$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b0b784-1f11-3a06-ad52-009412cfd1e1.roa File: e9b0b784-1f11-3a06-ad52-009412cfd1e1.roa (raw, json) Hash identifier: Ry4nRTGg6l+UZJ/3ZZHXAhjjee8NVZA0Qm/9sDpEw7Q= Subject key identifier: A1:51:E6:7F:D6:10:23:BA:96:53:4F:AC:AE:FF:A1:AE:87:7F:FB:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9C8B5EE40261A953D5580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b0b784-1f11-3a06-ad52-009412cfd1e1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 96.112.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:c8:b5:ee:40:26:1a:95:3d:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=87b9b540-1a3e-492c-81ae-51934026b27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:62:55:52:59:ee:ec:e7:a9:0d:e0:dd:ae: 46:a9:20:5c:9d:9a:a7:87:2d:35:4c:fa:d2:44:d3: 1f:f3:74:fa:ec:5a:74:c3:79:91:ac:5f:e6:55:0e: 86:bb:17:29:aa:c5:44:98:14:09:45:91:f1:9d:8a: 7b:a0:cd:0e:3f:df:73:0f:23:f2:74:6d:34:79:8b: 83:05:44:c0:f0:21:ce:1f:14:bb:66:f0:03:78:01: 81:68:2c:d9:fe:9a:8b:48:17:b7:32:7b:50:08:e9: 50:dd:00:0c:8d:17:7a:ff:b8:40:eb:15:07:ee:d3: 09:b6:e8:3f:1e:3e:38:dc:6b:54:88:fa:ae:fd:9a: 97:f0:1d:70:05:5a:82:04:f3:a8:79:e3:b9:80:26: 33:e4:f9:4d:b3:12:1d:86:21:d3:df:c1:d8:d9:63: fc:9a:83:f3:3e:16:40:59:26:d1:3e:64:61:1c:e9: f7:42:06:2b:43:df:81:40:29:a9:b2:93:c9:6c:0a: 08:2a:72:ce:1a:9d:b6:50:5f:37:79:e6:b5:c4:ee: b8:7c:f3:9d:fd:2f:3f:73:77:63:da:f9:b3:85:64: 5a:29:88:50:8c:df:1d:a3:e8:c4:4d:43:25:83:dd: 47:61:b4:3c:54:2c:44:62:eb:4d:78:4c:35:93:ca: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:51:E6:7F:D6:10:23:BA:96:53:4F:AC:AE:FF:A1:AE:87:7F:FB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b0b784-1f11-3a06-ad52-009412cfd1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.112.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:22:86:8e:25:6c:5c:3b:95:ee:ea:c5:65:84:29:44:ad:3d: 93:35:2e:9c:fe:be:4e:59:b9:49:7b:32:17:11:60:7a:7f:2d: ca:eb:df:52:0e:c0:63:ff:f8:c3:4c:fc:9d:52:02:5c:7c:f0: 22:62:55:e6:87:8a:19:70:3f:e6:d4:bf:7a:76:50:6f:7f:0b: 8e:f8:76:71:b9:2c:86:ec:cd:6c:60:d8:09:8c:ef:c0:e4:bb: c0:a5:28:23:a6:86:c9:b4:8d:6d:d8:0e:25:e7:5c:ee:58:aa: 6d:78:29:39:b9:81:0e:76:58:96:8e:1b:18:e9:7f:88:4d:c6: 77:0e:2c:97:9a:63:f9:ec:c0:6c:98:ee:86:a5:bc:17:99:41: 34:0e:8c:cf:13:85:fb:88:46:b3:77:be:10:f0:05:e6:93:e6: 2f:11:16:21:bb:be:5c:12:c0:c6:32:70:c6:18:d8:2e:68:06: 71:c0:54:60:44:7d:4c:3a:5b:9f:45:03:ca:df:b3:2e:6d:22: 92:0d:22:11:1a:5e:23:e5:a1:a0:a6:a5:0c:a6:a1:ca:a7:82: 1a:bd:c4:80:24:b7:dc:f6:6d:53:c9:d3:cc:44:c6:90:30:57: fa:1b:e2:b7:7b:f5:d7:03:c7:ce:fb:03:68:36:f5:e8:b9:64: 03:ca:0c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uci17kAmGpU9VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODdiOWI1NDAtMWEzZS00OTJjLTgxYWUtNTE5MzQwMjZiMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvRiVVJZ7uznqQ3g3a5GqSBcnZqnhy01TPrS RNMf83T67Fp0w3mRrF/mVQ6GuxcpqsVEmBQJRZHxnYp7oM0OP99zDyPydG00eYuD BUTA8CHOHxS7ZvADeAGBaCzZ/pqLSBe3MntQCOlQ3QAMjRd6/7hA6xUH7tMJtug/ Hj443GtUiPqu/ZqX8B1wBVqCBPOoeeO5gCYz5PlNsxIdhiHT38HY2WP8moPzPhZA WSbRPmRhHOn3QgYrQ9+BQCmpspPJbAoIKnLOGp22UF83eea1xO64fPOd/S8/c3dj 2vmzhWRaKYhQjN8do+jETUMlg91HYbQ8VCxEYutNeEw1k8pP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFR5n/WECO6llNPrK7/oa6Hf/sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTliMGI3ODQtMWYxMS0z YTA2LWFkNTItMDA5NDEyY2ZkMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQiho4lbFw7le7qxWWEKUStPZM1Lpz+vk5ZuUl7MhcRYHp/Lcrr31IO wGP/+MNM/J1SAlx88CJiVeaHihlwP+bUv3p2UG9/C474dnG5LIbszWxg2AmM78Dk u8ClKCOmhsm0jW3YDiXnXO5Yqm14KTm5gQ52WJaOGxjpf4hNxncOLJeaY/nswGyY 7oalvBeZQTQOjM8ThfuIRrN3vhDwBeaT5i8RFiG7vlwSwMYycMYY2C5oBnHAVGBE fUw6W59FA8rfsy5tIpINIhEaXiPloaCmpQymocqnghq9xIAkt9z2bVPJ08xExpAw V/ob4rd79dcDx877A2g29ei5ZAPKDEA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:31:24 2025 by rpki-client