$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa File: 420b9c63-7b08-31c3-b036-98333fad9118.roa (raw, json) Hash identifier: E2SBZm/JkOo8F3MFNWvnjC7RdaIEnAM57pIse3/n4yM= Subject key identifier: F7:C0:90:C0:B0:59:36:AB:A2:3D:D6:8C:9E:8C:95:46:BE:A9:AE:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EEEB770BA33EE892A58AD0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 96.16.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:70:ba:33:ee:89:2a:58:ad:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=295e3d77-0a85-449f-a454-88e50f786e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:17:d0:6a:3d:e4:7e:69:4a:6c:32:b7:fc: 3c:d4:a8:05:cd:b1:5a:fc:22:c1:6b:05:27:55:70: 85:aa:c1:41:f6:e4:3d:e5:0c:f8:1d:0a:62:01:1c: c7:98:ce:fb:94:9f:b1:5e:c2:df:66:f8:d3:f4:5f: 67:08:c4:c5:c5:c0:74:4f:11:94:d1:44:7c:26:67: d5:be:99:09:a6:10:be:56:85:3d:2b:a5:c5:9e:aa: 2c:65:05:83:fa:a6:75:f4:72:f8:ef:e3:c9:95:e7: 8a:38:ff:19:0e:f3:d0:ba:7f:db:29:36:c0:fa:e2: f6:26:31:75:7f:2d:2e:56:42:71:04:3f:34:c7:ef: aa:9b:6f:16:4e:e8:fc:38:e6:aa:1d:32:f1:5e:d1: 8c:64:ee:46:4a:ef:83:18:e2:c6:fd:06:7b:03:7a: 32:65:53:fb:a7:3b:9b:3e:8a:77:4c:d9:23:c4:d9: aa:c3:6e:1d:81:59:ad:74:61:3c:16:97:6e:9b:0c: 5c:97:8d:4b:a4:f9:7c:44:15:35:88:5e:c2:ae:96: 18:94:fa:0e:2f:fc:ad:5c:6a:12:9b:6b:3a:70:4f: 83:fa:f7:0f:1d:a8:fd:b1:09:37:7b:b0:43:d6:b0: df:ff:de:5b:cb:a6:44:b6:5f:9c:71:f8:82:91:77: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:90:C0:B0:59:36:AB:A2:3D:D6:8C:9E:8C:95:46:BE:A9:AE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420b9c63-7b08-31c3-b036-98333fad9118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d0:6f:15:58:25:74:9c:f8:b6:0a:82:6f:41:3a:d6:60:62: 1d:70:ac:17:37:31:ad:ed:16:8c:7a:47:85:b0:9c:1f:73:95: bc:65:95:83:24:0a:7b:20:1d:92:4d:f2:53:1d:41:f0:0b:44: 13:9b:28:5a:85:17:82:2d:df:b3:fa:73:ca:e1:d5:22:26:19: fb:1b:b7:04:f0:58:4a:44:ea:c2:e5:1c:c6:4f:a3:15:86:18: 59:cf:75:a1:92:a4:be:22:0d:06:c8:e8:bd:97:b1:d5:4e:41: a6:2e:05:21:00:ad:cc:36:f0:b1:e2:73:66:b4:d2:92:d6:e4: 2c:a5:b2:d0:18:86:9c:f5:e9:9c:0d:6a:d8:5f:63:01:b2:5f: 2b:e4:82:21:fe:85:c9:52:0e:fa:84:c3:4c:fa:66:dc:5a:88: 05:0a:9e:01:02:7c:ce:d4:de:a8:04:bd:27:a3:f8:32:f3:f5: 87:7e:7b:5b:91:13:e6:ac:11:ec:20:17:9d:4e:5e:e1:cc:74: 71:ce:43:42:78:1d:ff:01:83:b1:28:7e:a4:07:48:04:0f:93: 1e:fd:20:ac:b4:3b:9b:00:82:98:a1:26:92:56:b5:14:86:0e: a8:b6:ec:94:af:54:7f:79:42:17:6c:ec:92:40:48:6b:06:67: 4a:d0:96:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3C6M+6JKlitAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk Mjk1ZTNkNzctMGE4NS00NDlmLWE0NTQtODhlNTBmNzg2ZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfoX0Go95H5pSmwyt/w81KgFzbFa/CLBawUn VXCFqsFB9uQ95Qz4HQpiARzHmM77lJ+xXsLfZvjT9F9nCMTFxcB0TxGU0UR8JmfV vpkJphC+VoU9K6XFnqosZQWD+qZ19HL47+PJleeKOP8ZDvPQun/bKTbA+uL2JjF1 fy0uVkJxBD80x++qm28WTuj8OOaqHTLxXtGMZO5GSu+DGOLG/QZ7A3oyZVP7pzub Pop3TNkjxNmqw24dgVmtdGE8Fpdumwxcl41LpPl8RBU1iF7CrpYYlPoOL/ytXGoS m2s6cE+D+vcPHaj9sQk3e7BD1rDf/95by6ZEtl+ccfiCkXc5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfAkMCwWTaroj3WjJ6MlUa+qa4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIwYjljNjMtN2IwOC0z MWMzLWIwMzYtOTgzMzNmYWQ5MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfQbxVYJXSc+LYKgm9BOtZgYh1wrBc3Ma3tFox6R4WwnB9zlbxllYMk CnsgHZJN8lMdQfALRBObKFqFF4It37P6c8rh1SImGfsbtwTwWEpE6sLlHMZPoxWG GFnPdaGSpL4iDQbI6L2XsdVOQaYuBSEArcw28LHic2a00pLW5CylstAYhpz16ZwN athfYwGyXyvkgiH+hclSDvqEw0z6ZtxaiAUKngECfM7U3qgEvSej+DLz9Yd+e1uR E+asEewgF51OXuHMdHHOQ0J4Hf8Bg7EofqQHSAQPkx79IKy0O5sAgpihJpJWtRSG Dqi27JSvVH95Qhds7JJASGsGZ0rQlpM= -----END CERTIFICATE-----Generated at Fri Sep 4 22:24:01 2026 by rpki-client