$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa File: 2c256c98-a43c-3061-80b5-8c349c47380b.roa (raw, json) Hash identifier: JzAEMl1HbClDf8C40swgmmR8ELRCEbFdmwUlFNuD6fA= Subject key identifier: D7:7B:B3:E6:03:A3:84:16:01:F6:5B:1A:EB:93:FB:9E:60:7A:A1:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EEEB77122D7EC0D0CE99DDA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 96.17.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:71:22:d7:ec:0d:0c:e9:9d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=958775fa-17c7-4e17-a710-99f6b692323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6b:11:b2:5e:72:21:15:9a:2f:b1:96:12:f5: 18:66:f0:52:06:a6:0a:b5:be:ca:13:72:55:10:f0: 31:87:4c:44:1a:54:47:8c:41:d9:b7:38:ad:ae:3a: 58:1b:48:b3:7f:9b:d3:ad:7a:97:69:2d:7a:a6:c8: 6d:54:7d:c8:5e:19:23:31:cf:fc:fe:c6:d6:a0:28: 6b:14:a2:a3:c6:4b:86:d9:e1:c3:ad:93:f6:cd:51: c4:1e:ae:22:35:73:89:86:ea:7c:b4:96:7b:f1:d8: f5:92:42:de:ae:45:ad:bf:d9:59:eb:7a:9f:69:20: ec:0c:75:5f:b4:f4:a5:ce:f3:8c:13:fa:e9:06:ee: 0c:5d:99:ab:59:90:d0:bb:12:ef:6a:ba:b2:1b:5c: cd:59:bd:a0:8a:ac:d4:ea:e6:36:fb:34:b8:d4:8b: d1:b5:96:67:2a:59:2c:d1:32:2f:4c:8c:14:92:40: 35:cc:d6:da:9d:15:fa:e0:fd:82:24:55:4a:e6:72: 3e:c5:7b:7d:4e:2d:8a:3f:cb:58:44:1c:a8:af:63: 22:b6:4e:00:b9:3b:7b:91:10:96:4c:fe:8e:81:da: 44:79:d3:c0:3b:6d:45:18:68:56:77:15:39:22:38: 9d:5c:90:7d:42:fe:c2:cb:bf:cd:cd:b1:d5:b9:bc: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:B3:E6:03:A3:84:16:01:F6:5B:1A:EB:93:FB:9E:60:7A:A1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:47:45:18:71:87:3f:13:42:b6:65:19:39:16:55:d3:f6:f3: ce:0f:d1:be:ea:bf:fa:7d:1a:86:fc:31:41:e4:0c:db:f5:67: 15:4c:69:67:7c:f8:05:97:52:60:a5:99:93:d4:4c:ce:42:1c: 98:65:3c:f3:a8:19:6c:8b:ca:4f:f7:99:60:04:4f:ef:2e:bb: ca:1a:9f:a1:80:12:b8:10:ab:24:2f:bc:b0:6b:33:a5:cc:ab: 64:fa:72:5d:c1:cc:9f:7b:dc:e0:90:be:89:b1:ab:16:78:e4: 19:21:5d:a7:ee:3f:66:33:09:da:08:e6:d0:98:3f:66:bd:55: db:46:bb:ba:fe:67:1c:24:d4:f8:b0:bc:73:74:9b:fb:92:b9: c5:ad:da:51:11:15:8b:a6:fc:ec:1b:d4:b9:88:81:ec:02:02: bc:d6:4c:14:b5:25:72:c1:4e:68:05:5a:8d:24:cf:b6:12:ca: 92:5e:61:c1:78:8a:71:d3:5c:56:7b:1d:00:3f:ac:00:6b:f3: 4f:62:fe:9d:f4:ba:d4:2f:e0:79:b2:5a:c9:47:ab:e0:f9:7f: c3:cf:a5:67:28:23:57:88:b2:24:d2:4d:2f:74:2c:1d:ce:2c: 0b:09:66:7f:02:25:f2:2c:ed:8c:ef:1a:86:65:2e:04:9a:9f: 67:a8:2c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3Ei1+wNDOmd2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTU4Nzc1ZmEtMTdjNy00ZTE3LWE3MTAtOTlmNmI2OTIzMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2sRsl5yIRWaL7GWEvUYZvBSBqYKtb7KE3JV EPAxh0xEGlRHjEHZtzitrjpYG0izf5vTrXqXaS16pshtVH3IXhkjMc/8/sbWoChr FKKjxkuG2eHDrZP2zVHEHq4iNXOJhup8tJZ78dj1kkLerkWtv9lZ63qfaSDsDHVf tPSlzvOME/rpBu4MXZmrWZDQuxLvarqyG1zNWb2giqzU6uY2+zS41IvRtZZnKlks 0TIvTIwUkkA1zNbanRX64P2CJFVK5nI+xXt9Ti2KP8tYRByor2Mitk4AuTt7kRCW TP6OgdpEedPAO21FGGhWdxU5IjidXJB9Qv7Cy7/NzbHVubwemwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNd7s+YDo4QWAfZbGuuT+55geqEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmMyNTZjOTgtYTQzYy0z MDYxLTgwYjUtOGMzNDljNDczODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdHRRhxhz8TQrZlGTkWVdP2884P0b7qv/p9Gob8MUHkDNv1ZxVMaWd8 +AWXUmClmZPUTM5CHJhlPPOoGWyLyk/3mWAET+8uu8oan6GAErgQqyQvvLBrM6XM q2T6cl3BzJ973OCQvomxqxZ45BkhXafuP2YzCdoI5tCYP2a9VdtGu7r+Zxwk1Piw vHN0m/uSucWt2lERFYum/Owb1LmIgewCArzWTBS1JXLBTmgFWo0kz7YSypJeYcF4 inHTXFZ7HQA/rABr809i/p30utQv4HmyWslHq+D5f8PPpWcoI1eIsiTSTS90LB3O LAsJZn8CJfIs7YzvGoZlLgSan2eoLBE= -----END CERTIFICATE-----Generated at Sat Sep 5 04:39:42 2026 by rpki-client