$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa File: e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa (raw, json) Hash identifier: quM/NdrxmfGDDQnu/lqMdXPakzcekYspdsDMOF3mJVI= Subject key identifier: 19:37:04:70:9E:D6:A9:6F:E2:02:0C:D1:CA:D8:D0:06:C6:22:70:DE Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584B3987040AE25D18F6B0D79080 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 199.47.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:04:0a:e2:5d:18:f6:b0:d7:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=fb5f1cb5-3484-498c-af2f-ad35aba972be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:b0:26:ab:f1:d7:94:40:9c:b0:d2:e7:31: 3b:b6:ee:0a:c6:f0:2a:38:02:8b:54:86:f6:00:4d: e0:c3:dd:c6:50:74:d0:7a:65:a3:fb:59:08:f7:de: 29:79:4a:28:03:fa:64:37:57:de:63:86:f5:24:11: af:fd:37:2f:79:27:f9:4a:5f:2a:24:f3:0a:dc:ad: fc:ee:29:3c:42:e3:d2:32:60:22:27:9c:ed:40:f7: ed:58:e9:9d:81:51:c2:e7:c2:98:41:76:55:60:d6: 98:46:a6:e6:af:bd:c2:8b:07:2a:bb:bc:de:92:3b: 0b:3e:05:e8:ec:7f:aa:45:b9:65:92:37:c6:8d:7d: 29:98:d7:63:ae:3d:dc:58:74:4c:f4:28:35:74:7b: 84:3f:9e:c0:1d:f5:7a:5f:52:60:6d:ba:ff:e8:e4: 84:4c:b4:aa:68:5d:75:f7:31:13:96:88:8b:34:6e: a7:aa:2b:f4:3b:1a:21:d2:3c:0e:44:8e:2e:78:e1: 0e:e6:db:90:26:87:56:64:30:49:4b:05:fc:28:5a: cd:05:07:3d:16:ca:04:aa:68:97:87:4c:a7:f0:97: e7:51:73:f7:59:77:af:4f:03:05:ab:06:25:3a:db: e7:88:e1:6c:e2:11:86:4d:a9:07:d1:87:af:d7:1e: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:37:04:70:9E:D6:A9:6F:E2:02:0C:D1:CA:D8:D0:06:C6:22:70:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/e7e9a678-ff8b-3604-bde7-42c16df85d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:27:4f:3c:52:95:11:05:ff:25:2b:78:f6:97:dc:c2:c1:1f: 3d:30:0c:f4:b7:00:91:d1:76:34:80:03:70:bd:97:15:a6:d6: ce:2e:f8:02:89:98:a9:9e:29:3c:ca:c4:16:5a:20:2f:72:14: 20:92:75:24:29:7a:e6:41:c0:b7:f6:a1:05:76:f9:ac:4e:7e: 54:08:d1:a3:64:ff:d8:f3:4b:2a:29:af:cc:e1:eb:77:0f:99: f3:6f:d8:33:dd:ba:e0:c7:ac:51:69:56:6c:ba:c8:b0:b8:41: d2:78:62:d1:78:fb:01:da:0c:e8:f8:f1:53:9d:b4:e9:c8:29: 60:e9:74:43:bd:6f:86:b7:f7:7e:1a:aa:be:e9:ff:b9:be:6a: 0c:31:89:c2:33:18:dc:47:aa:5b:ed:ee:24:5a:a8:4f:29:bf: ab:f3:59:75:9a:19:dc:fe:5c:8f:30:0f:3c:f3:ee:1c:29:c5: 9f:76:00:a4:1e:c9:cd:f2:05:af:1f:12:07:a0:42:e0:22:64: 2c:c5:24:1b:7a:6c:56:7c:0e:e9:eb:db:13:cf:c6:62:8c:29: 57:03:49:cc:1e:f3:93:0d:f8:c5:93:11:84:04:15:50:12:a7: 19:18:cb:80:31:2b:92:6f:98:17:7b:7d:dd:93:46:d4:cb:14: 4e:27:5e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwQK4l0Y9rDXkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmI1ZjFjYjUtMzQ4NC00OThjLWFmMmYtYWQzNWFiYTk3MmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3luwJqvx15RAnLDS5zE7tu4KxvAqOAKLVIb2 AE3gw93GUHTQemWj+1kI994peUooA/pkN1feY4b1JBGv/TcveSf5Sl8qJPMK3K38 7ik8QuPSMmAiJ5ztQPftWOmdgVHC58KYQXZVYNaYRqbmr73Ciwcqu7zekjsLPgXo 7H+qRbllkjfGjX0pmNdjrj3cWHRM9Cg1dHuEP57AHfV6X1Jgbbr/6OSETLSqaF11 9zETloiLNG6nqiv0Oxoh0jwORI4ueOEO5tuQJodWZDBJSwX8KFrNBQc9FsoEqmiX h0yn8JfnUXP3WXevTwMFqwYlOtvniOFs4hGGTakH0Yev1x7qkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk3BHCe1qlv4gIM0crY0AbGInDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvZTdlOWE2NzgtZmY4Yi0z NjA0LWJkZTctNDJjMTZkZjg1ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwnTzxSlREF/yUrePaX3MLBHz0wDPS3AJHRdjSAA3C9lxWm1s4u+AKJ mKmeKTzKxBZaIC9yFCCSdSQpeuZBwLf2oQV2+axOflQI0aNk/9jzSyopr8zh63cP mfNv2DPduuDHrFFpVmy6yLC4QdJ4YtF4+wHaDOj48VOdtOnIKWDpdEO9b4a3934a qr7p/7m+agwxicIzGNxHqlvt7iRaqE8pv6vzWXWaGdz+XI8wDzzz7hwpxZ92AKQe yc3yBa8fEgegQuAiZCzFJBt6bFZ8Dunr2xPPxmKMKVcDScwe85MN+MWTEYQEFVAS pxkYy4AxK5JvmBd7fd2TRtTLFE4nXto= -----END CERTIFICATE-----Generated at Fri Oct 10 20:57:08 2025 by rpki-client