$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa File: 96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa (raw, json) Hash identifier: gAGFMcnjbZC+hJ931glZi88InnyBvc+5JsdB1oPqxH8= Subject key identifier: 6A:DC:5E:03:AA:59:E5:B1:2D:8B:AB:31:DE:02:BE:25:99:3F:75:19 Certificate issuer: /CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Certificate serial: 010D0C9F4328584B110BFD1E2301B99B56655580 Authority key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 20473 IP address blocks: 192.206.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fd:1e:23:01:b9:9b:56:65:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=3a00734c-b357-44d7-bb31-872d3e8b28e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6e:25:f7:50:04:9e:1e:95:d0:12:eb:b4:c2: d0:38:63:7a:44:2e:59:c4:af:08:f7:2f:8a:b2:0d: e2:e3:21:1e:50:eb:8b:90:41:ac:c6:18:1e:77:cf: e6:a1:e7:50:8e:e7:7a:ca:92:c6:c9:6b:12:c9:55: 19:53:b8:3d:49:1a:93:af:8e:1d:38:47:b7:3b:8b: ba:ab:ec:cb:64:95:f1:8a:d6:15:b6:a1:f9:78:ac: 8f:64:11:20:9a:7f:26:6d:bc:39:fd:34:76:96:5c: 3b:a3:d5:9c:ee:24:91:61:29:b9:87:75:23:a4:f6: 9f:f0:46:c2:23:37:51:85:da:91:51:c9:6c:fb:3d: ee:70:e7:e9:5b:e6:15:eb:d4:6e:37:d9:d3:f8:60: 88:55:ff:0b:b5:95:ed:c9:70:a2:b3:26:8a:d9:e4: 8c:34:3d:3d:92:e5:9e:51:c9:2c:2c:49:aa:87:1e: d1:0f:33:fa:06:a9:68:1a:fd:e3:65:d3:ab:11:9c: be:51:f6:88:42:ca:fb:46:5c:d5:f0:0e:54:aa:1c: 20:c1:15:1a:92:f1:de:d2:af:78:1f:6e:74:51:2c: 93:e7:b5:83:0c:75:f4:51:80:b1:5a:b0:ef:b2:42: 28:83:bb:8b:84:8c:53:ab:78:5a:8b:d0:e2:fc:13: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:5E:03:AA:59:E5:B1:2D:8B:AB:31:DE:02:BE:25:99:3F:75:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl X509v3 Authority Key Identifier: keyid:F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer sbgp-ipAddrBlock: critical IPv4: 192.206.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:91:d4:3b:d0:bc:a3:47:61:cd:5b:ff:f7:4d:30:67:35:6b: dd:8b:ed:86:04:6e:30:9c:05:d6:b7:14:43:ce:31:81:21:50: d4:92:4b:8e:d0:c9:31:40:85:88:be:8e:41:fd:25:59:ea:21: 4c:65:d1:04:b5:99:d2:a3:55:39:bd:f4:96:da:a3:05:47:5f: d8:81:76:cd:1d:8f:a7:38:01:b1:4d:56:ad:d8:b0:68:a4:fb: 73:55:cf:6d:01:f5:cf:29:9a:78:b8:2a:50:ee:43:21:60:21: 8f:ae:b0:a7:13:83:f6:92:9e:cd:8d:52:37:cc:cd:6f:c7:ab: b1:b5:06:b0:dd:d7:24:64:0c:7a:7a:22:93:e0:44:a7:98:22: b8:bc:b3:31:4f:e5:b4:9c:3e:fc:9a:73:2d:b9:5d:38:6f:fa: 8f:1f:d0:11:b4:b4:c5:b0:37:3c:07:67:fc:f7:3b:15:7b:d1: 66:73:95:d2:2e:9b:2f:77:00:d5:e5:7b:98:55:cd:79:39:ba: 37:8a:ec:79:a4:f6:1b:12:fb:e5:7c:d8:d9:7a:86:14:0a:89: 1f:6c:78:4b:fc:12:85:28:74:1c:61:31:27:0f:28:17:48:22: d8:0d:ca:2f:bf:5f:f7:02:71:72:89:ad:92:b9:48:46:00:1e: e1:e6:71:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/0eIwG5m1ZlVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2Qx MjdkMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2EwMDczNGMtYjM1Ny00NGQ3LWJiMzEtODcyZDNlOGIyOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm4l91AEnh6V0BLrtMLQOGN6RC5ZxK8I9y+K sg3i4yEeUOuLkEGsxhged8/moedQjud6ypLGyWsSyVUZU7g9SRqTr44dOEe3O4u6 q+zLZJXxitYVtqH5eKyPZBEgmn8mbbw5/TR2llw7o9Wc7iSRYSm5h3UjpPaf8EbC IzdRhdqRUcls+z3ucOfpW+YV69RuN9nT+GCIVf8LtZXtyXCisyaK2eSMND09kuWe UcksLEmqhx7RDzP6BqloGv3jZdOrEZy+UfaIQsr7RlzV8A5UqhwgwRUakvHe0q94 H250USyT57WDDHX0UYCxWrDvskIog7uLhIxTq3hai9Di/BM8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrcXgOqWeWxLYurMd4CviWZP3UZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTMy YmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvOTZmZjFjYTYtMjkzYS0z ZjBjLWFhOWYtMzZmZWE4OTM4MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDEzMmJmOGMtNGFmNy00YjAxLTlj ZDYtZGZhMjE5M2QxMjdkLzQxMzJiZjhjLTRhZjctNGIwMS05Y2Q2LWRmYTIxOTNk MTI3ZC5jcmwwHwYDVR0jBBgwFoAU8rw/YBUjDYtrfOZSWXhueKshF2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEy MTkzZDEyN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuR1DvQvKNHYc1b//dNMGc1a92L7YYEbjCcBda3FEPOMYEhUNSSS47Q yTFAhYi+jkH9JVnqIUxl0QS1mdKjVTm99JbaowVHX9iBds0dj6c4AbFNVq3YsGik +3NVz20B9c8pmni4KlDuQyFgIY+usKcTg/aSns2NUjfMzW/Hq7G1BrDd1yRkDHp6 IpPgRKeYIri8szFP5bScPvyacy25XThv+o8f0BG0tMWwNzwHZ/z3OxV70WZzldIu my93ANXle5hVzXk5ujeK7Hmk9hsS++V82Nl6hhQKiR9seEv8EoUodBxhMScPKBdI ItgNyi+/X/cCcXKJrZK5SEYAHuHmcUE= -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:21 2025 by rpki-client