 8vjmkKevX2zm1ZvoEFmKGnP+kiYomogGlBOohTv60TFhTImDmRKs/RkxycaAhFuw RaZTZFSW/HcJV/TFWa9lHOX/dhdbSgwzZMRPebOq9DL+6KMQlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRbZyXtOz0TC9mPrFUMRKHFNpV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4ZmU2NmItZTJjOC0z YzgxLTkxOTItYzNlNTI4ZDJjMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXzVyU7mmhwSxFDGypf+k6N4bkMYtg/HmzRsDpO2+DKjYe3e3hso7y2 rbfwaE3k09Pt64+giuO8ld1cv4UDyqrdNfkXV7+tyMrD2L3C9jRR0l73gf0wu0jt nmVu+q8JDdhIHx5YWaSE6ds8JDWVQ7pkKH3XvYVg3uFeOToYqbQKB3PenBQ9UWXM 577Ja43efzlMpwWe/FkC/LeGtp4OFN9lBKHOURz3+Fu/rdReEjcTIl3eDzuGx0hl BDvDMk3v/sFHBQWIoH9hP2FE2HV3YfVJSPF7SXIEZBs9Rn61/rTtwE4I6SlRlfLp QyqYOF35GZVe5qytPZqVRoccsO5bz7s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:36 2025 by rpki-client