$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5fc4dab-08a8-39db-87b1-9b16c6032892.roa File: f5fc4dab-08a8-39db-87b1-9b16c6032892.roa (raw, json) Hash identifier: 4Fh4Ese4cnz9SkmQdVJQen/BrIwsFRJiqLn+kBIL8Vw= Subject key identifier: E6:8F:9E:1E:0E:A9:B5:D4:B0:CD:5E:F4:A0:13:D4:92:4B:26:09:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9546AD6D2F69059CF4E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5fc4dab-08a8-39db-87b1-9b16c6032892.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 96.109.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:54:6a:d6:d2:f6:90:59:cf:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=64c3010d-fecc-477f-ad4d-7876c8d1df1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:7f:52:61:8b:1e:37:09:11:e3:51:3c:f7: 93:03:c1:f7:22:b4:67:7e:62:96:34:90:68:30:de: b4:8e:2c:c1:a1:bb:f5:d1:b0:44:19:f8:32:98:f3: be:35:c2:2a:3f:f1:e4:e5:cd:84:89:09:a8:ed:31: 38:2a:22:4c:c7:3c:76:72:0e:c8:df:21:33:7d:a1: 0c:d4:68:cf:94:24:52:ac:ef:77:62:20:f6:13:36: a2:9e:66:82:22:c3:17:26:32:3e:ab:90:fc:25:89: f3:86:22:41:6b:12:97:a2:27:aa:20:fe:07:75:75: 69:f6:4b:02:af:b0:8d:3a:cc:90:b3:99:78:4d:23: 6c:67:9d:3d:8b:82:62:c4:21:0f:3e:d9:18:f0:61: 09:7f:e8:8b:2c:df:67:5f:7b:6c:0e:1d:95:f6:b3: 62:e8:60:82:6a:d5:a3:4f:6f:81:14:15:17:07:fe: d0:8f:4e:d2:73:41:a6:cc:61:56:23:91:ae:aa:a3: 4c:40:de:d9:e8:71:ed:87:52:ad:9c:b7:30:f6:b7: 70:a4:28:f5:68:03:c7:4d:13:83:25:85:a4:13:0d: e1:27:d6:63:9f:9b:f7:c3:f1:14:0a:7f:8a:8b:27: f3:59:b0:5e:9e:cd:05:0c:69:a2:26:98:bc:44:e0: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:9E:1E:0E:A9:B5:D4:B0:CD:5E:F4:A0:13:D4:92:4B:26:09:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5fc4dab-08a8-39db-87b1-9b16c6032892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0f:17:07:ea:c7:ef:0b:ab:c1:47:3e:9e:d6:27:59:3f:88: b6:e9:83:fa:61:f0:71:a2:bf:da:c6:14:11:f9:22:01:d7:35: 25:b5:9c:8c:60:4a:1b:70:60:59:25:e1:fd:2c:f4:06:93:d8: 3d:e5:84:1a:43:ca:50:7c:69:4c:c5:8b:86:c1:ef:bc:89:63: 2f:0c:cb:af:b3:3e:02:d5:7b:31:58:2e:5b:61:8d:97:bb:b7: fa:f0:3e:b4:bd:eb:73:75:fb:d7:e1:0f:69:da:b8:b3:a2:8f: b0:e6:4e:df:15:a2:19:64:3f:8d:6d:56:d0:cb:1c:de:94:03: a8:98:36:15:96:1c:2d:e9:3a:b6:d1:88:91:0a:f3:a7:b1:82: 68:a8:73:2d:0e:bf:ed:db:b6:c5:5e:c0:ff:5d:e3:9e:1d:7a: 3c:85:3a:bf:c8:a8:e2:88:e9:7e:54:1a:81:ab:f4:e7:ac:60: ae:9a:d8:cb:43:13:44:ca:67:99:50:79:59:0a:c3:41:15:e7: 2f:20:2d:8a:a2:cc:5d:45:4d:a9:52:d0:0b:4b:54:e0:eb:89: 8d:9f:30:cb:28:62:43:cb:b8:ec:04:d8:df:e9:e5:62:9b:c2: 00:60:cf:58:4d:f6:b0:f0:d3:6d:de:d2:99:7c:6b:a7:50:fe: 64:8b:e4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uVRq1tL2kFnPTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjRjMzAxMGQtZmVjYy00NzdmLWFkNGQtNzg3NmM4ZDFkZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV1/UmGLHjcJEeNRPPeTA8H3IrRnfmKWNJBo MN60jizBobv10bBEGfgymPO+NcIqP/Hk5c2EiQmo7TE4KiJMxzx2cg7I3yEzfaEM 1GjPlCRSrO93YiD2EzainmaCIsMXJjI+q5D8JYnzhiJBaxKXoieqIP4HdXVp9ksC r7CNOsyQs5l4TSNsZ509i4JixCEPPtkY8GEJf+iLLN9nX3tsDh2V9rNi6GCCatWj T2+BFBUXB/7Qj07Sc0GmzGFWI5GuqqNMQN7Z6HHth1KtnLcw9rdwpCj1aAPHTROD JYWkEw3hJ9Zjn5v3w/EUCn+KiyfzWbBens0FDGmiJpi8ROB0bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaPnh4OqbXUsM1e9KAT1JJLJgnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjVmYzRkYWItMDhhOC0z OWRiLTg3YjEtOWIxNmM2MDMyODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8PFwfqx+8Lq8FHPp7WJ1k/iLbpg/ph8HGiv9rGFBH5IgHXNSW1nIxg ShtwYFkl4f0s9AaT2D3lhBpDylB8aUzFi4bB77yJYy8My6+zPgLVezFYLlthjZe7 t/rwPrS963N1+9fhD2nauLOij7DmTt8VohlkP41tVtDLHN6UA6iYNhWWHC3pOrbR iJEK86exgmiocy0Ov+3btsVewP9d454dejyFOr/IqOKI6X5UGoGr9OesYK6a2MtD E0TKZ5lQeVkKw0EV5y8gLYqizF1FTalS0AtLVODriY2fMMsoYkPLuOwE2N/p5WKb wgBgz1hN9rDw023e0pl8a6dQ/mSL5PQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:46 2025 by rpki-client