$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fca2ce17-5892-3fc6-8555-e142d9703353.roa File: fca2ce17-5892-3fc6-8555-e142d9703353.roa (raw, json) Hash identifier: 7oAD13DQmRpDeOpYBBEYz9i8VwamLa5ExkqRxXsREh4= Subject key identifier: 4B:73:0F:3A:D2:AE:0A:33:38:7D:CC:CB:F3:57:F3:43:4C:06:22:7B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B79BCADAD1B7B65E200E2A240 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fca2ce17-5892-3fc6-8555-e142d9703353.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 401152 IP address blocks: 96.126.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:ad:ad:1b:7b:65:e2:00:e2:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a17d2ae4-a75e-4153-98e8-75708e11bd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:9a:19:f7:d8:03:e4:5f:44:51:4c:a2:db: 29:10:34:45:df:ae:ee:04:14:ca:05:29:31:4e:0f: b9:f8:4b:4d:62:7c:22:8c:48:b8:a5:fb:e3:48:78: 2d:63:37:af:97:82:6d:29:20:49:63:7e:af:88:5e: 37:f3:24:c9:2e:6b:a7:ad:d8:9f:f4:33:e4:8d:54: c8:73:eb:07:85:2a:bb:df:01:3f:08:66:5d:a2:98: ec:9a:a0:f0:7e:c6:5b:ce:95:9d:a0:67:56:ea:ee: f1:c4:a0:6a:2d:8e:78:c7:f8:71:e1:e7:dc:53:47: 35:68:13:65:13:fa:37:26:04:c6:35:4a:0b:8f:9d: 80:af:29:47:67:fd:55:70:8e:d3:df:70:3d:8d:0e: 84:6f:eb:71:e5:81:2b:15:a3:74:84:19:df:74:6d: f8:49:9a:39:03:ab:16:02:b3:48:0f:53:58:d7:ee: 4b:49:e1:52:c1:27:b9:59:59:6b:61:a5:32:96:9d: 7c:57:ae:bf:1a:de:05:03:1f:58:10:2b:d7:06:39: 69:ca:cb:e6:b2:18:c2:07:0d:53:24:af:fb:4f:ad: 76:68:ae:af:ab:16:03:1d:e1:15:11:27:d1:db:d4: 75:fa:ae:59:1c:ee:84:a8:8d:25:b8:da:f6:bd:7e: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:73:0F:3A:D2:AE:0A:33:38:7D:CC:CB:F3:57:F3:43:4C:06:22:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fca2ce17-5892-3fc6-8555-e142d9703353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3f:2b:3b:3e:62:d7:1e:6c:c9:9c:9d:1a:f7:d1:2c:3d:72: c8:ed:4d:8b:bb:84:77:23:e7:d5:35:50:44:7e:bc:a4:89:9b: 1d:3c:64:11:04:32:bb:8a:c6:6b:78:a6:cc:11:b6:04:2b:b9: 2e:0b:ed:4d:24:f7:11:9e:8b:03:11:8d:f9:78:13:10:c1:b7: d9:85:04:48:7e:f3:7f:68:f4:a4:d7:ae:73:51:da:fb:51:20: 67:38:ec:28:c9:3d:9e:18:1b:db:30:5f:12:98:4b:b2:77:05: fb:4c:3c:f1:36:76:b7:d7:70:aa:bb:47:39:ab:81:89:25:71: 25:3a:43:c2:ac:13:7c:17:e7:67:28:a5:48:cc:74:37:d5:53: e2:5b:7b:e5:43:02:71:85:bc:09:71:45:d5:61:3e:7e:23:24: b3:59:d0:6c:e1:7b:16:82:0c:61:77:40:14:e6:21:3e:25:01: 5d:bd:22:bb:96:20:3e:67:bd:f1:57:1b:11:93:b9:a6:f5:dd: ff:00:88:59:0a:68:d2:c4:e5:99:79:77:06:46:db:35:a6:2a: 62:23:90:45:df:fa:a5:a4:68:9c:5f:36:4d:41:85:ee:5e:25: 21:f7:60:c1:7a:e9:c8:f0:42:ac:2a:c5:e5:87:cc:c8:f2:64: f1:14:3e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vK2tG3tl4gDiokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTE3ZDJhZTQtYTc1ZS00MTUzLTk4ZTgtNzU3MDhlMTFiZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2aGffYA+RfRFFMotspEDRF367uBBTKBSkx Tg+5+EtNYnwijEi4pfvjSHgtYzevl4JtKSBJY36viF438yTJLmunrdif9DPkjVTI c+sHhSq73wE/CGZdopjsmqDwfsZbzpWdoGdW6u7xxKBqLY54x/hx4efcU0c1aBNl E/o3JgTGNUoLj52ArylHZ/1VcI7T33A9jQ6Eb+tx5YErFaN0hBnfdG34SZo5A6sW ArNID1NY1+5LSeFSwSe5WVlrYaUylp18V66/Gt4FAx9YECvXBjlpysvmshjCBw1T JK/7T612aK6vqxYDHeEVESfR29R1+q5ZHO6EqI0luNr2vX4ZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtzDzrSrgozOH3My/NX80NMBiJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmNhMmNlMTctNTg5Mi0z ZmM2LTg1NTUtZTE0MmQ5NzAzMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU/Kzs+YtcebMmcnRr30Sw9csjtTYu7hHcj59U1UER+vKSJmx08ZBEE MruKxmt4pswRtgQruS4L7U0k9xGeiwMRjfl4ExDBt9mFBEh+839o9KTXrnNR2vtR IGc47CjJPZ4YG9swXxKYS7J3BftMPPE2drfXcKq7RzmrgYklcSU6Q8KsE3wX52co pUjMdDfVU+Jbe+VDAnGFvAlxRdVhPn4jJLNZ0GzhexaCDGF3QBTmIT4lAV29IruW ID5nvfFXGxGTuab13f8AiFkKaNLE5Zl5dwZG2zWmKmIjkEXf+qWkaJxfNk1Bhe5e JSH3YMF66cjwQqwqxeWHzMjyZPEUPok= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:59 2025 by rpki-client