$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa File: 4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa (raw, json) Hash identifier: wgjF8Hkd3F5KvhP1XzL5S/WnFfcRnMPd32CLROujqzM= Subject key identifier: 89:CB:D3:60:B4:58:3A:EA:84:04:8F:D0:A0:8F:71:B2:3C:B4:9C:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE7BCC7C3A82BC2CDF0EBD100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 16625 IP address blocks: 96.7.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c7:c3:a8:2b:c2:cd:f0:eb:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=ec1de0d2-6caf-4c9a-b878-36f11db3f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:c3:08:82:17:b9:64:0b:f4:c2:af:88:5e: 2a:11:3f:36:d5:1f:ee:07:f3:5d:78:0e:6c:ec:0e: 97:1e:63:91:97:a4:6a:42:88:b3:72:02:6f:1e:7b: 01:4e:26:58:17:0a:7c:c4:83:f0:cc:25:9c:75:1c: cf:e8:67:31:1c:09:7d:99:50:15:d6:bc:fd:c6:2a: 74:ff:c9:92:6e:3a:81:b5:67:67:e0:99:27:c8:82: e6:a2:27:e3:9f:57:7d:b0:42:f4:0c:9f:9c:68:52: 99:0c:97:57:9a:2c:5a:d6:a6:ce:d1:9e:ea:6c:d4: 0d:4f:9a:3c:36:8b:12:1f:0e:50:20:29:ca:0f:94: 21:d0:e4:17:d2:fe:da:5e:5c:d7:bc:c9:5f:20:b6: 6e:03:5b:d5:61:7f:2a:5d:c5:46:6f:d1:7b:ad:5d: 7e:d3:79:53:63:6f:b8:ce:77:6d:63:1e:e8:bb:c8: 9f:82:ec:f2:b0:fe:26:7c:c3:00:d5:ff:fb:4a:ca: 66:d6:70:2e:22:16:b7:28:c5:ac:67:f2:80:46:52: fa:d9:29:d5:46:0e:45:31:4a:d1:0f:94:09:ce:8a: 7d:b1:80:b1:9a:78:de:c3:a2:97:1a:79:bb:43:62: be:3c:b7:2d:6d:be:b0:c1:3f:e5:8b:b1:54:3e:a2: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CB:D3:60:B4:58:3A:EA:84:04:8F:D0:A0:8F:71:B2:3C:B4:9C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:23:9e:b0:0c:80:d5:79:43:cc:88:1f:f0:a7:b0:b8:2c:e9: a9:98:d5:6c:9a:cb:cd:85:03:68:7b:f0:12:8f:66:4a:7c:c7: 93:d0:7d:3e:be:3f:ab:c0:90:e7:f0:94:b2:74:87:66:c0:3b: e5:89:5c:c2:15:35:70:7c:50:aa:5b:d7:64:be:23:60:f9:04: 69:e1:2a:4d:e1:48:a4:4a:de:56:ae:f6:e9:ee:e9:d8:49:d4: 99:0a:94:1a:1a:c7:80:cb:7c:63:7e:e6:ef:01:ec:1c:87:9e: a9:1d:62:29:8a:74:43:d8:bb:a0:2a:8b:48:86:9c:cd:ba:87: 10:93:28:02:90:1b:86:07:b1:7f:1a:3f:46:b7:76:86:9e:19: 5b:86:cc:fd:c3:12:0f:e2:9a:90:2f:47:fb:26:7f:45:8c:2f: 2b:8f:2f:57:8d:98:e3:be:00:2c:06:65:2c:3b:05:0f:7a:f8: c8:b0:90:d9:fa:ef:5f:68:20:c8:d7:82:90:11:63:99:c1:f3: 0b:30:69:88:74:89:47:f2:df:cb:6b:e1:fe:2c:77:f4:75:f8: 09:8e:61:7b:99:a9:5e:d3:7c:bc:ff:3a:35:f2:be:fb:c6:c0: c8:0a:89:68:f7:ed:4c:f4:1a:b5:d8:b1:e0:4a:72:01:7c:16: 67:f1:1a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMfDqCvCzfDr0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWMxZGUwZDItNmNhZi00YzlhLWI4NzgtMzZmMTFkYjNmNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WfDCIIXuWQL9MKviF4qET821R/uB/NdeA5s 7A6XHmORl6RqQoizcgJvHnsBTiZYFwp8xIPwzCWcdRzP6GcxHAl9mVAV1rz9xip0 /8mSbjqBtWdn4JknyILmoifjn1d9sEL0DJ+caFKZDJdXmixa1qbO0Z7qbNQNT5o8 NosSHw5QICnKD5Qh0OQX0v7aXlzXvMlfILZuA1vVYX8qXcVGb9F7rV1+03lTY2+4 zndtYx7ou8ifguzysP4mfMMA1f/7Sspm1nAuIha3KMWsZ/KARlL62SnVRg5FMUrR D5QJzop9sYCxmnjew6KXGnm7Q2K+PLctbb6wwT/li7FUPqJuzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInL02C0WDrqhASP0KCPcbI8tJyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZhYTVmZTgtNGE1Yy0z YzRlLThiOTctYjhhZTA5ZTFiMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMjnrAMgNV5Q8yIH/CnsLgs6amY1Wyay82FA2h78BKPZkp8x5PQfT6+ P6vAkOfwlLJ0h2bAO+WJXMIVNXB8UKpb12S+I2D5BGnhKk3hSKRK3lau9unu6dhJ 1JkKlBoax4DLfGN+5u8B7ByHnqkdYimKdEPYu6Aqi0iGnM26hxCTKAKQG4YHsX8a P0a3doaeGVuGzP3DEg/impAvR/smf0WMLyuPL1eNmOO+ACwGZSw7BQ96+MiwkNn6 719oIMjXgpARY5nB8wswaYh0iUfy38tr4f4sd/R1+AmOYXuZqV7TfLz/OjXyvvvG wMgKiWj37Uz0GrXYseBKcgF8FmfxGl0= -----END CERTIFICATE-----Generated at Fri Sep 4 23:42:52 2026 by rpki-client