$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa File: 95ba1ae1-7080-38af-84e0-b79e7484f667.roa (raw, json) Hash identifier: DlxGys+F+32fQg4zXr7/TLsBXPhyVA22NJr8LtMzVt8= Subject key identifier: 08:D8:B0:A5:18:18:A6:1C:A9:73:8A:33:14:38:80:56:36:76:C7:3B Certificate issuer: /CN=96fbd019-e8e1-4204-844b-f1654a891e0d Certificate serial: 010D0C9F4328584B87B220CA10E5E9F0E5912060 Authority key identifier: 5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 11796 IP address blocks: 198.161.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:20:ca:10:e5:e9:f0:e5:91:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fbd019-e8e1-4204-844b-f1654a891e0d Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=b790daae-5ffd-4bba-8c5b-e91dfdd8edb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:72:a3:1c:f0:6d:8e:74:68:86:3f:e0:62: 38:bb:ab:84:9b:24:85:8f:14:4b:03:d4:86:bc:36: 4e:f6:34:bb:e7:93:09:2a:66:a6:94:e6:b7:4d:fe: 18:25:b3:45:bd:bb:90:00:7e:ef:61:21:5b:fc:e4: 26:22:a2:05:1d:60:59:34:d7:00:d9:6e:13:e2:54: 64:a6:b0:d9:4c:fb:01:c1:99:7b:a8:98:f0:3a:b7: 64:b7:81:bf:73:98:53:d4:94:0c:e9:ee:b9:c6:c1: 8c:89:4d:4e:1f:4e:a9:04:9b:ec:e9:0f:5d:37:ac: df:70:74:e5:66:1b:f1:1c:09:11:8d:9c:44:39:e7: 6e:b7:79:2a:4a:1f:3a:9a:d4:e7:58:b3:9c:0e:d7: 99:5e:15:cd:11:65:21:a1:f3:6e:4a:79:d4:d8:70: a3:7a:c5:21:d8:44:20:37:cf:76:00:20:ad:46:74: 3b:0d:69:fa:e7:91:16:66:75:1f:41:df:bb:23:50: 75:78:86:33:de:f8:fc:62:16:e8:e6:db:08:30:c4: 43:b9:86:3f:25:64:7f:7a:82:84:1b:29:08:09:b9: e0:51:cc:1a:96:1a:aa:13:1d:62:26:85:60:aa:77: 09:fa:35:4d:a6:8b:2f:1b:fd:d0:07:13:f8:34:82: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D8:B0:A5:18:18:A6:1C:A9:73:8A:33:14:38:80:56:36:76:C7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/95ba1ae1-7080-38af-84e0-b79e7484f667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl X509v3 Authority Key Identifier: keyid:5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bd:d2:b1:fa:f2:88:82:f5:78:cc:05:c1:77:dc:56:ed:44: 1d:db:68:4f:40:97:9f:da:d3:29:37:5c:65:67:49:bb:d0:48: 40:44:f8:f1:bd:93:8b:46:ee:87:33:70:43:cc:7d:13:a4:f8: 39:6e:22:34:6b:1d:3d:b9:96:ef:b7:85:ff:0b:a9:3f:49:e3: 08:b6:78:90:2a:6b:e6:3c:09:0d:39:52:cd:70:d5:fb:42:5d: ac:77:26:67:8a:ab:b6:32:15:50:69:ab:7b:82:7f:6e:c1:4a: dd:b6:92:03:0f:e7:b7:3f:7b:0a:32:c7:1c:d3:4a:5b:bd:68: 13:6c:1e:d2:4e:7f:d4:d5:23:96:4b:05:b4:6b:56:e5:f5:21: ce:f2:88:8e:f4:e8:63:7b:88:26:af:6d:04:ae:25:7d:5e:0e: 3e:e1:49:d5:98:7b:42:a0:17:25:b6:50:7b:fa:93:65:dd:0d: 8a:90:29:ad:15:fc:aa:11:68:f9:db:a6:56:0a:23:de:d3:16: 7c:8e:ac:5c:74:a1:a8:e5:2f:7f:33:ca:75:69:93:2a:c7:bc: ee:e0:40:ad:3a:a5:75:ac:b1:67:c5:ff:3c:db:6a:e8:e5:64: 71:0d:85:d3:24:4b:ef:e2:78:a3:d1:13:8e:7f:23:6e:70:53: 67:96:70:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiDKEOXp8OWRIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZmYmQwMTktZThlMS00MjA0LTg0NGItZjE2NTRhODkx ZTBkMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk Yjc5MGRhYWUtNWZmZC00YmJhLThjNWItZTkxZGZkZDhlZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh51yoxzwbY50aIY/4GI4u6uEmySFjxRLA9SG vDZO9jS755MJKmamlOa3Tf4YJbNFvbuQAH7vYSFb/OQmIqIFHWBZNNcA2W4T4lRk prDZTPsBwZl7qJjwOrdkt4G/c5hT1JQM6e65xsGMiU1OH06pBJvs6Q9dN6zfcHTl ZhvxHAkRjZxEOedut3kqSh86mtTnWLOcDteZXhXNEWUhofNuSnnU2HCjesUh2EQg N892ACCtRnQ7DWn655EWZnUfQd+7I1B1eIYz3vj8Yhbo5tsIMMRDuYY/JWR/eoKE GykICbngUcwalhqqEx1iJoVgqncJ+jVNposvG/3QBxP4NIKK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjYsKUYGKYcqXOKMxQ4gFY2dsc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NmZi ZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1NGE4OTFlMGQvOTViYTFhZTEtNzA4MC0z OGFmLTg0ZTAtYjc5ZTc0ODRmNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTZmYmQwMTktZThlMS00MjA0LTg0 NGItZjE2NTRhODkxZTBkLzk2ZmJkMDE5LWU4ZTEtNDIwNC04NDRiLWYxNjU0YTg5 MWUwZC5jcmwwHwYDVR0jBBgwFoAUWzMbFDbtwlbSXSmRn8DrYFFNj5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85NmZiZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1 NGE4OTFlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+90rH68oiC9XjMBcF33FbtRB3baE9Al5/a0yk3XGVnSbvQSEBE+PG9 k4tG7oczcEPMfROk+DluIjRrHT25lu+3hf8LqT9J4wi2eJAqa+Y8CQ05Us1w1ftC Xax3JmeKq7YyFVBpq3uCf27BSt22kgMP57c/ewoyxxzTSlu9aBNsHtJOf9TVI5ZL BbRrVuX1Ic7yiI706GN7iCavbQSuJX1eDj7hSdWYe0KgFyW2UHv6k2XdDYqQKa0V /KoRaPnbplYKI97TFnyOrFx0oajlL38zynVpkyrHvO7gQK06pXWssWfF/zzbaujl ZHENhdMkS+/ieKPRE45/I25wU2eWcGI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:22 2025 by rpki-client