$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa File: 8af2fb46-8563-309f-9125-ce5d7bfd1527.roa (raw, json) Hash identifier: 4XSF6oXMOd2P69AKHzMr+MRopNPLGqJ60b0fDJEFwRI= Subject key identifier: CE:9F:57:08:45:40:04:D7:A0:CB:A4:51:06:7A:97:9B:C8:9A:12:1B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B07353B6723325338FB4E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 96.1.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:35:3b:67:23:32:53:38:fb:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9f813424-fe4a-4d7d-8363-c4602828eb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:7f:f0:69:67:d7:ff:d9:10:b8:0c:66:a4: bb:dd:dd:8a:ec:8a:f6:32:30:bd:75:4b:3b:a4:fa: 1c:26:59:5f:85:39:c3:12:cf:ff:be:50:be:36:e9: b1:29:d0:99:5e:df:6f:53:c0:d7:05:f1:f3:aa:94: 10:26:b1:fe:aa:ff:7d:59:9f:91:58:06:77:7b:38: 35:d3:60:37:b9:23:f2:8e:ce:74:ff:6b:e4:56:4c: 89:ef:d2:32:77:c4:bf:48:57:1a:3a:82:3d:73:95: c2:ac:92:14:1c:6b:08:fd:75:c6:e7:70:43:4b:5f: 32:42:aa:57:3a:d7:05:3a:08:7b:72:ab:9b:61:97: 3b:70:13:55:cd:a8:9f:f6:c8:e5:a1:86:ad:0e:cc: f7:5b:86:3b:15:7b:6c:6a:3d:f4:3e:ce:90:57:cc: ff:23:fb:fe:17:85:8d:17:90:e9:e0:cd:4d:db:1a: a7:1a:56:9b:36:88:1a:78:b0:ea:95:ab:59:ff:a1: c9:4e:50:17:c5:37:49:10:89:4b:b7:04:d3:3f:ae: af:cb:78:e3:0c:0d:0a:57:05:4b:fd:e7:b0:e6:a3: 7d:0b:e0:66:c4:7f:85:fc:bb:13:86:a1:6f:54:14: ce:92:37:a0:88:4c:3c:f6:5c:d9:c1:7a:f4:ad:c0: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9F:57:08:45:40:04:D7:A0:CB:A4:51:06:7A:97:9B:C8:9A:12:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8af2fb46-8563-309f-9125-ce5d7bfd1527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 96.1.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:77:58:56:88:ed:e7:c6:0e:6e:fb:2e:96:e2:69:8f:8f: 09:2e:72:38:51:39:cd:c0:62:1e:19:3f:81:ce:fb:08:2d:cd: 73:7a:09:b1:59:6d:ab:77:74:75:a8:5e:0a:ac:d7:ff:3c:51: ce:55:78:e5:13:39:be:69:83:1e:a2:1e:d1:82:51:56:d8:a7: a4:a0:bb:56:8b:ce:6d:8a:b2:56:28:5c:ed:89:42:a9:c4:c0: d2:f8:25:58:b4:d9:d6:9b:8d:f3:a6:8e:d1:c8:4f:9e:e2:d3: 0a:5a:48:66:be:80:a9:15:bb:56:23:65:01:10:40:67:53:f5: 15:be:9d:c9:00:43:42:d1:1a:27:c9:20:3f:25:8b:52:71:e4: 1e:64:bb:1a:2b:6e:5b:dd:a9:44:97:c3:97:2b:54:cf:75:46: c6:77:4d:43:31:b6:0c:34:14:6a:4e:6f:c6:5f:bb:7a:01:ed: f0:e0:8a:4b:66:8e:f5:76:8f:9d:e6:87:28:52:84:e5:76:a0: 90:b6:87:8b:64:84:06:23:43:34:2b:49:3c:74:c0:15:09:f0: 68:e7:8e:69:8a:07:6c:ce:44:47:ab:66:8a:87:0c:e6:48:f5: d2:9d:71:9b:58:c3:e1:d7:f7:db:9f:2f:5f:82:05:67:91:b1: 24:56:c5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzU7ZyMyUzj7TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWY4MTM0MjQtZmU0YS00ZDdkLTgzNjMtYzQ2MDI4MjhlYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5/8Gln1//ZELgMZqS73d2K7Ir2MjC9dUs7 pPocJllfhTnDEs//vlC+NumxKdCZXt9vU8DXBfHzqpQQJrH+qv99WZ+RWAZ3ezg1 02A3uSPyjs50/2vkVkyJ79Iyd8S/SFcaOoI9c5XCrJIUHGsI/XXG53BDS18yQqpX OtcFOgh7cqubYZc7cBNVzaif9sjloYatDsz3W4Y7FXtsaj30Ps6QV8z/I/v+F4WN F5Dp4M1N2xqnGlabNogaeLDqlatZ/6HJTlAXxTdJEIlLtwTTP66vy3jjDA0KVwVL /eew5qN9C+BmxH+F/LsThqFvVBTOkjegiEw89lzZwXr0rcDWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6fVwhFQATXoMukUQZ6l5vImhIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGFmMmZiNDYtODU2My0z MDlmLTkxMjUtY2U1ZDdiZmQxNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt3d1hWiO3nxg5u+y6W4mmPjwkucjhROc3AYh4ZP4HO+wgtzXN6CbFZ bat3dHWoXgqs1/88Uc5VeOUTOb5pgx6iHtGCUVbYp6Sgu1aLzm2KslYoXO2JQqnE wNL4JVi02dabjfOmjtHIT57i0wpaSGa+gKkVu1YjZQEQQGdT9RW+nckAQ0LRGifJ ID8li1Jx5B5kuxorblvdqUSXw5crVM91RsZ3TUMxtgw0FGpOb8Zfu3oB7fDgiktm jvV2j53mhyhShOV2oJC2h4tkhAYjQzQrSTx0wBUJ8GjnjmmKB2zOREerZoqHDOZI 9dKdcZtYw+HX99ufL1+CBWeRsSRWxQ0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:46:19 2025 by rpki-client