$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa File: 647e7e1b-886d-378b-8f0d-f521fdee6616.roa (raw, json) Hash identifier: hwLN11ABqrAm9AyW2Yy71Z4jkms7pprCQGf6TDdMPRo= Subject key identifier: 91:02:71:BB:0D:0A:40:EA:38:1B:A5:09:7F:A1:48:FC:B4:46:4A:44 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584B758C8F89D6BB6215828D5EA0 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 399629 IP address blocks: 96.9.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:8f:89:d6:bb:62:15:82:8d:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=f0bd865c-996d-42c0-8572-284268b8a5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:57:ef:f7:e4:7b:2e:91:4a:34:aa:d6:69: 1c:0a:6d:7f:a6:bf:fc:58:40:cf:99:01:ce:56:c4: f7:c2:6c:c5:80:a4:65:b2:c6:a4:f0:d1:e6:d7:8e: 7b:7a:02:56:a9:cd:67:18:b7:69:29:5b:8c:8e:af: 29:d4:1c:ba:b4:af:cc:86:6a:95:22:24:51:49:3a: a1:8f:67:a1:eb:eb:c0:a7:49:42:39:76:f6:e4:17: bf:6a:ef:e2:ce:c0:6b:d4:57:1e:90:9d:b4:ef:be: bf:d6:6f:43:39:9e:28:5e:11:3f:22:0e:74:19:43: b7:31:14:6c:91:d6:13:00:1a:24:07:d0:4a:b5:dd: 73:2a:af:b9:69:dd:0f:e9:be:17:fc:1b:b0:67:e6: e4:5c:d3:0b:17:e9:c7:10:fc:c4:a0:6e:bd:01:f8: 1c:f3:49:a0:23:2e:ba:63:03:72:58:12:a6:10:a0: 6a:64:e8:49:5e:b2:61:45:a5:e1:6e:d6:e8:16:6a: a0:b9:13:13:5a:ef:89:cb:62:d5:ed:6d:fa:88:81: 11:80:c2:bc:6c:88:bc:f2:7b:33:0e:0b:ac:65:c8: 0e:8d:22:30:60:fe:a6:de:22:c9:1b:84:fb:62:83: 40:f8:e1:7b:20:92:e0:45:3c:19:10:f1:8d:c2:b6: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:02:71:BB:0D:0A:40:EA:38:1B:A5:09:7F:A1:48:FC:B4:46:4A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/647e7e1b-886d-378b-8f0d-f521fdee6616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 96.9.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8e:cb:ec:ca:b1:72:e2:e0:e3:8b:35:02:62:26:98:cd:fe: 86:c4:95:e2:cd:99:08:32:16:35:7e:2c:d1:2c:14:16:7b:68: 79:f7:77:80:f1:e9:40:74:7e:04:78:c5:24:0c:58:8b:5d:78: c0:92:25:dc:a3:04:6a:5c:9f:b9:1e:5e:a6:a2:4f:90:71:1e: 28:e9:66:5e:d3:d6:72:57:6c:7c:be:3e:52:d6:32:c7:e4:75: 99:30:18:cd:92:12:31:b1:07:60:cb:5f:e3:7b:9d:e2:52:41: 02:e5:bc:9d:e2:65:4f:33:9c:dd:98:cc:89:6b:1b:0b:58:0d: f0:81:42:f9:b4:08:b8:0b:b8:6e:13:be:6d:a7:8e:70:42:9a: 9e:3f:ad:a7:a2:01:cf:07:38:94:41:bc:3f:66:7d:a4:a8:c7: 37:29:5c:48:a1:a2:aa:8f:03:c4:81:26:65:9b:14:49:7a:46: 06:c8:c2:fd:b1:d1:84:ec:eb:98:89:ab:e3:17:6e:51:a0:e3: e5:45:15:e7:ef:f8:93:fa:85:d3:a3:f3:7d:3f:39:a7:91:42: aa:0c:40:99:79:83:41:46:08:34:6d:95:d1:7c:d9:87:15:b8: ba:13:e4:4c:dc:d3:f5:92:62:48:4f:68:ad:fe:25:97:1b:6c: df:c4:66:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jI+J1rtiFYKNXqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZjBiZDg2NWMtOTk2ZC00MmMwLTg1NzItMjg0MjY4YjhhNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGxX7/fkey6RSjSq1mkcCm1/pr/8WEDPmQHO VsT3wmzFgKRlssak8NHm1457egJWqc1nGLdpKVuMjq8p1By6tK/MhmqVIiRRSTqh j2eh6+vAp0lCOXb25Be/au/izsBr1FcekJ20776/1m9DOZ4oXhE/Ig50GUO3MRRs kdYTABokB9BKtd1zKq+5ad0P6b4X/BuwZ+bkXNMLF+nHEPzEoG69Afgc80mgIy66 YwNyWBKmEKBqZOhJXrJhRaXhbtboFmqguRMTWu+Jy2LV7W36iIERgMK8bIi88nsz DgusZcgOjSIwYP6m3iLJG4T7YoNA+OF7IJLgRTwZEPGNwrasoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJECcbsNCkDqOBulCX+hSPy0RkpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNjQ3ZTdlMWItODg2ZC0z NzhiLThmMGQtZjUyMWZkZWU2NjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWOy+zKsXLi4OOLNQJiJpjN/obEleLNmQgyFjV+LNEsFBZ7aHn3d4Dx 6UB0fgR4xSQMWItdeMCSJdyjBGpcn7keXqaiT5BxHijpZl7T1nJXbHy+PlLWMsfk dZkwGM2SEjGxB2DLX+N7neJSQQLlvJ3iZU8znN2YzIlrGwtYDfCBQvm0CLgLuG4T vm2njnBCmp4/raeiAc8HOJRBvD9mfaSoxzcpXEihoqqPA8SBJmWbFEl6RgbIwv2x 0YTs65iJq+MXblGg4+VFFefv+JP6hdOj830/OaeRQqoMQJl5g0FGCDRtldF82YcV uLoT5Ezc0/WSYkhPaK3+JZcbbN/EZu8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:13 2025 by rpki-client