$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa File: bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa (raw, json) Hash identifier: ddOHu7f+Mcoa2doNTOJprzKVk3inCcwROnt5XM3WGgw= Subject key identifier: C0:55:BF:C9:AD:6C:D4:E9:05:46:96:47:45:13:68:7F:86:FA:1D:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B196C19C08915979AA8787870 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 401152 IP address blocks: 96.126.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:19:c0:89:15:97:9a:a8:78:78:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=f77dbcce-742f-441f-b1c1-7e707dee027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:14:a2:86:de:80:cc:d6:0a:d2:90:96:29: 7f:a4:ff:07:ba:88:1a:08:10:c8:05:a4:5c:f8:27: 07:ee:d3:c4:9f:5d:e9:96:08:09:26:2b:5f:47:3e: e5:25:e0:8a:95:65:06:45:74:a9:46:6b:4b:8c:e6: a4:bf:b3:6d:4f:4c:3a:d3:4d:0c:de:15:83:5c:40: c2:74:5f:d7:a1:a9:60:ef:ad:2c:d3:e1:cc:d2:01: cb:94:d6:f7:cd:7c:e4:c9:07:4c:d6:75:54:24:0f: 73:d8:5a:bc:dc:09:0f:1f:7b:cc:77:b5:1c:00:24: e6:42:06:6c:6a:d9:9b:48:f5:34:51:2b:cf:1d:04: 53:b6:0c:f9:a1:0e:43:9c:2c:94:c3:f3:2e:99:ff: 33:ec:d3:bb:37:39:f1:28:d0:b8:f4:ab:a2:ad:77: 95:21:09:df:a6:e5:38:db:c1:f7:2a:58:67:62:32: 72:e5:d8:0e:49:f9:3b:cd:c4:e6:58:c9:42:93:70: 89:bd:9c:c4:1f:50:2b:b8:30:a9:46:94:44:af:62: 51:06:61:f0:1e:1d:a3:65:1f:a3:f7:02:0f:6b:80: 1f:7e:8e:14:d7:2b:ee:31:2b:63:1c:a9:cd:d2:ac: 2b:d2:d1:4f:92:8f:97:90:da:f5:a4:73:8c:6d:0e: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:55:BF:C9:AD:6C:D4:E9:05:46:96:47:45:13:68:7F:86:FA:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:43:74:61:70:af:bc:a6:68:62:be:80:76:47:d3:bd:09:d3: f2:70:ca:f9:16:b3:04:ab:ed:60:06:82:5e:6e:93:7e:14:9a: a3:3e:9f:1a:05:aa:22:46:f0:50:cf:2a:0a:c5:dd:e5:42:5e: 0d:d5:7c:a0:29:99:6a:69:6d:c1:c7:d0:e5:24:25:75:f6:af: e8:81:24:58:36:b9:ab:2e:4a:48:9e:e9:5d:58:6e:9b:26:4c: 7c:c1:b1:aa:a1:9c:55:3e:33:48:61:5a:7c:c7:e5:34:f8:e5: 8b:92:19:5a:87:69:ca:5e:0f:80:75:3f:4b:ee:f0:64:32:d1: e9:42:bc:1d:03:25:0c:16:60:8d:49:ae:2a:3d:66:41:7b:50: 0a:32:fe:51:a6:3b:24:48:3d:e8:bc:d2:8d:4f:c1:ed:39:ea: 8f:0d:d1:cb:07:12:ed:99:d1:97:56:2d:5f:39:12:11:a1:a3: 01:f0:bf:6d:a4:6f:22:b6:cc:b7:9e:0a:15:09:49:43:14:50: 6a:5d:2e:f5:3c:cf:6a:44:11:4c:a4:98:3e:10:76:5a:81:f3: 7a:79:86:a0:19:d1:bd:ca:7a:b1:57:a7:5b:9b:c6:82:9d:aa: 10:ce:aa:a8:f5:d0:f5:cf:43:4a:c4:bc:14:cc:8e:0b:56:5a: 7e:30:63:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBnAiRWXmqh4eHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk Zjc3ZGJjY2UtNzQyZi00NDFmLWIxYzEtN2U3MDdkZWUwMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDsUoobegMzWCtKQlil/pP8HuogaCBDIBaRc +CcH7tPEn13plggJJitfRz7lJeCKlWUGRXSpRmtLjOakv7NtT0w6000M3hWDXEDC dF/Xoalg760s0+HM0gHLlNb3zXzkyQdM1nVUJA9z2Fq83AkPH3vMd7UcACTmQgZs atmbSPU0USvPHQRTtgz5oQ5DnCyUw/Mumf8z7NO7NznxKNC49KuirXeVIQnfpuU4 28H3KlhnYjJy5dgOSfk7zcTmWMlCk3CJvZzEH1AruDCpRpREr2JRBmHwHh2jZR+j 9wIPa4Affo4U1yvuMStjHKnN0qwr0tFPko+XkNr1pHOMbQ5w9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBVv8mtbNTpBUaWR0UTaH+G+h1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmM5N2E4OTMtYjM0Zi0z ZTI0LTkxYWMtOWVhMGZmOGY0OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFDdGFwr7ymaGK+gHZH070J0/JwyvkWswSr7WAGgl5uk34UmqM+nxoF qiJG8FDPKgrF3eVCXg3VfKApmWppbcHH0OUkJXX2r+iBJFg2uasuSkie6V1Ybpsm THzBsaqhnFU+M0hhWnzH5TT45YuSGVqHacpeD4B1P0vu8GQy0elCvB0DJQwWYI1J rio9ZkF7UAoy/lGmOyRIPei80o1Pwe056o8N0csHEu2Z0ZdWLV85EhGhowHwv22k byK2zLeeChUJSUMUUGpdLvU8z2pEEUykmD4QdlqB83p5hqAZ0b3KerFXp1ubxoKd qhDOqqj10PXPQ0rEvBTMjgtWWn4wY+E= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:50 2025 by rpki-client