$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa File: bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa (raw, json) Hash identifier: sB7IuCKq17RuNKL7OtLniPydC1frIB5mvcKxTeG0z9g= Subject key identifier: E9:A9:D5:51:87:04:19:99:11:38:48:D6:7E:85:1B:EF:4F:27:86:C2 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584B94421F1565ED117E76DB4080 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 40232 IP address blocks: 204.48.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:15:65:ed:11:7e:76:db:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=0551025c-54f7-4d24-9088-311221855fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:b9:45:d9:b6:70:5b:ac:14:08:0e:38:07: 11:bb:8b:24:c5:11:1b:54:6c:0f:4a:c8:5b:ae:0b: 86:97:14:6e:68:9c:9e:1b:1a:af:42:e5:75:84:0f: f1:67:e3:1c:1b:1f:e6:b8:06:ab:ef:30:54:16:65: bd:e5:b5:f8:43:b3:09:a4:05:2c:fa:97:23:d1:38: c5:30:e9:00:47:ab:83:52:cb:bb:73:53:0b:d2:bb: 5c:35:53:b4:b0:f6:7c:2e:a7:65:f1:96:1d:15:e8: 87:33:89:26:df:7e:ed:03:c4:6f:08:fa:c4:0f:08: 7a:7a:bb:1f:62:b8:f8:7b:aa:e2:2d:b0:53:05:c7: 4e:18:e4:1b:96:55:ed:22:3d:25:21:57:c4:f8:88: c1:8f:72:06:bd:e9:7f:9a:c3:86:bd:33:68:c8:ad: a9:33:aa:e6:bc:9b:fd:9f:7c:59:24:d2:ce:d6:88: c9:81:df:9e:7e:7a:94:35:5d:e3:07:8e:c6:fa:a1: 74:ab:69:2a:28:c6:09:c5:df:43:6e:9d:35:a4:85: a5:66:ae:42:c1:80:8c:b7:a3:42:55:43:8c:b1:df: 13:e9:db:0d:8d:5b:b4:30:df:5f:6b:bb:69:84:d1: ad:ed:0e:a7:91:c0:fe:62:46:6a:1c:ae:63:89:21: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:D5:51:87:04:19:99:11:38:48:D6:7E:85:1B:EF:4F:27:86:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 204.48.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cb:24:3e:9a:35:de:f6:24:8f:99:cf:1c:c8:89:49:c6:fc: 16:45:06:45:7c:66:85:cf:a2:ce:f8:10:65:97:8f:48:39:b1: 95:a9:5a:97:f2:10:4d:2c:ca:0d:9d:3c:1b:28:45:e3:5d:ea: fb:94:43:51:d0:62:2c:3b:f0:1b:de:88:3c:e6:93:e2:07:7c: 6f:d4:34:b2:ff:dd:d6:03:f7:72:16:d6:e1:52:67:46:0a:bb: c2:d1:a4:1c:ae:b2:ac:20:e2:96:cc:f3:79:9a:d6:a1:eb:8e: cf:e3:7e:8a:4a:41:cd:5c:f3:4e:0b:ff:b5:2e:c6:28:d4:c9: 0e:6c:4d:98:13:25:0f:14:08:f2:6d:c9:ad:d4:7a:69:6e:73: d6:3f:3a:e8:b2:87:33:b8:0e:98:3f:55:1f:41:30:bb:0f:78: 40:70:2f:a6:08:97:0d:e1:ee:48:2b:c2:c9:2a:97:45:47:e4: 94:f8:ae:ea:d6:a0:3f:db:e5:13:34:08:01:cd:90:b7:0f:2e: d2:bc:8a:b4:25:32:80:69:c7:c8:bd:d3:ae:9a:ba:d5:1e:ee: 3d:ba:c2:b7:2e:9e:99:8b:fd:2e:21:1f:25:3f:9b:df:95:ed: 43:73:fe:63:1e:7d:09:7a:77:45:4a:2b:3d:b0:7b:09:ba:20: 0d:a1:a4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh8VZe0RfnbbQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MDU1MTAyNWMtNTRmNy00ZDI0LTkwODgtMzExMjIxODU1ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHO5Rdm2cFusFAgOOAcRu4skxREbVGwPSshb rguGlxRuaJyeGxqvQuV1hA/xZ+McGx/muAar7zBUFmW95bX4Q7MJpAUs+pcj0TjF MOkAR6uDUsu7c1ML0rtcNVO0sPZ8Lqdl8ZYdFeiHM4km337tA8RvCPrEDwh6ersf Yrj4e6riLbBTBcdOGOQbllXtIj0lIVfE+IjBj3IGvel/msOGvTNoyK2pM6rmvJv9 n3xZJNLO1ojJgd+efnqUNV3jB47G+qF0q2kqKMYJxd9Dbp01pIWlZq5CwYCMt6NC VUOMsd8T6dsNjVu0MN9fa7tphNGt7Q6nkcD+YkZqHK5jiSGv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmp1VGHBBmZEThI1n6FG+9PJ4bCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYmM1ZTg0Y2YtNzA1NC0z M2RlLWE2ZWUtOTBjMzMzMThkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDLJD6aNd72JI+ZzxzIiUnG/BZFBkV8ZoXPos74EGWXj0g5sZWpWpfy EE0syg2dPBsoReNd6vuUQ1HQYiw78BveiDzmk+IHfG/UNLL/3dYD93IW1uFSZ0YK u8LRpByusqwg4pbM83ma1qHrjs/jfopKQc1c804L/7UuxijUyQ5sTZgTJQ8UCPJt ya3Uemluc9Y/OuiyhzO4Dpg/VR9BMLsPeEBwL6YIlw3h7kgrwskql0VH5JT4rurW oD/b5RM0CAHNkLcPLtK8irQlMoBpx8i9066autUe7j26wrcunpmL/S4hHyU/m9+V 7UNz/mMefQl6d0VKKz2wewm6IA2hpNA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:11 2025 by rpki-client