$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa File: 553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa (raw, json) Hash identifier: Y/sCHs+pSYk937vBn/dasKEq922AUDhvmOctbPb8HVQ= Subject key identifier: E9:1D:AA:3B:A9:0A:57:2F:9C:6E:6A:66:DB:DE:82:4C:F8:1A:BB:78 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D2D14389240BEB3F970C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 96.41.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:2d:14:38:92:40:be:b3:f9:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=1f13b34a-cd5b-4e74-bd86-7d359c32eabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:bb:c3:76:ea:af:4f:bf:8f:dc:60:51:39: b4:48:16:04:b8:61:b9:a0:33:b3:f7:b3:2b:c7:59: 7a:54:b6:62:9d:b5:c4:b1:0f:55:15:c2:3a:ab:e9: cb:5b:c8:ed:95:51:b7:df:c8:4f:cf:bb:32:28:17: 0a:67:fe:53:80:5c:52:96:9e:b8:d1:82:93:e8:1a: fa:37:4b:16:6f:79:13:2d:6b:0e:6c:6f:41:2b:6f: 4f:bd:ad:7c:55:f0:ad:f4:c4:5e:1d:6e:c6:85:b2: cf:de:bc:f2:57:e6:e0:dc:4e:dd:42:6c:81:80:70: e7:9b:1a:5e:8a:06:34:fd:32:b9:b8:24:6b:3e:cb: c6:09:6b:aa:39:45:c3:6b:65:51:f1:87:7a:ab:02: e4:5b:69:25:dc:59:8d:df:13:89:ee:6d:aa:d3:32: e3:53:e7:e4:3d:20:66:d9:bc:01:a0:20:45:3d:6a: 27:8d:86:3f:34:37:6d:71:b0:8a:16:02:a2:07:ca: b8:75:4b:e2:85:05:ad:69:20:b7:47:70:42:dd:47: ec:0a:83:81:b5:e1:ef:e1:d6:3f:13:f1:d2:51:c0: cf:71:d2:c7:c0:43:67:6e:4e:f1:fd:d0:2b:b2:45: bf:8a:c8:fb:5b:7b:2e:7c:72:45:c0:c3:99:dd:5a: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:AA:3B:A9:0A:57:2F:9C:6E:6A:66:DB:DE:82:4C:F8:1A:BB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/553bd5a1-94b2-3d24-8d12-5a25ec76e098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 96.41.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:77:9a:56:a9:24:cd:93:ce:09:28:9f:bc:c9:5f:eb:a9:b0: 6a:65:c7:28:94:ea:6c:91:30:9b:68:ec:b1:b3:34:43:f9:8e: 10:0f:79:df:58:91:f8:e4:66:aa:27:bf:67:69:5a:78:1e:5a: 65:fc:42:5b:52:29:d4:53:7f:6f:de:1d:3e:67:a6:df:f8:6d: 98:eb:cc:e6:2f:08:b8:4e:2a:d8:e7:93:76:1d:b6:69:8b:fe: 3c:d5:be:60:c8:53:7e:bb:6e:f3:68:09:46:77:f3:ee:04:0d: dd:69:d9:a1:f5:46:3f:cf:b5:92:99:d8:6d:a8:f5:10:d5:0f: 28:3f:9d:6e:05:f9:b2:10:99:79:da:da:af:9d:42:59:e8:f8: 78:15:10:60:f1:eb:30:99:e8:43:38:b7:28:82:03:2e:73:0d: 04:33:35:bd:a9:6f:03:41:92:56:c1:b2:bb:be:0e:ba:68:aa: 6d:9f:3d:a1:26:8d:8c:8f:ec:ae:b9:07:c9:3d:2e:03:c9:f3: a6:7f:c1:28:48:ae:97:2e:4f:6f:38:97:96:cb:be:bb:0f:c0: e4:17:7d:f3:e5:ea:7b:c9:4b:bf:69:c4:21:0a:91:b7:6f:c5: 41:09:5a:3c:c7:aa:56:d3:79:0c:fd:6d:96:11:27:42:eb:f2: f0:16:79:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHS0UOJJAvrP5cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MWYxM2IzNGEtY2Q1Yi00ZTc0LWJkODYtN2QzNTljMzJlYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVy7w3bqr0+/j9xgUTm0SBYEuGG5oDOz97Mr x1l6VLZinbXEsQ9VFcI6q+nLW8jtlVG338hPz7syKBcKZ/5TgFxSlp640YKT6Br6 N0sWb3kTLWsObG9BK29Pva18VfCt9MReHW7GhbLP3rzyV+bg3E7dQmyBgHDnmxpe igY0/TK5uCRrPsvGCWuqOUXDa2VR8Yd6qwLkW2kl3FmN3xOJ7m2q0zLjU+fkPSBm 2bwBoCBFPWonjYY/NDdtcbCKFgKiB8q4dUvihQWtaSC3R3BC3UfsCoOBteHv4dY/ E/HSUcDPcdLHwENnbk7x/dArskW/isj7W3sufHJFwMOZ3VrbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkdqjupClcvnG5qZtvegkz4Grt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTUzYmQ1YTEtOTRiMi0z ZDI0LThkMTItNWEyNWVjNzZlMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYCmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt3mlapJM2Tzgkon7zJX+upsGplxyiU6myRMJto7LGzNEP5jhAPed9Y kfjkZqonv2dpWngeWmX8QltSKdRTf2/eHT5npt/4bZjrzOYvCLhOKtjnk3YdtmmL /jzVvmDIU367bvNoCUZ38+4EDd1p2aH1Rj/PtZKZ2G2o9RDVDyg/nW4F+bIQmXna 2q+dQlno+HgVEGDx6zCZ6EM4tyiCAy5zDQQzNb2pbwNBklbBsru+Drpoqm2fPaEm jYyP7K65B8k9LgPJ86Z/wShIrpcuT284l5bLvrsPwOQXffPl6nvJS79pxCEKkbdv xUEJWjzHqlbTeQz9bZYRJ0Lr8vAWeak= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:45 2025 by rpki-client