$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/196a3b5d-583c-37e7-9544-8503441db26c.roa File: 196a3b5d-583c-37e7-9544-8503441db26c.roa (raw, json) Hash identifier: /lN74xjFiO6xtEUUU2Nh8Cvll53P7C+02dOTPYdseD4= Subject key identifier: E8:3B:FF:C7:66:90:5F:16:EB:BC:74:2F:9E:3E:86:9E:AD:6F:56:80 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F629319CB5E711D20D679CE80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/196a3b5d-583c-37e7-9544-8503441db26c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 399631 IP address blocks: 96.126.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:19:cb:5e:71:1d:20:d6:79:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=28a2319b-a7d7-46b4-ac37-2433da49805f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:19:a1:a7:4d:1f:cd:ab:a8:99:e5:02:64: a8:be:9f:fd:34:ef:21:25:47:85:80:6a:53:ea:60: a7:68:2b:80:49:b3:b3:0f:54:89:5e:ef:48:21:78: cb:df:13:91:e7:64:84:f2:32:74:01:5d:75:38:a4: c0:13:a7:e1:4f:86:e3:6f:22:5c:02:b6:8a:c6:51: 60:fa:a2:49:4e:10:e1:76:37:81:75:a7:3e:c6:26: 12:01:0b:40:49:26:05:6c:94:ce:03:f8:50:ef:34: 72:ed:3e:d4:d0:d0:51:e7:96:8e:6b:9c:11:03:4f: a3:24:e9:8f:2d:21:5d:a3:33:ff:f5:97:d7:25:71: 56:0d:d8:85:57:dd:c3:41:72:27:f2:79:1a:03:c6: c4:31:b4:1b:c2:24:20:56:18:d8:dc:31:26:b6:ab: 63:9f:dd:34:f8:05:4b:dc:ae:68:6e:59:71:5f:93: 57:69:c9:63:c9:d8:48:8c:d9:a0:86:24:0c:5a:21: 9e:df:4e:5d:1d:99:97:12:04:e8:ca:71:1a:a3:11: 13:d9:1d:f0:bf:31:11:50:4d:42:7d:f7:c7:dc:ad: fc:57:91:59:fb:37:7b:53:d5:fc:2b:a2:6c:1c:b3: de:76:45:07:53:27:29:0a:3e:de:0d:15:74:7f:7a: 48:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:FF:C7:66:90:5F:16:EB:BC:74:2F:9E:3E:86:9E:AD:6F:56:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/196a3b5d-583c-37e7-9544-8503441db26c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7d:24:d7:19:c2:0c:ab:63:df:54:8a:d4:9e:aa:cb:b4:92: 37:45:bf:ef:99:a8:3c:74:5f:7e:dd:a2:68:93:fa:ad:d9:15: f7:92:60:58:88:ba:8f:27:69:24:09:bd:b6:d9:6a:a2:08:85: 84:3e:dd:c3:dc:d4:c0:9b:91:de:7d:02:3d:f8:64:87:d9:5a: 5b:85:8f:c3:c3:fa:c4:16:ba:25:4e:64:c0:63:29:df:3b:39: 83:08:df:b8:8c:f0:2f:ac:3e:b6:7c:af:61:b1:36:80:51:e6: 31:7f:34:5a:af:94:11:de:67:1f:f3:12:6d:6e:ba:34:aa:9f: cb:a2:18:1a:98:b4:54:63:75:c5:b3:7b:8e:25:39:67:20:38: 72:4b:64:5e:d0:da:41:be:1f:4e:c8:39:a2:31:ed:99:a0:58: 5e:9e:f4:6f:95:63:f0:75:ca:81:99:0e:92:05:c1:2d:a5:43: b2:5f:c5:28:10:02:57:6d:81:2a:39:76:65:78:14:b4:c6:39: 40:f7:4c:c4:cd:53:f7:ea:48:27:37:7d:cf:ae:38:d2:64:04: b7:de:bb:cc:eb:f1:46:74:80:60:8f:da:1a:ec:09:8e:cf:4d: 2a:06:7c:0f:71:92:fb:74:08:52:be:d8:0a:ff:da:61:2e:e6: 65:8e:b7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxnLXnEdINZ5zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjhhMjMxOWItYTdkNy00NmI0LWFjMzctMjQzM2RhNDk4MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0wZoadNH82rqJnlAmSovp/9NO8hJUeFgGpT 6mCnaCuASbOzD1SJXu9IIXjL3xOR52SE8jJ0AV11OKTAE6fhT4bjbyJcAraKxlFg +qJJThDhdjeBdac+xiYSAQtASSYFbJTOA/hQ7zRy7T7U0NBR55aOa5wRA0+jJOmP LSFdozP/9ZfXJXFWDdiFV93DQXIn8nkaA8bEMbQbwiQgVhjY3DEmtqtjn900+AVL 3K5obllxX5NXacljydhIjNmghiQMWiGe305dHZmXEgToynEaoxET2R3wvzERUE1C fffH3K38V5FZ+zd7U9X8K6JsHLPedkUHUycpCj7eDRV0f3pI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg7/8dmkF8W67x0L54+hp6tb1aAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTk2YTNiNWQtNTgzYy0z N2U3LTk1NDQtODUwMzQ0MWRiMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ9JNcZwgyrY99UitSeqsu0kjdFv++ZqDx0X37domiT+q3ZFfeSYFiI uo8naSQJvbbZaqIIhYQ+3cPc1MCbkd59Aj34ZIfZWluFj8PD+sQWuiVOZMBjKd87 OYMI37iM8C+sPrZ8r2GxNoBR5jF/NFqvlBHeZx/zEm1uujSqn8uiGBqYtFRjdcWz e44lOWcgOHJLZF7Q2kG+H07IOaIx7ZmgWF6e9G+VY/B1yoGZDpIFwS2lQ7JfxSgQ AldtgSo5dmV4FLTGOUD3TMTNU/fqSCc3fc+uONJkBLfeu8zr8UZ0gGCP2hrsCY7P TSoGfA9xkvt0CFK+2Ar/2mEu5mWOt8o= -----END CERTIFICATE-----Generated at Fri Oct 9 19:07:30 2026 by rpki-client