$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/2af36e6b-0309-3bc7-921e-8ccb5f40b622.roa File: 2af36e6b-0309-3bc7-921e-8ccb5f40b622.roa (raw, json) Hash identifier: PfBv1XkydIDgmbFMU6KMhiK6f96tpCbLcLgAbWEiqmg= Subject key identifier: 54:DF:FE:8E:B4:AC:E1:FD:29:53:AB:32:27:4B:BD:95:C8:61:B4:ED Certificate issuer: /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Certificate serial: 010D0C9F4328584B3A79BE2606EAFF17B6B3FE10 Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/2af36e6b-0309-3bc7-921e-8ccb5f40b622.roa Signing time: Wed 17 Sep 2025 21:09:53 +0000 ROA not before: Wed 17 Sep 2025 21:09:53 +0000 ROA not after: Tue 16 Dec 2025 22:09:53 +0000 asID: 26042 IP address blocks: 96.47.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:79:be:26:06:ea:ff:17:b6:b3:fe:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Validity Not Before: Sep 17 21:09:53 2025 GMT Not After : Dec 16 22:09:53 2025 GMT Subject: CN=bb9b3e29-d78d-42e8-8861-749f529d3f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:34:c8:d9:d0:bc:85:e4:89:e3:a9:9d:ff: ee:23:54:d0:a2:5b:9e:af:11:b7:57:d2:a9:f6:72: f5:09:7f:2b:66:9b:1a:f3:b0:6f:5a:e5:a5:4e:0e: 9b:41:37:04:33:5b:c6:1a:7e:13:c9:bf:c2:63:d9: 8c:49:7a:a3:ec:99:0a:da:8a:2b:d6:04:70:72:7b: 91:ee:3b:ea:b6:e7:c2:df:fa:56:cd:f1:d9:b0:3f: 0c:8a:49:20:42:a7:f4:61:2b:93:0c:53:a5:78:44: a2:90:64:49:7c:f0:c3:1b:be:e9:be:0a:b4:c3:f5: e2:e3:1a:0f:6c:52:bf:e0:38:9b:bd:04:26:bf:b2: 62:1c:e6:03:e9:25:69:f3:fa:6e:31:f9:26:f3:94: 2f:39:87:5c:48:ca:da:13:c1:36:30:45:d3:02:29: f0:bb:77:74:6e:5a:1c:15:d6:95:c3:20:68:1f:0a: f7:78:c3:3e:ac:a6:28:f6:c2:e2:e8:22:c7:1b:87: 98:dc:3d:03:db:3a:fd:23:77:4a:6b:d4:92:6e:46: ff:47:60:02:38:fc:e4:bd:c0:24:72:cb:a8:c8:2f: 8e:0b:ff:7b:15:71:47:37:9d:dd:15:9d:ee:3d:5a: 82:26:12:9a:e8:c2:00:74:e4:d8:1c:2b:1a:f7:21: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:FE:8E:B4:AC:E1:FD:29:53:AB:32:27:4B:BD:95:C8:61:B4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/2af36e6b-0309-3bc7-921e-8ccb5f40b622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl X509v3 Authority Key Identifier: keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer sbgp-ipAddrBlock: critical IPv4: 96.47.