$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa File: 5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json) Hash identifier: 8XdmfU5A6y5edf2fL/ZaPqvrZRPceLqWd7blq9oHFDA= Subject key identifier: FC:12:B4:74:48:3B:43:6F:DE:9D:F3:8C:AA:E9:33:51:CE:A7:50:C5 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584EE0C1EF4DB609766ECB76F180 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 393398 IP address blocks: 96.47.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:ef:4d:b6:09:76:6e:cb:76:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=af776ce3-c382-4915-bf52-01f9a21722f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:2f:44:61:71:83:94:a0:bd:04:c2:10:73: 07:e1:a7:76:75:99:01:c0:af:bd:a0:ec:86:22:d4: 04:e0:e3:5f:bf:7d:77:d4:9d:1d:8a:37:e9:4b:19: 22:b6:72:ed:b2:64:b0:43:db:f8:2c:30:fc:82:fe: 2b:69:4e:a1:28:73:92:f0:2e:37:f9:d3:ce:a4:c4: 72:1b:2d:ad:da:13:ba:cd:e5:6b:61:f2:59:a2:af: c0:c8:65:2b:f9:34:d5:90:96:6d:66:b6:58:e7:c2: 7e:f7:0b:ef:aa:cc:24:32:93:32:17:a0:46:93:14: 34:02:29:7b:51:dc:12:ca:78:15:fb:8e:d9:cf:7a: ec:24:c0:f4:90:6d:5d:6a:e7:90:ec:63:00:f6:e4: e3:c7:62:c7:56:73:49:d1:67:57:49:cc:c4:57:18: d2:71:3b:f6:55:92:02:55:64:75:9d:af:82:6a:59: 4c:fe:12:39:e1:37:21:33:66:b8:9d:1c:ea:9c:55: f7:14:37:8e:f5:f4:67:7b:cd:68:fa:6d:10:f9:e4: 60:0b:88:fd:e1:f0:c1:64:e8:c8:03:b2:eb:38:62: 47:8f:dc:b4:96:7d:ba:c9:2d:57:a3:c9:12:be:b0: b9:08:78:b3:08:00:f9:91:bc:f0:27:31:98:f1:58: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:B4:74:48:3B:43:6F:DE:9D:F3:8C:AA:E9:33:51:CE:A7:50:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:24:7f:00:ef:11:d4:f0:b4:c0:63:86:e1:a7:5b:cf:5a:7e: cf:bd:80:81:6f:e5:a2:3f:73:51:3e:cd:6c:56:cd:24:62:f9: b7:78:a9:29:e9:53:03:7a:89:7a:ed:d2:58:96:23:13:48:cb: 6d:71:1f:91:3c:52:33:25:82:94:f6:1c:83:81:a7:10:ec:de: 17:59:cf:f3:fe:3e:05:df:f7:8f:15:50:7b:9a:34:db:ac:cc: 76:59:cc:eb:9c:cb:46:73:c9:2c:69:03:67:9f:e7:b8:ab:00: bb:e1:eb:f9:6e:86:a0:75:e7:36:66:75:c1:cf:21:af:de:f6: 8c:d1:4d:a9:36:bc:b8:27:87:c9:a2:7d:f9:70:f5:1e:8a:78: 6d:ca:7d:26:78:ab:63:b5:e6:2c:5d:05:e6:79:09:ec:d0:f3: b4:f7:34:3b:0f:9d:81:ad:b9:6c:c6:16:af:8a:18:db:c2:b9: bd:71:5c:1e:f9:6b:45:c7:41:74:e1:96:bd:98:f1:75:2b:49: 2b:2a:4a:f6:54:ba:32:48:7d:99:71:16:b0:a0:d4:a7:ae:5a: 65:6a:be:61:1f:5e:bb:f0:d8:94:e2:b4:e8:f3:ab:af:54:e6: cd:da:7c:98:f7:0f:6e:a8:73:6c:d7:ca:54:2f:82:a9:08:6a: 62:c5:ca:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwe9Ntgl2bst28YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YWY3NzZjZTMtYzM4Mi00OTE1LWJmNTItMDFmOWEyMTcyMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCovRGFxg5SgvQTCEHMH4ad2dZkBwK+9oOyG ItQE4ONfv3131J0dijfpSxkitnLtsmSwQ9v4LDD8gv4raU6hKHOS8C43+dPOpMRy Gy2t2hO6zeVrYfJZoq/AyGUr+TTVkJZtZrZY58J+9wvvqswkMpMyF6BGkxQ0Ail7 UdwSyngV+47Zz3rsJMD0kG1daueQ7GMA9uTjx2LHVnNJ0WdXSczEVxjScTv2VZIC VWR1na+CallM/hI54TchM2a4nRzqnFX3FDeO9fRne81o+m0Q+eRgC4j94fDBZOjI A7LrOGJHj9y0ln26yS1Xo8kSvrC5CHizCAD5kbzwJzGY8VjgHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwStHRIO0Nv3p3zjKrpM1HOp1DFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNWZmM2EyOTMtYjdmZS0z NWMzLTk1MmUtMmI0N2NhYmJiMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8kfwDvEdTwtMBjhuGnW89afs+9gIFv5aI/c1E+zWxWzSRi+bd4qSnp UwN6iXrt0liWIxNIy21xH5E8UjMlgpT2HIOBpxDs3hdZz/P+PgXf948VUHuaNNus zHZZzOucy0ZzySxpA2ef57irALvh6/luhqB15zZmdcHPIa/e9ozRTak2vLgnh8mi fflw9R6KeG3KfSZ4q2O15ixdBeZ5CezQ87T3NDsPnYGtuWzGFq+KGNvCub1xXB75 a0XHQXThlr2Y8XUrSSsqSvZUujJIfZlxFrCg1KeuWmVqvmEfXrvw2JTitOjzq69U 5s3afJj3D26oc2zXylQvgqkIamLFykQ= -----END CERTIFICATE-----Generated at Sat Sep 5 07:17:19 2026 by rpki-client