$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa File: 06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa (raw, json) Hash identifier: QgnhaxtJ4Q7wcJmKqf8NvK3TLz3z+dgok6LHFKLzZ5k= Subject key identifier: 98:EC:BD:15:BE:2A:CE:23:0F:CE:A2:54:55:B0:96:16:C6:B3:7A:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4BAC624163BBE6DB01670780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 16625 IP address blocks: 96.17.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:62:41:63:bb:e6:db:01:67:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=b44faa0a-36d9-4ffa-877f-9c6474673992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:7c:50:08:fb:eb:fa:29:05:d1:0a:45:17: d6:f0:78:f6:50:7d:4c:24:07:01:64:4d:1e:6b:3e: e0:28:f0:3f:e4:98:a5:ee:e7:a6:b6:49:b5:ce:3a: 7c:90:5b:2a:05:04:e8:4f:35:52:ec:8b:8b:0b:8e: ed:93:87:66:b6:5c:5d:37:36:4e:fc:35:5a:44:27: 4b:e1:d5:76:09:60:04:5d:2d:8f:b4:05:eb:a5:ac: 6b:cb:1a:ca:f4:ff:ec:65:1e:4e:1a:cc:06:03:15: 93:85:72:dd:0f:9b:75:7a:ae:ec:4b:0c:8c:24:e3: 97:a0:1c:6c:2a:23:4b:47:1b:95:95:96:85:3f:6f: bd:b2:9d:ef:db:83:b9:c6:91:17:06:84:32:23:0c: 6c:c3:67:84:5d:3f:74:6a:4a:67:61:6a:e5:2b:87: c1:80:e8:3a:b3:76:e0:7a:d6:58:c6:60:53:a2:c2: 23:45:21:05:0f:c7:a6:79:b3:ab:18:6b:00:3c:44: 2c:70:43:3e:79:f2:c4:79:ce:5c:b5:d4:d9:39:f9: 61:d3:a0:61:06:3d:03:aa:0a:46:c8:16:48:f7:e5: 48:e1:97:76:e5:87:e8:19:27:6f:1b:86:dc:03:ec: 21:91:a3:2f:ec:ca:6a:b1:ed:f7:84:41:b2:aa:e6: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EC:BD:15:BE:2A:CE:23:0F:CE:A2:54:55:B0:96:16:C6:B3:7A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a0:5b:ad:93:d6:19:c7:4c:24:73:45:a4:2e:c6:17:46:8c: 2e:d6:59:f1:7a:62:6d:c3:be:1d:7e:a7:86:f5:fe:5f:35:99: 9e:6c:51:f5:33:8f:65:af:98:f6:58:eb:26:b9:79:bb:31:3d: 4e:e5:49:97:df:d7:ba:5c:02:56:29:aa:3c:b6:f8:32:cd:de: 1c:c9:35:3d:df:2a:6c:3a:01:9c:c9:e6:23:51:08:d7:0c:53: 26:fd:1a:40:85:b7:81:16:cd:37:9f:96:eb:ea:9e:05:86:e6: 0b:82:10:1e:e0:01:b8:4a:e0:6e:59:d9:38:ce:22:af:3d:86: de:4f:4a:70:71:99:51:30:44:52:63:39:fa:0d:a8:71:ba:57: fc:d8:16:c5:5f:5f:39:24:46:c1:03:17:c4:e6:57:e5:17:3c: 3d:09:03:97:00:e7:4f:19:2a:2d:d1:8e:7c:4f:e5:87:8b:e9: 49:45:80:db:e4:90:de:37:f2:9e:a4:45:38:9a:3f:f0:44:a1: 96:5b:8f:03:ed:fd:fb:c1:ff:8d:12:ec:61:83:cf:72:ae:cd: c7:be:e5:9a:07:e9:d4:d9:72:55:a2:f6:14:bf:25:1e:3c:01: f8:57:2e:e2:b4:75:0a:7e:00:66:cb:db:7d:ea:f7:a8:e7:47: c7:b9:44:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrGJBY7vm2wFnB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YjQ0ZmFhMGEtMzZkOS00ZmZhLTg3N2YtOWM2NDc0NjczOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/h8UAj76/opBdEKRRfW8Hj2UH1MJAcBZE0e az7gKPA/5Jil7uemtkm1zjp8kFsqBQToTzVS7IuLC47tk4dmtlxdNzZO/DVaRCdL 4dV2CWAEXS2PtAXrpaxryxrK9P/sZR5OGswGAxWThXLdD5t1eq7sSwyMJOOXoBxs KiNLRxuVlZaFP2+9sp3v24O5xpEXBoQyIwxsw2eEXT90akpnYWrlK4fBgOg6s3bg etZYxmBTosIjRSEFD8emebOrGGsAPEQscEM+efLEec5ctdTZOflh06BhBj0DqgpG yBZI9+VI4Zd25YfoGSdvG4bcA+whkaMv7Mpqse33hEGyqubA+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjsvRW+Ks4jD86iVFWwlhbGs3q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDZkMjdjZTMtZDYzMS0z OGZkLThmMWYtMGJiM2I1YThiNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWgW62T1hnHTCRzRaQuxhdGjC7WWfF6Ym3Dvh1+p4b1/l81mZ5sUfUz j2WvmPZY6ya5ebsxPU7lSZff17pcAlYpqjy2+DLN3hzJNT3fKmw6AZzJ5iNRCNcM Uyb9GkCFt4EWzTefluvqngWG5guCEB7gAbhK4G5Z2TjOIq89ht5PSnBxmVEwRFJj OfoNqHG6V/zYFsVfXzkkRsEDF8TmV+UXPD0JA5cA508ZKi3RjnxP5YeL6UlFgNvk kN438p6kRTiaP/BEoZZbjwPt/fvB/40S7GGDz3Kuzce+5ZoH6dTZclWi9hS/JR48 AfhXLuK0dQp+AGbL233q96jnR8e5RPg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:00:06 2025 by rpki-client