$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1eadbb2-38f1-33e9-99f7-7d2544bb64c9.roa File: d1eadbb2-38f1-33e9-99f7-7d2544bb64c9.roa (raw, json) Hash identifier: nXkpg+xH2WTIud4D3OzISeN90lpaf95eGiC7LwbmEW4= Subject key identifier: 04:F7:DB:30:15:08:AA:BC:98:AE:BF:02:99:10:3E:B2:0A:1D:F4:AF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F089A4B4F74E8FCF1E8487460 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1eadbb2-38f1-33e9-99f7-7d2544bb64c9.roa Signing time: Tue 01 Sep 2026 19:32:48 +0000 ROA not before: Tue 01 Sep 2026 19:32:48 +0000 ROA not after: Mon 30 Nov 2026 20:32:48 +0000 asID: 401362 IP address blocks: 96.126.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:9a:4b:4f:74:e8:fc:f1:e8:48:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 1 19:32:48 2026 GMT Not After : Nov 30 20:32:48 2026 GMT Subject: CN=2d47a6f3-ba6f-403e-8501-b6138aba0135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:1d:b4:d8:ae:d4:be:08:16:d8:30:df:13: 83:ac:09:ef:0e:d3:3b:35:bf:53:92:9d:48:f0:c1: 0c:b5:bc:48:8f:dc:08:af:36:12:d0:be:0b:20:61: c6:7e:99:29:6f:0f:f3:4e:11:44:7f:44:8d:7d:09: 16:a9:af:6b:9e:e7:bd:12:1a:4d:eb:7d:a5:4b:36: b3:4a:da:11:3f:ef:15:4a:9c:a1:ba:ef:ae:bc:52: c1:b1:ac:4f:44:6d:f8:23:21:13:8e:b6:09:f0:7e: 13:77:23:04:5e:8a:51:d5:22:5b:72:e4:03:9f:8f: 0d:bd:6d:1b:7c:fa:72:e7:3a:8e:6e:ae:3c:31:1b: 55:f5:62:c2:43:b6:ec:f4:d8:65:7b:6e:ad:42:bb: 88:af:75:ed:7c:b6:15:f8:54:73:d5:e4:7b:3b:88: e1:63:84:82:1d:6a:63:6f:55:ec:17:ee:34:65:16: f5:fa:73:e5:07:f0:ab:6b:76:01:4f:9b:be:87:b9: 47:e3:1a:cf:a4:cb:70:6e:14:d0:da:11:f0:ba:0f: 0f:72:84:a9:78:4f:3a:82:d7:c8:2f:90:77:d7:6a: 45:01:45:1b:5a:a9:e7:0a:57:5f:c5:51:72:4e:35: 94:de:10:8e:43:23:20:c4:fa:c4:4e:63:b8:cf:46: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:DB:30:15:08:AA:BC:98:AE:BF:02:99:10:3E:B2:0A:1D:F4:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d1eadbb2-38f1-33e9-99f7-7d2544bb64c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7d:48:bc:71:b6:72:d4:d7:1c:22:df:fc:53:13:1d:d1:24: 35:9c:f9:ea:05:7f:4c:94:7c:81:b6:19:c4:20:08:b0:c5:11: b6:d7:57:b9:cf:5c:2b:2e:f2:03:b4:63:de:81:97:33:00:5d: 7e:32:49:12:0c:ab:01:05:d5:3d:7c:33:c1:fa:0a:9c:16:ed: b1:8f:0c:cf:96:2c:4c:45:4c:4e:46:41:1e:aa:44:94:34:66: 55:0e:e9:00:73:a3:3e:09:b3:61:77:9d:78:be:a4:04:f5:16: b3:9d:8b:32:1b:14:e3:e2:13:1d:f4:8d:fb:7c:ca:8e:6b:da: 82:a6:cd:bf:2b:23:da:30:b7:2d:6a:f7:af:ba:7b:e2:4d:b6: 45:c1:ad:a7:73:d0:4b:0f:74:29:3b:76:3d:f7:cb:07:f4:a2: 40:1b:bb:33:aa:fa:fc:a6:87:a0:f6:7e:5f:e0:7d:06:52:78: d6:64:1f:70:e7:a5:7c:3a:3b:7f:81:19:49:70:32:7d:11:37: 61:c0:4b:9d:1a:e3:62:ae:0b:b1:a2:31:e9:b7:d7:10:fa:fd: 85:33:88:3a:2f:55:76:ae:8b:0d:5d:37:cc:06:2b:4f:08:d0: ba:1e:b9:94:bd:af:32:7d:99:37:d7:03:77:e0:a0:c1:1f:6b: 5e:92:fc:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ImktPdOj88ehIdGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMTE5MzI0OFoXDTI2MTEzMDIwMzI0OFowLzEtMCsGA1UEAxMk MmQ0N2E2ZjMtYmE2Zi00MDNlLTg1MDEtYjYxMzhhYmEwMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWAdtNiu1L4IFtgw3xODrAnvDtM7Nb9Tkp1I 8MEMtbxIj9wIrzYS0L4LIGHGfpkpbw/zThFEf0SNfQkWqa9rnue9EhpN632lSzaz StoRP+8VSpyhuu+uvFLBsaxPRG34IyETjrYJ8H4TdyMEXopR1SJbcuQDn48NvW0b fPpy5zqObq48MRtV9WLCQ7bs9Nhle26tQruIr3XtfLYV+FRz1eR7O4jhY4SCHWpj b1XsF+40ZRb1+nPlB/Cra3YBT5u+h7lH4xrPpMtwbhTQ2hHwug8PcoSpeE86gtfI L5B312pFAUUbWqnnCldfxVFyTjWU3hCOQyMgxPrETmO4z0ZQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT32zAVCKq8mK6/ApkQPrIKHfSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDFlYWRiYjItMzhmMS0z M2U5LTk5ZjctN2QyNTQ0YmI2NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH6SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx9SLxxtnLU1xwi3/xTEx3RJDWc+eoFf0yUfIG2GcQgCLDFEbbXV7nP XCsu8gO0Y96BlzMAXX4ySRIMqwEF1T18M8H6CpwW7bGPDM+WLExFTE5GQR6qRJQ0 ZlUO6QBzoz4Js2F3nXi+pAT1FrOdizIbFOPiEx30jft8yo5r2oKmzb8rI9owty1q 96+6e+JNtkXBradz0EsPdCk7dj33ywf0okAbuzOq+vymh6D2fl/gfQZSeNZkH3Dn pXw6O3+BGUlwMn0RN2HAS50a42KuC7GiMem31xD6/YUziDovVXauiw1dN8wGK08I 0LoeuZS9rzJ9mTfXA3fgoMEfa16S/H0= -----END CERTIFICATE-----Generated at Thu Sep 3 17:53:12 2026 by rpki-client