$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa File: dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json) Hash identifier: B2UIbwWd9VyLtaWxoXV8AKsTtRw53se8QtBZspOEItw= Subject key identifier: A6:33:B0:BA:1C:FA:0B:48:BA:E8:9D:87:7A:5D:D1:6F:37:EA:7C:3F Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584B8BE22F1CEF037D4FCCADD700 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 46632 IP address blocks: 96.45.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2f:1c:ef:03:7d:4f:cc:ad:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=9ff28b1b-4a6e-4315-b3ee-25f785c6955a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:36:89:4d:2d:42:3a:2c:68:69:1d:c8:37:f5: 1c:f6:90:a7:ad:51:39:77:2d:62:78:c1:14:04:20: bc:1e:23:65:c6:00:1b:ab:8a:52:25:e5:64:f9:f4: ee:76:d8:d5:db:80:9c:7f:87:a2:bb:88:3d:7f:de: 2b:3b:28:10:63:8a:88:f3:6b:9d:d9:c7:58:20:5a: 91:9c:51:a8:6b:4f:84:d2:2f:b8:eb:46:c3:9a:e9: 2a:14:ef:60:a2:fb:f5:35:e3:29:98:b9:ff:05:6b: 19:4b:d3:82:ca:e1:6a:99:91:1d:eb:a6:72:63:6d: 5e:a0:32:71:64:f2:82:90:89:a0:78:b9:17:8e:01: 50:78:b1:f1:4d:76:0d:7d:6f:79:43:86:c6:bf:f7: 01:2d:ff:7d:5c:51:99:c9:7e:26:cb:c7:36:cd:6e: 66:dd:b0:37:a7:bc:26:ec:1b:97:96:cd:2f:18:a7: c3:4c:f2:2e:1f:e6:b7:25:6a:61:bb:c3:f5:67:f0: 20:1a:a2:74:08:4e:57:cd:73:20:14:26:06:a7:98: c9:41:fd:40:c4:e8:c2:1e:2c:b5:2b:01:8f:8e:6c: 98:fe:28:5d:e5:87:3a:a3:ea:62:14:a8:6a:1f:d5: b1:a4:76:e6:e4:6b:36:5f:3a:38:a6:3c:76:ab:ce: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:33:B0:BA:1C:FA:0B:48:BA:E8:9D:87:7A:5D:D1:6F:37:EA:7C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 96.45.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3b:81:04:17:5c:09:a5:de:40:4f:6d:5f:82:d7:cc:97:49: b2:fb:fe:66:08:c9:bc:41:59:65:11:5f:b9:94:a4:e1:46:03: 24:3b:ba:bd:50:3b:fe:17:ca:ed:84:f5:33:a6:f9:b3:62:0e: 39:81:cd:1c:cd:f5:0e:d4:5e:82:99:ca:44:80:1c:0d:71:1c: ea:12:ea:9a:c8:98:7b:42:68:95:cc:85:b0:81:aa:8f:1d:0e: 14:c9:6e:27:37:e9:c0:04:7a:f2:98:1e:91:2d:df:f8:fa:de: ec:6c:86:a0:d6:87:02:95:e4:3c:ce:0e:3c:44:8b:b2:99:5f: 41:c1:71:c1:85:6e:aa:47:d6:02:bf:cf:60:ef:89:10:f5:45: 55:15:05:88:29:38:10:ac:0d:1f:c6:01:6e:7b:e4:04:8a:f3: e5:49:1b:2a:35:f0:b1:b8:78:dd:d7:61:32:e8:56:80:77:2e: 15:42:5a:a6:c5:9d:b6:9a:fe:ff:0d:47:9f:9c:9e:12:aa:d7: 3a:de:21:0e:66:02:f5:0c:f1:d4:d9:39:69:69:f2:7f:09:b2: ea:01:78:a0:99:0d:85:f7:10:15:bc:7e:91:e5:a0:e0:6b:52: 82:85:d1:ea:e6:1c:44:ce:c7:d9:4a:78:22:fd:cc:be:d0:5b: 75:7f:0e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4i8c7wN9T8yt1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OWZmMjhiMWItNGE2ZS00MzE1LWIzZWUtMjVmNzg1YzY5NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DaJTS1COixoaR3IN/Uc9pCnrVE5dy1ieMEU BCC8HiNlxgAbq4pSJeVk+fTudtjV24Ccf4eiu4g9f94rOygQY4qI82ud2cdYIFqR nFGoa0+E0i+460bDmukqFO9govv1NeMpmLn/BWsZS9OCyuFqmZEd66ZyY21eoDJx ZPKCkImgeLkXjgFQeLHxTXYNfW95Q4bGv/cBLf99XFGZyX4my8c2zW5m3bA3p7wm 7BuXls0vGKfDTPIuH+a3JWphu8P1Z/AgGqJ0CE5XzXMgFCYGp5jJQf1AxOjCHiy1 KwGPjmyY/ihd5Yc6o+piFKhqH9WxpHbm5Gs2Xzo4pjx2q86zwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYzsLoc+gtIuuidh3pd0W836nw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvZGZmNmMzNTItNWEyZS0z YzlkLTkxMDYtZTU2NmQxNGI5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM7gQQXXAml3kBPbV+C18yXSbL7/mYIybxBWWURX7mUpOFGAyQ7ur1Q O/4Xyu2E9TOm+bNiDjmBzRzN9Q7UXoKZykSAHA1xHOoS6prImHtCaJXMhbCBqo8d DhTJbic36cAEevKYHpEt3/j63uxshqDWhwKV5DzODjxEi7KZX0HBccGFbqpH1gK/ z2DviRD1RVUVBYgpOBCsDR/GAW575ASK8+VJGyo18LG4eN3XYTLoVoB3LhVCWqbF nbaa/v8NR5+cnhKq1zreIQ5mAvUM8dTZOWlp8n8JsuoBeKCZDYX3EBW8fpHloOBr UoKF0ermHETOx9lKeCL9zL7QW3V/DpA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:51 2025 by rpki-client