$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa File: 3e8828ed-0322-3dec-8145-aa943c8f2112.roa (raw, json) Hash identifier: tpI2oHF3zxXSYgM7wdIDwKRK+daajk6BZImyLyRtRX8= Subject key identifier: A8:66:6D:6F:FC:79:93:A9:01:E0:0F:B7:2B:97:3B:3E:82:31:C6:F2 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584EA0154EFAB16F33CCFA27D380 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 53828 IP address blocks: 96.8.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:4e:fa:b1:6f:33:cc:fa:27:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=03905a14-7473-44f4-ac52-716a8f1553d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:67:11:d1:60:87:d3:a5:cf:26:38:e9:86: 46:b2:5a:1d:87:46:c1:de:93:34:27:02:b2:68:b4: 7d:b3:14:fd:cc:8e:5a:c5:28:67:32:5a:00:27:04: 8b:7f:f7:61:be:32:01:1a:51:69:c4:d9:58:72:3f: c3:7b:ab:8c:16:a5:df:e7:a9:61:36:4b:0b:7b:67: 8f:1f:a4:5d:41:f5:53:7e:93:c2:5e:05:27:1b:46: 77:5b:fa:b3:2b:ae:6e:a0:2a:5a:bd:ef:64:9e:4c: 40:28:99:c0:82:7d:66:ca:13:8f:2b:c0:ec:b5:3c: 6a:39:4a:c1:89:59:28:6b:0d:f7:03:1b:f1:4a:2c: 2f:68:8e:a3:52:36:f0:f3:95:b4:64:ac:09:58:30: db:08:4e:97:10:83:50:11:80:af:e8:a3:ee:a7:61: 5f:a5:ba:c1:70:ec:11:85:32:7f:ee:50:c3:b4:6b: 78:45:98:59:27:cf:15:72:c6:d4:a2:76:c4:a9:17: e6:e7:6f:56:74:14:dc:64:29:70:5d:e8:01:fe:15: 93:59:21:5c:2b:82:c7:29:8a:5c:1f:08:70:1f:bf: 7c:9b:32:16:9b:27:ae:c6:09:24:00:1a:39:91:3a: d6:35:20:1c:e1:15:57:4a:15:48:9c:b1:c0:b7:a9: de:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:6D:6F:FC:79:93:A9:01:E0:0F:B7:2B:97:3B:3E:82:31:C6:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 96.8.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:de:32:41:c4:0e:22:66:a6:c0:84:28:43:7f:3f:7f:26:72: 19:d3:50:95:15:d3:38:50:40:91:51:0f:e4:53:73:f6:91:1c: 66:0f:d5:67:65:56:26:d5:df:28:a4:ab:ac:91:0f:cb:25:de: 18:df:5a:07:a8:aa:2f:20:61:80:b7:3d:66:40:23:29:21:c3: dd:9b:9c:91:c7:fc:3c:37:c6:15:f3:cb:2b:12:6e:8b:13:a5: fe:11:48:31:76:76:33:55:34:29:9d:61:18:9b:86:5a:40:01: 2a:8c:29:8a:b3:29:fd:62:9a:5b:d0:21:b8:63:f6:fa:3a:8a: 03:62:84:d3:9f:95:d2:16:9a:a4:7e:da:f4:4e:62:38:2f:12: 6a:23:35:29:cd:7e:50:b5:1c:ee:24:77:11:c3:0f:4c:b5:d9: 4c:e2:17:39:d6:d4:59:16:63:b4:82:a5:40:75:33:fd:0f:3a: c8:76:07:01:f0:79:25:aa:fb:c9:b6:c5:f4:5f:b6:4b:b4:1b: 1b:ad:cb:45:15:a1:fe:22:93:83:83:51:cc:a5:3a:cb:83:15: 89:48:02:62:f3:2c:93:84:e5:e0:20:c6:35:65:af:6d:1c:34: 7b:c5:53:f2:b4:09:cb:22:d1:0d:f6:44:b1:eb:aa:fe:b7:0f: a6:7e:78:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFU76sW8zzPon04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDM5MDVhMTQtNzQ3My00NGY0LWFjNTItNzE2YThmMTU1M2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNFnEdFgh9OlzyY46YZGslodh0bB3pM0JwKy aLR9sxT9zI5axShnMloAJwSLf/dhvjIBGlFpxNlYcj/De6uMFqXf56lhNksLe2eP H6RdQfVTfpPCXgUnG0Z3W/qzK65uoCpave9knkxAKJnAgn1myhOPK8DstTxqOUrB iVkoaw33AxvxSiwvaI6jUjbw85W0ZKwJWDDbCE6XEINQEYCv6KPup2FfpbrBcOwR hTJ/7lDDtGt4RZhZJ88VcsbUonbEqRfm529WdBTcZClwXegB/hWTWSFcK4LHKYpc HwhwH798mzIWmyeuxgkkABo5kTrWNSAc4RVXShVInLHAt6neAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhmbW/8eZOpAeAPtyuXOz6CMcbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvM2U4ODI4ZWQtMDMyMi0z ZGVjLTgxNDUtYWE5NDNjOGYyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3eMkHEDiJmpsCEKEN/P38mchnTUJUV0zhQQJFRD+RTc/aRHGYP1Wdl VibV3yikq6yRD8sl3hjfWgeoqi8gYYC3PWZAIykhw92bnJHH/Dw3xhXzyysSbosT pf4RSDF2djNVNCmdYRibhlpAASqMKYqzKf1imlvQIbhj9vo6igNihNOfldIWmqR+ 2vROYjgvEmojNSnNflC1HO4kdxHDD0y12UziFznW1FkWY7SCpUB1M/0POsh2BwHw eSWq+8m2xfRftku0Gxuty0UVof4ik4ODUcylOsuDFYlIAmLzLJOE5eAgxjVlr20c NHvFU/K0Ccsi0Q32RLHrqv63D6Z+eDA= -----END CERTIFICATE-----Generated at Sat Aug 22 19:31:36 2026 by rpki-client