$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/df2b7e7f-48d3-3634-bef8-ed64cfc8b561.roa File: df2b7e7f-48d3-3634-bef8-ed64cfc8b561.roa (raw, json) Hash identifier: sfzrfaUoLOIerCjNiJIZjqKMFt/BWMoTgDwO8XbZOUM= Subject key identifier: E5:EC:D0:24:A9:76:86:A6:C7:D0:22:90:9A:0C:5D:4E:97:66:5B:E5 Certificate issuer: /CN=96fbd019-e8e1-4204-844b-f1654a891e0d Certificate serial: 010D0C9F4328584B8E206FC4568529F3A3B314C0 Authority key identifier: 5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/df2b7e7f-48d3-3634-bef8-ed64cfc8b561.roa Signing time: Fri 17 Oct 2025 20:17:50 +0000 ROA not before: Fri 17 Oct 2025 20:17:50 +0000 ROA not after: Thu 15 Jan 2026 21:17:50 +0000 asID: 11796 IP address blocks: 205.137.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:20:6f:c4:56:85:29:f3:a3:b3:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96fbd019-e8e1-4204-844b-f1654a891e0d Validity Not Before: Oct 17 20:17:50 2025 GMT Not After : Jan 15 21:17:50 2026 GMT Subject: CN=b391b494-1b76-474d-9faf-1d6af3c99f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:d1:30:c1:de:7f:66:c0:e9:40:5e:9c:31: bf:59:47:40:8d:dd:e1:60:b4:16:6a:a2:fb:4b:72: 30:f9:8e:63:91:6c:82:e3:b9:8a:f0:43:c2:d0:34: 45:f0:b3:86:b6:18:29:43:c4:fa:61:19:d7:24:91: 7c:fd:c0:02:6e:fd:fc:2c:a9:73:40:a9:38:65:92: bb:af:65:2e:ee:96:76:91:a0:48:90:af:bb:fc:17: 52:bc:62:30:36:ec:77:4e:22:9c:46:be:34:a5:d5: e0:23:16:90:ff:dd:93:30:1a:67:1b:e0:3f:19:9b: 4f:60:e5:53:41:2c:fb:d7:78:68:2b:31:d2:8d:47: 2e:1b:30:b5:8c:a9:11:07:60:15:4e:17:05:93:f5: b1:00:2a:52:fa:94:e1:20:0d:03:a8:49:39:b4:5a: d7:7e:27:1a:b6:84:be:58:8b:4e:fd:36:67:9e:8b: 15:d3:07:1c:9b:ec:85:dc:25:4c:52:b9:05:a5:8f: d0:be:8d:81:0b:83:d9:ca:56:9f:fb:03:f9:11:3f: 58:9b:b9:23:8b:e4:3e:cc:1b:60:f8:1f:7d:ad:18: 97:b9:05:b3:37:da:24:e4:88:02:7c:0c:4e:95:44: f0:71:ef:3c:2f:32:34:b2:a0:f1:b3:9d:82:9c:02: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EC:D0:24:A9:76:86:A6:C7:D0:22:90:9A:0C:5D:4E:97:66:5B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/df2b7e7f-48d3-3634-bef8-ed64cfc8b561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl X509v3 Authority Key Identifier: keyid:5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer sbgp-ipAddrBlock: critical IPv4: 205.137.