$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa File: 2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json) Hash identifier: sAWUGX9c9/iFhna2ECsL7yw/0MAXuEKsOM9QdOdSLGU= Subject key identifier: 20:8C:62:1E:C4:E0:C2:C7:9B:02:DF:C4:87:F8:AB:E7:6F:53:58:3B Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584B398703E1232644D53A7C6900 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 199.47.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:03:e1:23:26:44:d5:3a:7c:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=5926a321-4be0-4ae8-9af3-d0c44701c7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:bb:ad:83:38:8c:4a:34:d4:26:dc:0c:f6: 05:32:d1:dc:9b:38:8c:05:fc:8b:65:bb:ca:cd:e9: 8f:c4:df:e0:1f:ed:f0:a7:fd:01:e3:f4:c8:51:cd: 98:14:26:4a:2c:97:8d:3a:d0:0d:ce:13:db:ab:c9: 70:18:bb:3c:58:9d:0f:d8:37:6d:cc:0e:a2:68:9f: cc:55:60:bf:55:f3:7c:a2:9a:40:ab:b9:65:33:20: ef:4b:df:e9:18:7b:5d:d2:a8:e7:45:73:f5:32:39: 9e:eb:05:3f:de:c7:9a:b0:51:95:63:61:74:83:81: db:32:42:5f:56:34:79:ac:65:4e:47:96:1d:6f:72: 33:60:9d:bf:ab:a7:33:60:6a:03:9e:49:b5:01:91: bd:67:b6:be:6a:f7:99:a5:9d:ba:4f:35:86:21:34: 95:5b:1a:ed:f3:6d:09:39:a6:ea:cf:97:56:79:f5: 9f:a3:49:c8:05:d2:9f:ab:a8:f2:d5:55:05:0b:31: 77:94:1b:73:7f:ea:4e:95:d0:7e:98:cc:94:e0:fe: 9d:62:fe:3e:1d:ce:9f:e2:c2:17:03:5a:1b:74:24: a6:62:b5:2b:00:df:9b:27:a9:54:63:bd:78:ce:4d: 1a:ec:33:ba:35:37:39:7a:0d:c4:8c:fe:05:a7:8a: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:62:1E:C4:E0:C2:C7:9B:02:DF:C4:87:F8:AB:E7:6F:53:58:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:de:66:06:76:9e:84:18:e4:84:2a:6a:90:41:03:68:b4:8b: 5c:a9:cc:e4:98:21:ae:3d:cc:5d:29:3d:90:f8:f3:40:20:1d: d8:ae:c9:e7:8e:d7:a4:f7:09:1a:a6:6d:c1:b8:7f:6f:11:b9: cb:2d:4d:5b:d6:61:0f:ee:9b:72:30:2f:7f:1d:a9:29:1d:43: d1:b3:24:dd:51:5f:f7:db:ce:46:6c:c8:51:41:49:26:e8:24: 93:6e:f3:2d:c1:11:8f:0f:38:f3:c6:b9:db:b9:24:37:5f:3f: a8:11:c2:9c:7b:1e:81:22:24:66:e4:d9:f9:33:72:2a:c8:db: 1c:c0:98:2d:5c:88:11:46:de:51:64:18:5c:63:68:00:63:bb: e3:87:30:e0:9b:a0:c7:f8:f0:1a:ab:57:a3:f8:1c:b4:00:7b: 4b:36:26:b1:5e:4c:6d:c2:a8:04:10:e7:e5:e6:ba:ce:2b:f6: b7:08:02:7c:e7:1a:1a:b0:d9:a5:dc:a3:09:1f:0b:42:01:93: 89:d4:83:7e:04:6e:fe:d8:8a:1c:2d:e4:b0:02:0a:6e:20:2c: 2f:5b:3b:fc:d2:86:87:54:78:13:2b:09:b1:2e:8c:c4:66:ef: f3:34:0a:23:95:af:e1:7a:f2:5a:1f:eb:cc:e4:f5:aa:a7:aa: 82:28:ab:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwPhIyZE1Tp8aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NTkyNmEzMjEtNGJlMC00YWU4LTlhZjMtZDBjNDQ3MDFjN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtK7rYM4jEo01CbcDPYFMtHcmziMBfyLZbvK zemPxN/gH+3wp/0B4/TIUc2YFCZKLJeNOtANzhPbq8lwGLs8WJ0P2DdtzA6iaJ/M VWC/VfN8oppAq7llMyDvS9/pGHtd0qjnRXP1Mjme6wU/3seasFGVY2F0g4HbMkJf VjR5rGVOR5Ydb3IzYJ2/q6czYGoDnkm1AZG9Z7a+aveZpZ26TzWGITSVWxrt820J Oabqz5dWefWfo0nIBdKfq6jy1VUFCzF3lBtzf+pOldB+mMyU4P6dYv4+Hc6f4sIX A1obdCSmYrUrAN+bJ6lUY714zk0a7DO6NTc5eg3EjP4Fp4qFgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCMYh7E4MLHmwLfxIf4q+dvU1g7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMmQ5ZDMzMjEtZGI5Zi0z MDZjLTkyMjgtYWUwNmJlNGRlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKveZgZ2noQY5IQqapBBA2i0i1ypzOSYIa49zF0pPZD480AgHdiuyeeO 16T3CRqmbcG4f28RucstTVvWYQ/um3IwL38dqSkdQ9GzJN1RX/fbzkZsyFFBSSbo JJNu8y3BEY8POPPGudu5JDdfP6gRwpx7HoEiJGbk2fkzcirI2xzAmC1ciBFG3lFk GFxjaABju+OHMOCboMf48BqrV6P4HLQAe0s2JrFeTG3CqAQQ5+Xmus4r9rcIAnzn Ghqw2aXcowkfC0IBk4nUg34Ebv7Yihwt5LACCm4gLC9bO/zShodUeBMrCbEujMRm 7/M0CiOVr+F68lof68zk9aqnqoIoq7k= -----END CERTIFICATE-----Generated at Fri Oct 10 20:57:07 2025 by rpki-client