$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee29ae31-9e6a-30f4-9676-18759ff7fc33.roa File: ee29ae31-9e6a-30f4-9676-18759ff7fc33.roa (raw, json) Hash identifier: oC+yDiTEkW/AYtCOHJ064DptDroJiER7oBLqkMiV3O0= Subject key identifier: B3:B5:44:96:96:6B:BC:8F:BB:F0:BB:8E:E8:4E:14:0A:A0:86:C4:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB786DF00F155F73392F770 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee29ae31-9e6a-30f4-9676-18759ff7fc33.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22258 IP address blocks: 96.110.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:86:df:00:f1:55:f7:33:92:f7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=04422b99-2ad6-46d4-be0c-db4adb53ebbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:ab:60:4a:45:a5:fd:49:51:7d:3a:f0:5b: ad:24:93:76:a7:4b:7d:1e:92:b8:fe:81:86:4a:4c: a0:c2:51:d2:84:dd:bf:8c:b6:9e:c5:f2:d2:26:e3: 10:bf:22:1f:a3:1e:9d:58:6c:37:8c:c2:aa:c8:69: fd:d9:3e:02:e3:c3:1b:02:c3:b1:ed:60:ba:32:18: 7c:d0:87:bd:8b:8e:ef:6c:ec:b5:78:e3:fe:6d:95: ed:54:56:4e:59:17:f3:55:a6:27:f8:f4:fe:b9:73: 13:71:c6:23:91:f3:20:bd:a4:3a:c8:47:36:ed:71: 11:67:08:b8:b8:54:09:bb:8c:b0:f6:64:13:38:f3: 44:ed:15:09:d2:d7:50:9c:9a:ad:e4:89:66:89:8d: ec:53:5a:14:54:26:ec:5b:d6:7e:93:09:61:af:c6: 90:6c:b4:b4:ca:ad:85:4e:aa:38:7a:70:57:a4:a4: 20:2c:81:b8:30:24:5a:6b:f8:43:c8:60:4c:05:f7: 27:9b:f0:5e:51:2a:12:40:1b:14:c0:d1:79:b6:58: 47:df:e1:9a:af:7e:d1:09:f9:3f:b9:8b:63:b8:19: ac:74:6b:f9:8d:67:d0:46:29:c4:b8:d0:95:11:0b: d2:e9:0f:81:5c:59:e0:29:fd:e6:61:3c:b2:cd:35: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:44:96:96:6B:BC:8F:BB:F0:BB:8E:E8:4E:14:0A:A0:86:C4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee29ae31-9e6a-30f4-9676-18759ff7fc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.110.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d0:4d:90:a1:b5:c7:5a:9a:e3:03:04:f7:56:93:86:23:72: 04:8c:59:81:27:70:fb:39:c1:bc:cb:49:78:17:52:11:c6:2b: 2a:43:0f:d7:22:34:dd:1d:ee:02:ab:a1:1c:1b:2e:61:84:9e: ed:d3:19:f5:a6:19:3a:5f:00:32:dd:17:1f:43:13:c1:df:d6: 88:a1:3b:f8:00:a0:3e:12:0d:b6:0f:39:a3:54:8f:04:5b:63: e8:5f:37:da:1b:52:68:36:4c:14:c7:6a:ea:69:cc:66:37:1a: 2b:b1:55:e9:49:2c:6f:21:41:24:59:60:01:7e:1b:80:75:08: 7a:da:bb:46:56:03:0e:9d:a4:f1:49:1b:9f:38:aa:01:12:36: 5a:ac:75:9f:01:35:38:cf:31:43:ea:89:32:83:e3:f4:a7:9d: cc:fd:4e:e4:8c:9c:06:0e:09:fa:df:ee:aa:02:a4:2f:f4:66: 1d:8b:5b:0c:0f:fa:8d:0b:fe:ac:29:4f:9b:b4:df:cf:62:9a: ac:ee:0e:36:d0:7d:c8:dd:8e:2d:5a:46:a7:f6:d0:d7:56:66: 41:b1:c7:25:a5:98:3a:73:66:91:dc:51:38:aa:b8:9a:f8:1c: 94:0b:7e:7a:7b:0a:4f:13:b2:43:82:ed:9e:57:70:16:ab:f3: 30:cb:ff:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t4bfAPFV9zOS93AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDQ0MjJiOTktMmFkNi00NmQ0LWJlMGMtZGI0YWRiNTNlYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjirYEpFpf1JUX068FutJJN2p0t9HpK4/oGG SkygwlHShN2/jLaexfLSJuMQvyIfox6dWGw3jMKqyGn92T4C48MbAsOx7WC6Mhh8 0Ie9i47vbOy1eOP+bZXtVFZOWRfzVaYn+PT+uXMTccYjkfMgvaQ6yEc27XERZwi4 uFQJu4yw9mQTOPNE7RUJ0tdQnJqt5IlmiY3sU1oUVCbsW9Z+kwlhr8aQbLS0yq2F Tqo4enBXpKQgLIG4MCRaa/hDyGBMBfcnm/BeUSoSQBsUwNF5tlhH3+Gar37RCfk/ uYtjuBmsdGv5jWfQRinEuNCVEQvS6Q+BXFngKf3mYTyyzTWDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO1RJaWa7yPu/C7juhOFAqghsRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWUyOWFlMzEtOWU2YS0z MGY0LTk2NzYtMTg3NTlmZjdmYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbQTZChtcdamuMDBPdWk4YjcgSMWYEncPs5wbzLSXgXUhHGKypDD9ci NN0d7gKroRwbLmGEnu3TGfWmGTpfADLdFx9DE8Hf1oihO/gAoD4SDbYPOaNUjwRb Y+hfN9obUmg2TBTHauppzGY3GiuxVelJLG8hQSRZYAF+G4B1CHrau0ZWAw6dpPFJ G584qgESNlqsdZ8BNTjPMUPqiTKD4/Snncz9TuSMnAYOCfrf7qoCpC/0Zh2LWwwP +o0L/qwpT5u0389imqzuDjbQfcjdji1aRqf20NdWZkGxxyWlmDpzZpHcUTiquJr4 HJQLfnp7Ck8TskOC7Z5XcBar8zDL/+g= -----END CERTIFICATE-----Generated at Mon Oct 20 10:04:32 2025 by rpki-client