$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e054fe6-7f35-3a9b-bdaa-436d4944b7a7.roa File: 3e054fe6-7f35-3a9b-bdaa-436d4944b7a7.roa (raw, json) Hash identifier: 3cy1WdIwqnzpPItynSKKR7dVAaKak6eYjzcnCnrKKYU= Subject key identifier: E4:3D:F4:AC:53:3D:D7:45:FB:45:14:CA:62:E2:5E:8B:0E:18:0C:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EEEB7720FBC70E0E8EDE455C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e054fe6-7f35-3a9b-bdaa-436d4944b7a7.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 16625 IP address blocks: 96.17.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:72:0f:bc:70:e0:e8:ed:e4:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=c6f11b74-37ff-4398-85f1-a09ff95434e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:21:f2:89:a4:1f:a5:bd:06:c8:a9:9b:3c: 7b:2c:e6:d6:1e:29:a7:31:52:b3:12:b8:38:2e:a8: 33:6f:e2:0b:02:8b:5c:3c:42:bf:58:46:ab:72:74: 37:2a:2b:ac:5c:77:55:1a:a4:23:97:b7:ff:f7:c9: 68:0a:e9:e6:ae:80:d9:05:29:81:51:32:7e:f6:b3: 9e:9b:a5:c8:0e:b2:27:d7:07:de:a4:92:17:8d:ec: 18:73:43:a3:b0:0d:9a:05:2e:cf:68:04:05:ce:c0: 5a:6e:82:8e:60:d8:51:b1:8d:ff:54:98:9b:b2:97: e5:91:2d:39:ff:28:66:44:6b:c4:90:05:34:6a:e8: 6d:1b:4b:b8:28:06:4a:46:e9:a4:c4:59:42:7b:26: 8f:16:0e:b1:fc:ef:ac:79:ec:b1:d2:11:31:22:4e: fa:a1:df:00:da:4c:af:7f:ef:34:8f:8a:c3:43:87: f6:dc:b6:cb:af:d1:3b:5c:62:f1:21:a7:1d:da:05: 9b:2f:1a:44:b7:73:d7:06:61:e9:37:da:10:93:92: bd:84:2c:61:20:f8:37:76:f6:db:66:66:ab:0b:b1: 14:b0:15:26:39:3e:ec:c7:82:32:df:45:cb:35:08: 47:5c:28:df:86:11:bc:12:37:01:14:af:5d:3f:07: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:F4:AC:53:3D:D7:45:FB:45:14:CA:62:E2:5E:8B:0E:18:0C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e054fe6-7f35-3a9b-bdaa-436d4944b7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:74:41:31:be:1d:e6:3d:4f:fd:c3:40:d3:d3:d6:8a:80:0b: cc:3f:4d:8d:0a:e0:20:e0:3c:fa:95:09:94:07:90:b1:2f:18: 50:d3:25:a3:62:61:4e:cf:9c:93:b9:81:94:fc:15:14:75:b9: 64:93:88:1d:49:1c:13:aa:21:86:fd:8b:3a:9a:0d:d4:b0:0d: ed:38:cc:8b:d9:fb:f1:57:ab:07:d0:86:cd:f8:95:21:87:d3: 4e:0e:21:27:47:9a:d1:15:b7:23:26:c3:4c:9c:da:38:ca:db: b5:99:d4:88:9f:94:c3:45:19:91:6d:e3:4b:81:ed:8f:50:6d: 65:05:63:65:43:24:28:4c:1a:96:06:f8:b1:3f:5a:d7:1a:71: 35:f1:c6:4c:79:84:d0:45:44:77:50:29:34:c5:10:70:b9:0d: 52:28:10:5e:95:38:42:49:5f:01:bc:ae:21:18:d6:81:22:ad: 6b:ad:06:81:9c:fe:3a:a8:98:22:ac:ae:a4:a9:e0:c6:67:d0: 53:99:c1:17:9e:0c:53:fb:d1:98:aa:24:05:30:7f:3f:bf:e4: 78:fa:41:9a:3f:8e:d5:ea:76:6b:bb:49:65:8a:61:2e:db:3a: 91:1a:ae:76:18:7e:21:c6:36:3f:6f:33:53:64:c5:fb:32:c2: 39:96:d5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3IPvHDg6O3kVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk YzZmMTFiNzQtMzdmZi00Mzk4LTg1ZjEtYTA5ZmY5NTQzNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Uh8omkH6W9Bsipmzx7LObWHimnMVKzErg4 Lqgzb+ILAotcPEK/WEarcnQ3KiusXHdVGqQjl7f/98loCunmroDZBSmBUTJ+9rOe m6XIDrIn1wfepJIXjewYc0OjsA2aBS7PaAQFzsBaboKOYNhRsY3/VJibspflkS05 /yhmRGvEkAU0auhtG0u4KAZKRumkxFlCeyaPFg6x/O+seeyx0hExIk76od8A2kyv f+80j4rDQ4f23LbLr9E7XGLxIacd2gWbLxpEt3PXBmHpN9oQk5K9hCxhIPg3dvbb ZmarC7EUsBUmOT7sx4Iy30XLNQhHXCjfhhG8EjcBFK9dPwfEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ99KxTPddF+0UUymLiXosOGAzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UwNTRmZTYtN2YzNS0z YTliLWJkYWEtNDM2ZDQ5NDRiN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYBHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt0QTG+HeY9T/3DQNPT1oqAC8w/TY0K4CDgPPqVCZQHkLEvGFDTJaNi YU7PnJO5gZT8FRR1uWSTiB1JHBOqIYb9izqaDdSwDe04zIvZ+/FXqwfQhs34lSGH 004OISdHmtEVtyMmw0yc2jjK27WZ1IiflMNFGZFt40uB7Y9QbWUFY2VDJChMGpYG +LE/WtcacTXxxkx5hNBFRHdQKTTFEHC5DVIoEF6VOEJJXwG8riEY1oEirWutBoGc /jqomCKsrqSp4MZn0FOZwReeDFP70ZiqJAUwfz+/5Hj6QZo/jtXqdmu7SWWKYS7b OpEarnYYfiHGNj9vM1NkxfsywjmW1Z0= -----END CERTIFICATE-----Generated at Sat Sep 5 08:21:49 2026 by rpki-client