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:96:6f:ff:d7:bc:08:bd:0f:83:8d:af:b2:43:1e:5d:9b:54: 2d:9a:10:84:ec:42:fb:be:a0:0b:45:82:c0:08:73:7a:d0:a5: cf:42:08:e9:3c:4a:94:60:55:33:4b:65:47:f8:06:01:c2:d0: 12:ee:1f:cf:a4:5c:f0:01:58:de:85:3b:33:cb:61:18:77:93: f8:41:58:6e:ab:24:18:e5:6e:bd:0a:8e:9b:f9:8c:1c:cc:80: 95:c4:7f:5d:f8:76:f0:01:03:c5:11:77:c1:bf:a7:90:0b:53: a4:b7:4b:43:7c:e5:15:d8:9b:23:ec:f6:92:34:25:3f:06:fb: 61:fe:b6:05:06:88:29:8c:47:57:c5:4c:95:a4:f1:c1:2c:f6: a5:9b:c0:e6:7f:6f:89:b6:9a:97:ab:0f:ed:93:0e:c5:43:3f: ca:ac:6a:b2:e1:61:56:69:4e:8d:47:95:06:e9:47:8f:73:e1: c6:35:8d:93:fc:bc:35:8f:20:52:d9:3a:d8:b9:c3:17:5b:0a: 63:c4:3e:c4:ba:c8:59:99:92:f4:e1:8a:21:6b:66:7f:4d:67: c0:18:cb:ca:0a:c8:5b:27:46:17:c4:60:6f:c4:ab:38:cc:c3: e2:30:d5:42:fc:94:db:17:5f:06:2c:5e:e0:c1:31:80:b9:42: 56:79:d5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs6eb4mBur/F7az/hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1NjNkYzktNmI4Ny00ZDgyLThhNTgtNmI4Yjc5MTcw OTJjMB4XDTI1MDkxNzIxMDk1M1oXDTI1MTIxNjIyMDk1M1owLzEtMCsGA1UEAxMk YmI5YjNlMjktZDc4ZC00MmU4LTg4NjEtNzQ5ZjUyOWQzZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle00yNnQvIXkieOpnf/uI1TQoluerxG3V9Kp 9nL1CX8rZpsa87BvWuWlTg6bQTcEM1vGGn4Tyb/CY9mMSXqj7JkK2oor1gRwcnuR 7jvqtufC3/pWzfHZsD8MikkgQqf0YSuTDFOleESikGRJfPDDG77pvgq0w/Xi4xoP bFK/4DibvQQmv7JiHOYD6SVp8/puMfkm85QvOYdcSMraE8E2MEXTAinwu3d0bloc FdaVwyBoHwr3eMM+rKYo9sLi6CLHG4eY3D0D2zr9I3dKa9SSbkb/R2ACOPzkvcAk csuoyC+OC/97FXFHN53dFZ3uPVqCJhKa6MIAdOTYHCsa9yGyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTf/o60rOH9KVOrMidLvZXIYbTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2 M2RjOS02Yjg3LTRkODItOGE1OC02YjhiNzkxNzA5MmMvMmFmMzZlNmItMDMwOS0z YmM3LTkyMWUtOGNjYjVmNDBiNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGM1NjNkYzktNmI4Ny00ZDgyLThh NTgtNmI4Yjc5MTcwOTJjL2RjNTYzZGM5LTZiODctNGQ4Mi04YTU4LTZiOGI3OTE3 MDkyYy5jcmwwHwYDVR0jBBgwFoAUoDb4C8itBT9EjLiiq6o5Zlfg040wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2M2RjOS02Yjg3LTRkODItOGE1OC02Yjhi NzkxNzA5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC+nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImWb//XvAi9D4ONr7JDHl2bVC2aEITsQvu+oAtFgsAIc3rQpc9CCOk8 SpRgVTNLZUf4BgHC0BLuH8+kXPABWN6FOzPLYRh3k/hBWG6rJBjlbr0Kjpv5jBzM gJXEf134dvABA8URd8G/p5ALU6S3S0N85RXYmyPs9pI0JT8G+2H+tgUGiCmMR1fF TJWk8cEs9qWbwOZ/b4m2mperD+2TDsVDP8qsarLhYVZpTo1HlQbpR49z4cY1jZP8 vDWPIFLZOti5wxdbCmPEPsS6yFmZkvThiiFrZn9NZ8AYy8oKyFsnRhfEYG/EqzjM w+Iw1UL8lNsXXwYsXuDBMYC5QlZ51Xc= -----END CERTIFICATE-----Generated at Fri Sep 19 08:11:39 2025 by rpki-client