$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa File: 96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa (raw, json) Hash identifier: OIX1O7IvObA9uDE3xPiu9ilrnULb9vwl3S6G/W0nYv8= Subject key identifier: 69:FF:EC:A8:2D:7B:28:EE:E3:93:82:5E:97:77:DD:62:CA:55:73:B0 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584B20C0F0697F3456B37CBE3700 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa Signing time: Mon 08 Sep 2025 16:02:19 +0000 ROA not before: Mon 08 Sep 2025 16:02:19 +0000 ROA not after: Sun 07 Dec 2025 17:02:19 +0000 asID: 10111 IP address blocks: 174.136.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:c0:f0:69:7f:34:56:b3:7c:be:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Sep 8 16:02:19 2025 GMT Not After : Dec 7 17:02:19 2025 GMT Subject: CN=224be6d7-e321-41e8-bef9-a75f8ccba154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:44:6d:aa:e8:98:52:fe:ca:3a:7b:a1:3d: 8a:fe:3b:d2:a1:5d:87:7f:26:3c:92:22:7f:f4:42: c5:69:7d:cb:83:38:55:03:f1:00:70:07:20:1c:24: 78:bc:34:40:42:a3:97:00:af:d6:68:64:62:e0:c7: b4:e5:23:22:80:9c:0b:da:5a:da:be:9d:81:bb:76: d4:a6:9d:32:af:34:b5:13:2e:7c:65:43:0e:ee:e0: ed:a4:cc:b3:3a:8c:8f:dc:12:d7:3e:b3:76:e6:5b: 32:d4:18:7c:c9:02:a1:0e:59:3c:5c:0e:54:b7:50: 48:0d:b4:4b:c7:72:ef:cf:bb:09:f7:ad:01:a1:9d: 0a:4d:e7:4c:20:0f:1e:3a:86:a0:1b:72:41:91:58: a5:85:5a:d4:99:b9:da:1d:98:64:63:fc:d9:5e:4d: 72:6d:d7:0b:b0:e3:d6:02:bc:18:67:e8:9c:74:4e: 22:40:be:39:25:1f:44:16:d9:9c:55:85:70:62:b0: 78:fc:88:9d:2c:9a:b1:2d:5f:b4:27:96:1f:a4:40: 8e:12:a2:d9:4f:39:95:44:5c:2f:14:90:8c:67:47: 9b:de:e1:b7:18:0c:c5:d7:de:5f:da:33:0e:02:50: ee:b5:2a:14:c9:17:29:49:2a:ae:04:b5:17:d8:5c: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:EC:A8:2D:7B:28:EE:E3:93:82:5E:97:77:DD:62:CA:55:73:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:fa:12:16:75:34:d8:0a:7c:ce:6e:df:74:6d:72:56:4c: 61:12:5e:ed:41:c9:f3:14:96:9d:c1:44:55:5a:72:73:0b:08: d6:bb:40:5e:b9:54:6e:25:09:cf:8d:81:13:e5:ca:e1:c5:18: e8:5e:64:23:a5:0c:cb:40:ad:ef:3c:e6:4e:58:71:9f:25:05: 86:f7:26:5b:aa:e3:c0:53:f0:1a:1f:0a:e5:2e:02:b7:18:1d: 61:0e:98:f9:d4:12:aa:66:24:47:6a:20:e5:7b:e7:88:44:40: 92:b2:97:4d:33:bd:3c:94:74:e6:93:25:c3:43:48:52:34:e3: d9:a7:1b:3f:86:e8:d7:13:c2:7a:21:9a:2f:72:49:f0:67:32: 3d:8d:d5:7c:4b:41:1e:86:04:93:70:7d:d1:8b:8c:c8:19:a4: 17:ec:f8:43:50:99:c6:19:6a:d9:f8:2c:e3:e2:df:c1:47:6a: 06:84:0d:4a:cc:98:f1:fb:27:9a:57:70:5a:f5:b5:3a:92:57: 25:73:a9:ec:d0:ce:01:02:3f:5a:b8:94:da:8f:3b:e2:9b:d4: 9d:32:6b:01:f3:58:3f:43:cd:cf:03:0e:ef:fc:00:41:8f:35: 4b:d5:97:1b:78:4b:0d:53:52:ec:b1:23:b1:68:44:1c:da:93: 4f:0a:80:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgwPBpfzRWs3y+NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDkwODE2MDIxOVoXDTI1MTIwNzE3MDIxOVowLzEtMCsGA1UEAxMk MjI0YmU2ZDctZTMyMS00MWU4LWJlZjktYTc1ZjhjY2JhMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzFEbaromFL+yjp7oT2K/jvSoV2HfyY8kiJ/ 9ELFaX3LgzhVA/EAcAcgHCR4vDRAQqOXAK/WaGRi4Me05SMigJwL2lravp2Bu3bU pp0yrzS1Ey58ZUMO7uDtpMyzOoyP3BLXPrN25lsy1Bh8yQKhDlk8XA5Ut1BIDbRL x3Lvz7sJ960BoZ0KTedMIA8eOoagG3JBkVilhVrUmbnaHZhkY/zZXk1ybdcLsOPW ArwYZ+icdE4iQL45JR9EFtmcVYVwYrB4/IidLJqxLV+0J5YfpECOEqLZTzmVRFwv FJCMZ0eb3uG3GAzF195f2jMOAlDutSoUyRcpSSquBLUX2FwRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn/7Kgteyju45OCXpd33WLKVXOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvOTZlOTc2YjktZjEwNC0z ZTdhLWJkMTMtNDVhMGRmNGMzYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6h+hIWdTTYCnzObt90bXJWTGESXu1ByfMUlp3BRFVacnMLCNa7QF65 VG4lCc+NgRPlyuHFGOheZCOlDMtAre885k5YcZ8lBYb3Jluq48BT8BofCuUuArcY HWEOmPnUEqpmJEdqIOV754hEQJKyl00zvTyUdOaTJcNDSFI049mnGz+G6NcTwnoh mi9ySfBnMj2N1XxLQR6GBJNwfdGLjMgZpBfs+ENQmcYZatn4LOPi38FHagaEDUrM mPH7J5pXcFr1tTqSVyVzqezQzgECP1q4lNqPO+Kb1J0yawHzWD9Dzc8DDu/8AEGP NUvVlxt4Sw1TUuyxI7FoRBzak08KgGw= -----END CERTIFICATE-----Generated at Mon Oct 20 01:55:25 2025 by rpki-client