$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44da395a-004e-3369-9115-ea95b2d4ed10.roa File: 44da395a-004e-3369-9115-ea95b2d4ed10.roa (raw, json) Hash identifier: Pc4tNxXwQQViqFR74HI5uFLemn/tBrsOq4DXQPAtBiY= Subject key identifier: B5:CA:DF:95:DD:05:99:12:39:09:57:97:38:32:AF:0F:B4:42:89:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4A211148732532C199CF8E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44da395a-004e-3369-9115-ea95b2d4ed10.roa Signing time: Tue 23 Sep 2025 11:44:09 +0000 ROA not before: Tue 23 Sep 2025 11:44:09 +0000 ROA not after: Mon 22 Dec 2025 12:44:09 +0000 asID: 200005 IP address blocks: 96.7.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:21:11:48:73:25:32:c1:99:cf:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 11:44:09 2025 GMT Not After : Dec 22 12:44:09 2025 GMT Subject: CN=2c5632a6-571d-41fc-a9a7-d4eae1afe825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:7b:ee:25:a9:19:ea:79:fa:e6:4d:c9:ce: 3c:82:aa:9b:4e:fc:10:84:27:65:88:6f:1f:da:d7: d7:93:19:77:0c:0f:75:10:5c:12:b3:0a:17:b8:48: 32:3e:a6:d7:b8:aa:c5:38:58:cf:27:7b:2a:c9:05: 57:47:5e:80:92:34:a6:63:7f:07:a6:e6:a5:d8:a3: 81:e3:97:3c:50:8f:10:3a:d9:b9:fa:93:84:1a:dc: 72:21:7b:7c:0e:51:74:df:cd:8a:50:cc:64:54:5c: 0c:c8:df:70:a8:d5:20:55:23:5a:28:73:56:6e:56: 5e:52:bf:53:ac:c9:eb:b0:aa:75:2b:9b:c0:96:88: 1d:ed:79:0c:e1:3d:fc:c5:5b:37:ec:22:22:ae:fe: 47:3a:a6:63:ac:b4:0a:26:60:da:09:65:e0:b3:8a: 4c:6c:c6:6c:93:ca:bb:05:57:1e:0b:38:18:07:57: df:21:06:80:f8:37:d1:89:a3:15:1e:7e:ca:47:a3: 54:16:5b:19:4f:9d:2b:a6:3c:3c:f3:13:19:d5:1b: 2a:a3:8a:e6:f4:fb:2e:28:91:be:dc:c7:59:ea:f2: c6:f0:f5:61:4d:9f:27:d0:1f:b4:c0:20:a4:48:e9: d0:ec:43:1b:7c:2d:d2:c6:d1:9b:23:bd:b6:07:cb: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CA:DF:95:DD:05:99:12:39:09:57:97:38:32:AF:0F:B4:42:89:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44da395a-004e-3369-9115-ea95b2d4ed10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:99:b5:86:54:00:44:b4:95:4f:9b:b8:44:62:fd:e3:25:8f: 42:ed:35:ac:ce:14:e0:0d:b9:63:96:9d:32:f8:61:3a:04:40: 7d:b0:30:d0:99:27:e4:bb:c5:5d:4e:2b:21:65:0e:06:6c:24: c5:8d:a8:aa:3d:14:49:e1:ac:27:69:5d:4a:ab:8d:b4:84:e0: 29:a0:75:db:12:84:1e:fe:19:e7:91:fd:35:40:1b:10:0b:bb: 88:35:da:9b:92:58:87:ac:5f:7a:b4:f6:18:48:17:39:ad:18: c5:7c:74:3d:44:1f:4e:41:2d:6e:15:82:bd:ee:8c:6d:3c:38: 27:79:8e:cd:8e:55:4d:c2:5a:d9:d1:12:1d:33:c4:b7:97:56: 62:90:4b:35:0e:33:09:8c:50:7e:cb:0d:70:22:a7:7b:e3:0f: 46:cd:69:7e:7a:e8:9c:69:14:98:be:82:c1:4e:b5:8a:7d:80: e3:03:90:9a:44:db:48:d5:9b:d6:d8:06:5f:c8:6c:e7:ba:6d: 87:6d:8d:57:cf:ce:0a:e3:40:45:80:f8:ec:9f:5a:fb:48:7a: 14:29:c9:6f:ea:77:52:8c:93:0e:75:0e:ce:81:84:8a:a7:c9: 70:5b:06:eb:f1:bd:65:08:9e:07:ce:81:3c:03:82:ea:0f:71: d4:77:f7:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKIRFIcyUywZnPjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzExNDQwOVoXDTI1MTIyMjEyNDQwOVowLzEtMCsGA1UEAxMk MmM1NjMyYTYtNTcxZC00MWZjLWE5YTctZDRlYWUxYWZlODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyh77iWpGep5+uZNyc48gqqbTvwQhCdliG8f 2tfXkxl3DA91EFwSswoXuEgyPqbXuKrFOFjPJ3sqyQVXR16AkjSmY38Hpual2KOB 45c8UI8QOtm5+pOEGtxyIXt8DlF0382KUMxkVFwMyN9wqNUgVSNaKHNWblZeUr9T rMnrsKp1K5vAlogd7XkM4T38xVs37CIirv5HOqZjrLQKJmDaCWXgs4pMbMZsk8q7 BVceCzgYB1ffIQaA+DfRiaMVHn7KR6NUFlsZT50rpjw88xMZ1Rsqo4rm9PsuKJG+ 3MdZ6vLG8PVhTZ8n0B+0wCCkSOnQ7EMbfC3SxtGbI722B8vKjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXK35XdBZkSOQlXlzgyrw+0Qol3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDRkYTM5NWEtMDA0ZS0z MzY5LTkxMTUtZWE5NWIyZDRlZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqZtYZUAES0lU+buERi/eMlj0LtNazOFOANuWOWnTL4YToEQH2wMNCZ J+S7xV1OKyFlDgZsJMWNqKo9FEnhrCdpXUqrjbSE4CmgddsShB7+GeeR/TVAGxAL u4g12puSWIesX3q09hhIFzmtGMV8dD1EH05BLW4Vgr3ujG08OCd5js2OVU3CWtnR Eh0zxLeXVmKQSzUOMwmMUH7LDXAip3vjD0bNaX566JxpFJi+gsFOtYp9gOMDkJpE 20jVm9bYBl/IbOe6bYdtjVfPzgrjQEWA+OyfWvtIehQpyW/qd1KMkw51Ds6BhIqn yXBbBuvxvWUIngfOgTwDguoPcdR394c= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:55 2025 by rpki-client