$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e2e4825-65d2-36d0-af05-7a967d1a3aef.roa File: 7e2e4825-65d2-36d0-af05-7a967d1a3aef.roa (raw, json) Hash identifier: ruVBqEydD4HHEbhkgBfCBd6CWWVTb5mYoaNlMIW6oF8= Subject key identifier: 23:13:DB:19:5C:96:24:EC:F4:AC:F8:8D:4D:35:80:0C:51:D3:5A:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DBA005916B3C1BA3CFD98A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e2e4825-65d2-36d0-af05-7a967d1a3aef.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 96.110.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:00:59:16:b3:c1:ba:3c:fd:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=da40f20b-fd2e-44a1-b253-970a25f062ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:69:ed:f5:8a:38:5b:1a:23:c0:35:7c:e1: 1a:eb:38:89:68:dc:5b:fb:1c:9d:8a:85:39:9c:08: 03:44:a0:1b:80:fb:e5:31:f8:fe:37:d6:6e:07:c2: 9e:8f:a8:e3:c4:38:3e:7c:c3:65:54:06:7c:16:29: 00:5e:bd:b1:05:97:f5:60:76:7c:aa:f1:2a:b6:5b: 4f:60:03:d6:ba:9d:54:cb:d4:7b:06:fa:2a:b8:1b: 31:d8:5e:78:bc:7e:0e:f8:74:92:34:89:d7:ed:32: 11:ad:db:81:df:23:ea:e1:70:ae:42:0c:11:a7:8b: 93:f3:18:84:c5:4c:18:dc:e0:ad:d1:90:84:ea:e4: 06:38:10:ce:fb:00:27:a9:4f:16:aa:d8:ac:04:fb: 8d:f5:91:82:3e:6c:76:ed:97:02:82:da:2c:19:f3: b8:4f:40:a7:54:ac:d0:68:66:01:a1:3a:36:63:97: f5:3c:6e:ee:8d:f4:8c:7f:91:56:6c:d1:f6:de:70: 1a:6a:c8:ec:5c:02:d9:ce:28:c6:26:19:c8:f7:41: 07:f6:a0:c6:6e:db:32:66:81:d6:76:d1:c5:87:e9: 1a:23:55:76:f1:01:bf:a2:b0:20:00:1f:27:69:12: e5:85:d4:a4:e6:91:7f:ff:71:62:43:b1:22:1b:cf: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:13:DB:19:5C:96:24:EC:F4:AC:F8:8D:4D:35:80:0C:51:D3:5A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e2e4825-65d2-36d0-af05-7a967d1a3aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.110.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8e:ad:a7:61:aa:db:8c:12:94:99:ea:4f:ff:68:ef:d7:db: 25:85:47:74:c7:a2:01:a8:38:98:3b:e8:c8:f6:13:9e:56:ea: f3:d2:e7:4b:5c:24:64:9d:e4:c6:fb:05:43:6e:dd:fb:1f:94: 2a:6d:2e:4e:e7:83:38:7c:55:ea:04:77:cf:cd:05:df:c4:1f: 03:e4:21:0d:ff:c1:6d:f4:8e:1b:18:32:a5:a4:f9:0a:14:e4: 27:97:e6:27:db:50:68:ad:2c:10:b1:bb:1b:45:09:d0:c9:dd: a5:ec:5c:cb:5d:92:67:50:56:c6:64:63:74:cc:05:34:c8:1d: d9:84:2b:dc:15:47:9d:2c:73:e6:54:28:78:57:78:e1:fd:61: de:04:4d:3a:4d:bf:0d:40:28:7e:f4:ec:72:c7:43:68:77:4e: e3:e8:bf:5e:19:c5:60:cb:9c:28:32:e5:88:b7:0c:44:93:dd: b1:c9:23:f0:47:ab:1d:a9:a0:e1:a2:6a:e6:d2:aa:f9:28:a3: 52:65:ff:50:f8:5f:e1:8e:69:58:d7:2a:b8:90:8c:e1:f9:db: b0:c4:5d:31:9e:fc:cc:a7:7e:76:3c:76:b0:4f:a6:ed:a6:31: e5:99:b5:1b:43:fd:6b:f2:49:e6:45:6b:cf:1d:ab:45:eb:12: 98:8e:49:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ugBZFrPBujz9mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGE0MGYyMGItZmQyZS00NGExLWIyNTMtOTcwYTI1ZjA2MmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZhp7fWKOFsaI8A1fOEa6ziJaNxb+xydioU5 nAgDRKAbgPvlMfj+N9ZuB8Kej6jjxDg+fMNlVAZ8FikAXr2xBZf1YHZ8qvEqtltP YAPWup1Uy9R7BvoquBsx2F54vH4O+HSSNInX7TIRrduB3yPq4XCuQgwRp4uT8xiE xUwY3OCt0ZCE6uQGOBDO+wAnqU8WqtisBPuN9ZGCPmx27ZcCgtosGfO4T0CnVKzQ aGYBoTo2Y5f1PG7ujfSMf5FWbNH23nAaasjsXALZzijGJhnI90EH9qDGbtsyZoHW dtHFh+kaI1V28QG/orAgAB8naRLlhdSk5pF//3FiQ7EiG89vWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMT2xlcliTs9Kz4jU01gAxR01qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2UyZTQ4MjUtNjVkMi0z NmQwLWFmMDUtN2E5NjdkMWEzYWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCOradhqtuMEpSZ6k//aO/X2yWFR3THogGoOJg76Mj2E55W6vPS50tc JGSd5Mb7BUNu3fsflCptLk7ngzh8VeoEd8/NBd/EHwPkIQ3/wW30jhsYMqWk+QoU 5CeX5ifbUGitLBCxuxtFCdDJ3aXsXMtdkmdQVsZkY3TMBTTIHdmEK9wVR50sc+ZU KHhXeOH9Yd4ETTpNvw1AKH707HLHQ2h3TuPov14ZxWDLnCgy5Yi3DEST3bHJI/BH qx2poOGiaubSqvkoo1Jl/1D4X+GOaVjXKriQjOH527DEXTGe/MynfnY8drBPpu2m MeWZtRtD/WvySeZFa88dq0XrEpiOSc0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:27:50 2025 by rpki-client