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:40:7a:d0:f7:a9:57:61:34:4c:11:fe:c5:e9:bf:dc:26:7e: ba:8e:60:67:e7:f2:c5:f1:1b:f0:6b:76:58:c2:e5:a5:1d:74: 75:69:68:3f:98:1d:9a:d5:76:9b:24:5a:c9:1f:6b:01:19:24: 6f:90:95:8b:7f:94:9c:ae:d5:49:71:d4:eb:e7:e8:c8:92:6d: 4c:33:c9:20:40:7b:93:c9:8e:47:2e:84:f9:dc:7f:aa:e6:b5: 0d:8a:29:1e:14:e0:c5:88:0f:c5:99:69:ad:74:8f:6b:2d:2d: c5:0a:50:f7:ce:92:59:d3:e0:dc:85:c9:7c:60:a2:23:67:45: 55:8a:f4:42:78:f3:2a:a9:ea:ac:8e:9b:6b:b9:8a:9d:72:10: 00:7d:bb:e2:d9:e9:23:85:d9:b7:39:a2:95:ca:a6:c9:97:52: d0:ca:50:84:41:7a:8d:59:0f:d2:37:a3:6a:97:7d:4d:6f:24: bc:13:c1:7f:f8:e8:26:f4:82:6a:08:ad:dd:a2:0a:cb:02:1b: da:2f:cb:17:e7:fe:ff:59:12:00:ee:92:84:cd:cc:c3:b7:d5: 72:06:6f:06:a2:26:34:a0:0d:01:81:20:ed:61:7d:e4:d4:8f: 4b:e6:2a:be:29:1d:19:a6:d6:b4:f6:77:d7:93:30:f7:f5:04: 64:ce:25:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOIG/EVoUp86OzFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZmYmQwMTktZThlMS00MjA0LTg0NGItZjE2NTRhODkx ZTBkMB4XDTI1MTAxNzIwMTc1MFoXDTI2MDExNTIxMTc1MFowLzEtMCsGA1UEAxMk YjM5MWI0OTQtMWI3Ni00NzRkLTlmYWYtMWQ2YWYzYzk5ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq/RMMHef2bA6UBenDG/WUdAjd3hYLQWaqL7 S3Iw+Y5jkWyC47mK8EPC0DRF8LOGthgpQ8T6YRnXJJF8/cACbv38LKlzQKk4ZZK7 r2Uu7pZ2kaBIkK+7/BdSvGIwNux3TiKcRr40pdXgIxaQ/92TMBpnG+A/GZtPYOVT QSz713hoKzHSjUcuGzC1jKkRB2AVThcFk/WxACpS+pThIA0DqEk5tFrXficatoS+ WItO/TZnnosV0wccm+yF3CVMUrkFpY/Qvo2BC4PZylaf+wP5ET9Ym7kji+Q+zBtg +B99rRiXuQWzN9ok5IgCfAxOlUTwce88LzI0sqDxs52CnAK0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXs0CSpdoamx9AikJoMXU6XZlvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NmZi ZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1NGE4OTFlMGQvZGYyYjdlN2YtNDhkMy0z NjM0LWJlZjgtZWQ2NGNmYzhiNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTZmYmQwMTktZThlMS00MjA0LTg0 NGItZjE2NTRhODkxZTBkLzk2ZmJkMDE5LWU4ZTEtNDIwNC04NDRiLWYxNjU0YTg5 MWUwZC5jcmwwHwYDVR0jBBgwFoAUWzMbFDbtwlbSXSmRn8DrYFFNj5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85NmZiZDAxOS1lOGUxLTQyMDQtODQ0Yi1mMTY1 NGE4OTFlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzYn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClAetD3qVdhNEwR/sXpv9wmfrqOYGfn8sXxG/BrdljC5aUddHVpaD+Y HZrVdpskWskfawEZJG+QlYt/lJyu1Ulx1Ovn6MiSbUwzySBAe5PJjkcuhPncf6rm tQ2KKR4U4MWID8WZaa10j2stLcUKUPfOklnT4NyFyXxgoiNnRVWK9EJ48yqp6qyO m2u5ip1yEAB9u+LZ6SOF2bc5opXKpsmXUtDKUIRBeo1ZD9I3o2qXfU1vJLwTwX/4 6Cb0gmoIrd2iCssCG9ovyxfn/v9ZEgDukoTNzMO31XIGbwaiJjSgDQGBIO1hfeTU j0vmKr4pHRmm1rT2d9eTMPf1BGTOJXk= -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:31 2025 by rpki-client