$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa File: abf67299-9e87-34a9-9b48-9475fd549597.roa (raw, json) Hash identifier: Xplax0vrvJ7Ay75PaCfC7M8+ltuaZu+rfxIXFZsvgag= Subject key identifier: D6:19:93:99:04:4A:F4:59:78:9A:BE:41:7D:5D:3B:9F:F7:84:4C:F6 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584B79BCB53F24BB25514B1B4280 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 398143 IP address blocks: 96.46.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:3f:24:bb:25:51:4b:1b:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=49790d0d-3ec0-42a2-b68f-c0842c94763d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:21:33:4f:de:c5:e9:b3:78:7b:8c:30:05: 1d:58:37:8a:9d:c8:5e:3e:3b:c5:36:e0:c1:cf:7e: f6:cc:66:a7:5d:44:f4:84:84:1b:19:f5:2a:a0:87: 92:99:43:34:76:81:0a:cf:ba:a2:8a:e5:eb:48:a5: 73:c5:30:3d:a8:9d:fc:1f:76:bf:d4:5b:3c:81:68: 72:15:ee:07:b2:1c:8b:03:50:a4:47:cd:ad:fe:01: 57:a6:82:5f:01:45:0c:e9:28:95:2a:1e:c1:32:28: 46:24:59:75:19:02:fb:4d:04:13:bb:d5:25:f2:2a: 66:5c:93:81:aa:93:a5:ce:a8:62:42:33:04:8f:80: 9d:17:6a:ff:a1:b3:b4:2f:0b:63:ca:ab:67:67:9e: 6c:ee:02:1e:6a:0f:1d:70:62:0b:5f:9c:2c:07:5e: a8:ac:77:2e:19:5e:c8:72:58:bc:2d:28:97:da:94: 76:d9:c1:8f:9e:44:01:f0:a5:65:14:28:12:eb:4a: 76:ca:07:ac:f9:f8:42:11:cb:19:0e:ca:20:1a:11: e3:c6:c1:25:c9:c9:b2:3b:a5:c2:8d:c3:42:5c:f0: b9:36:fa:e3:2e:70:13:5a:7f:8a:4a:27:09:5f:c6: 53:f5:29:7f:46:4b:c2:46:e0:b6:44:db:b4:a6:92: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:19:93:99:04:4A:F4:59:78:9A:BE:41:7D:5D:3B:9F:F7:84:4C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 96.46.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ae:9b:3c:f9:a3:b9:23:9d:96:9f:c6:96:9a:83:7c:71:a5: e1:f8:10:2c:41:0e:14:17:58:9f:22:3f:8a:e7:d1:d0:f7:53: 49:78:b2:80:49:90:19:15:18:07:6e:c3:0c:07:ab:57:4e:29: ef:7c:30:44:32:b4:95:84:45:42:a7:66:d5:a4:0d:46:e6:b4: 24:7a:ad:c2:10:57:13:63:44:88:14:ef:e4:cf:d0:e3:87:17: 63:a1:19:84:78:e5:26:13:70:63:d9:da:b6:cb:94:6d:f8:6f: 68:d8:db:6f:09:dc:9a:84:85:00:e7:36:61:3f:dd:70:da:10: 55:9a:d8:1b:4e:57:97:59:42:e7:8b:73:48:24:63:61:9f:05: 65:e3:48:93:ec:f2:d9:f9:9b:6c:4c:34:a9:36:fb:6d:dc:1b: 66:ec:2a:ee:47:f7:40:2c:ab:6c:0c:4c:63:b8:04:80:1c:5f: d8:29:83:2e:4e:fa:31:38:ec:db:ce:c7:ed:83:53:36:3b:10: c4:75:f5:58:5e:76:bb:3f:00:88:ef:1b:29:1d:f0:d5:75:94: 23:bb:a4:7a:b0:4a:3d:1b:9e:d8:52:de:13:b1:50:29:71:ab: 5f:ea:97:82:d8:76:a9:99:ae:3d:33:50:c9:19:8e:73:af:78: 32:4e:79:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLU/JLslUUsbQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDk3OTBkMGQtM2VjMC00MmEyLWI2OGYtYzA4NDJjOTQ3NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbghM0/exemzeHuMMAUdWDeKnchePjvFNuDB z372zGanXUT0hIQbGfUqoIeSmUM0doEKz7qiiuXrSKVzxTA9qJ38H3a/1Fs8gWhy Fe4HshyLA1CkR82t/gFXpoJfAUUM6SiVKh7BMihGJFl1GQL7TQQTu9Ul8ipmXJOB qpOlzqhiQjMEj4CdF2r/obO0LwtjyqtnZ55s7gIeag8dcGILX5wsB16orHcuGV7I cli8LSiX2pR22cGPnkQB8KVlFCgS60p2yges+fhCEcsZDsogGhHjxsElycmyO6XC jcNCXPC5NvrjLnATWn+KSicJX8ZT9Sl/RkvCRuC2RNu0ppKQBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYZk5kESvRZeJq+QX1dO5/3hEz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYWJmNjcyOTktOWU4Ny0z NGE5LTliNDgtOTQ3NWZkNTQ5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiumzz5o7kjnZafxpaag3xxpeH4ECxBDhQXWJ8iP4rn0dD3U0l4soBJ kBkVGAduwwwHq1dOKe98MEQytJWERUKnZtWkDUbmtCR6rcIQVxNjRIgU7+TP0OOH F2OhGYR45SYTcGPZ2rbLlG34b2jY228J3JqEhQDnNmE/3XDaEFWa2BtOV5dZQueL c0gkY2GfBWXjSJPs8tn5m2xMNKk2+23cG2bsKu5H90Asq2wMTGO4BIAcX9gpgy5O +jE47NvOx+2DUzY7EMR19Vhedrs/AIjvGykd8NV1lCO7pHqwSj0bnthS3hOxUClx q1/ql4LYdqmZrj0zUMkZjnOveDJOeas= -----END CERTIFICATE-----Generated at Wed Oct 22 00:33:16 2025 by rpki-client