$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/2d03b30b-e5ba-3cc8-98ba-3a070722099c.roa File: 2d03b30b-e5ba-3cc8-98ba-3a070722099c.roa (raw, json) Hash identifier: p1bpYXpBsw4ypnM5GL4hEZEXQDBkirKwpP6lv4kb/3Y= Subject key identifier: 9A:3F:E4:94:73:C9:B3:5C:3F:77:0C:0D:35:AE:98:65:62:DB:2E:7E Certificate issuer: /CN=96239d53-1062-4a21-8f97-639809abe5de Certificate serial: 010D0C9F4328584B8EACD29B34B7BEB401BA7900 Authority key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/2d03b30b-e5ba-3cc8-98ba-3a070722099c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22933 IP address blocks: 204.13.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d2:9b:34:b7:be:b4:01:ba:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96239d53-1062-4a21-8f97-639809abe5de Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=fa4045a2-9570-40ea-bc76-6dedaf735776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:03:8c:03:84:64:b9:fc:fd:8b:59:67:75: 5d:ee:5a:ce:d3:71:07:0d:cb:6f:67:68:0a:a1:f9: 26:79:74:c3:75:f7:b4:5c:ae:ba:4d:f6:16:7f:2c: e0:14:4f:77:25:e7:9e:72:e5:cc:bf:9e:32:ad:94: 83:fd:3f:fa:42:9e:18:ce:67:58:a4:05:88:c5:eb: 34:c6:7f:53:8e:0d:fb:56:09:7a:75:17:e0:8b:28: a9:26:65:6a:3a:4c:cb:45:bd:89:9c:7b:30:9e:5e: 82:1a:98:9c:73:ad:f3:d9:21:85:22:b6:64:82:3c: 1c:6e:c0:a8:ab:d1:00:f2:68:e0:3f:ba:6e:5e:2d: ba:75:97:0e:7b:14:7f:ef:07:f7:f5:75:09:a2:b0: 48:61:41:04:b8:37:b9:78:b8:0e:3f:f2:91:61:e5: 30:0c:ff:9f:8d:61:b1:f2:60:fd:62:b9:08:77:c5: 53:eb:7a:0d:ca:a5:df:f8:7e:5c:f9:1d:04:50:a8: f0:05:1b:cb:92:54:f1:2e:91:16:59:b2:79:f5:dd: c4:21:4e:7e:35:c1:a0:21:73:2d:1b:8d:97:68:73: 39:c4:e8:42:1b:68:88:0e:89:32:89:c4:08:70:5e: 25:45:3e:6c:5c:c4:3f:16:1d:54:a4:46:94:7e:47: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3F:E4:94:73:C9:B3:5C:3F:77:0C:0D:35:AE:98:65:62:DB:2E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/2d03b30b-e5ba-3cc8-98ba-3a070722099c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl X509v3 Authority Key Identifier: keyid:D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer sbgp-ipAddrBlock: critical IPv4: 204.13.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:06:2e:2f:94:4e:3e:bf:5e:bf:7f:72:0b:a9:c6:8c:d6:fc: 11:93:de:1e:a0:84:1e:c5:d7:42:4c:98:b4:42:26:67:5a:72: de:71:fc:27:46:65:86:98:57:2e:ef:b1:3b:54:e6:7c:6f:e6: 60:82:c9:c7:22:46:06:8f:42:9f:ea:94:db:b5:85:87:e3:01: 7f:0a:a5:09:4c:35:8e:9d:87:97:c1:28:16:1e:f1:34:2b:34: 19:a4:c0:c6:32:f7:47:dd:b1:cb:2f:66:79:74:cc:79:a4:99: af:d8:a9:c1:3a:eb:8b:d3:a6:ad:3e:9b:5b:fc:0e:79:62:e9: 77:00:11:3b:3f:9a:7a:45:4b:80:37:cf:eb:29:a9:86:20:81: 66:00:a7:07:91:02:28:b5:0d:18:be:13:73:81:c5:c2:5f:11: 04:1f:0b:ea:0e:a4:f2:92:cd:8c:17:a3:b7:55:9d:18:1b:88: bc:27:03:57:ce:49:6b:0d:b5:ca:c2:cf:d0:15:b3:9a:2b:fd: 55:b1:60:fe:67:a9:10:81:cc:33:c9:56:a9:6e:b8:ea:fc:fa: c2:1b:4c:2f:b7:b8:01:78:c6:a6:72:44:36:ed:3c:95:ae:0e: 6f:8f:94:f6:59:ab:87:7b:68:5b:4d:b1:e7:ec:dd:e9:ff:92: 3e:09:b0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNKbNLe+tAG6eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYyMzlkNTMtMTA2Mi00YTIxLThmOTctNjM5ODA5YWJl NWRlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmE0MDQ1YTItOTU3MC00MGVhLWJjNzYtNmRlZGFmNzM1Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvMDjAOEZLn8/YtZZ3Vd7lrO03EHDctvZ2gK ofkmeXTDdfe0XK66TfYWfyzgFE93JeeecuXMv54yrZSD/T/6Qp4YzmdYpAWIxes0 xn9Tjg37Vgl6dRfgiyipJmVqOkzLRb2JnHswnl6CGpicc63z2SGFIrZkgjwcbsCo q9EA8mjgP7puXi26dZcOexR/7wf39XUJorBIYUEEuDe5eLgOP/KRYeUwDP+fjWGx 8mD9YrkId8VT63oNyqXf+H5c+R0EUKjwBRvLklTxLpEWWbJ59d3EIU5+NcGgIXMt G42XaHM5xOhCG2iIDokyicQIcF4lRT5sXMQ/Fh1UpEaUfkeaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo/5JRzybNcP3cMDTWumGVi2y5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjIz OWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlhYmU1ZGUvMmQwM2IzMGItZTViYS0z Y2M4LTk4YmEtM2EwNzA3MjIwOTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYyMzlkNTMtMTA2Mi00YTIxLThm OTctNjM5ODA5YWJlNWRlLzk2MjM5ZDUzLTEwNjItNGEyMS04Zjk3LTYzOTgwOWFi ZTVkZS5jcmwwHwYDVR0jBBgwFoAU2eA/F0XUhvY4Z94xYMndYcaFFhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4 MDlhYmU1ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIGLi+UTj6/Xr9/cgupxozW/BGT3h6ghB7F10JMmLRCJmdact5x/CdG ZYaYVy7vsTtU5nxv5mCCycciRgaPQp/qlNu1hYfjAX8KpQlMNY6dh5fBKBYe8TQr NBmkwMYy90fdscsvZnl0zHmkma/YqcE664vTpq0+m1v8Dnli6XcAETs/mnpFS4A3 z+spqYYggWYApweRAii1DRi+E3OBxcJfEQQfC+oOpPKSzYwXo7dVnRgbiLwnA1fO SWsNtcrCz9AVs5or/VWxYP5nqRCBzDPJVqluuOr8+sIbTC+3uAF4xqZyRDbtPJWu Dm+PlPZZq4d7aFtNsefs3en/kj4JsOY= -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:38 2025 by rpki-client