$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa File: 2c256c98-a43c-3061-80b5-8c349c47380b.roa (raw, json) Hash identifier: x421ACjz03JLlfTtGWg4N44a3i8hdhIXJmPFZkRUzUc= Subject key identifier: 5B:A0:C2:F8:E5:6D:2D:7A:BE:89:3D:EC:81:18:0E:2B:91:D7:50:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A320D2DA5B1907FEE6CF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 96.17.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:20:d2:da:5b:19:07:fe:e6:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=871a8059-aeba-462a-b97c-52b8adad53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:04:77:c1:53:0b:39:bb:a6:c0:c5:d2:27: 58:b2:e3:b3:67:ee:67:50:12:b0:0c:92:cd:10:45: 85:02:32:f2:ae:67:9a:89:ab:65:19:ad:7c:06:08: df:37:d7:58:c3:ff:c8:9c:bb:9c:16:db:25:b5:6b: 09:bd:b8:7c:c2:dc:08:bd:22:7d:47:f7:8d:e2:a4: 8a:70:6b:d1:84:e3:0c:54:cd:97:aa:72:14:70:44: b4:53:d5:e9:f4:32:3d:a8:29:69:e7:b5:cd:82:72: 8a:a3:5f:15:77:a9:b3:fe:ac:f5:e8:40:91:1a:2e: 81:36:cb:22:29:48:ad:b0:01:86:dc:4b:fe:34:0a: 20:2d:63:d1:0f:d2:7c:0c:79:ae:78:d3:49:e9:8f: a5:1e:d1:6c:d4:29:5d:1c:76:5a:d9:1c:10:fe:04: 38:59:43:11:28:3f:dc:e0:e2:8b:27:ab:04:cc:88: 33:5e:37:5b:96:02:9b:bd:92:8c:38:55:44:4f:8e: 5e:b8:39:b7:15:f0:fe:5d:02:a6:e6:33:5f:bb:a1: 0f:8c:80:63:fd:a1:c1:6b:8c:d0:38:19:9c:43:f8: a4:5f:e0:0b:bb:a6:41:a4:41:1a:a9:0a:c5:bb:04: cd:0d:de:75:b9:db:0d:e4:57:58:dc:84:95:2d:0c: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:C2:F8:E5:6D:2D:7A:BE:89:3D:EC:81:18:0E:2B:91:D7:50:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e0:1a:24:8f:a1:4d:fc:67:5f:21:1c:bb:d5:7f:9c:f6:87: b7:d9:e9:be:a5:e3:72:3a:fb:95:07:fa:81:64:37:47:1b:0b: 03:cb:8c:4d:3b:90:b4:13:10:01:5a:ed:dc:0e:18:25:fc:4c: bc:c8:d4:17:48:46:1e:65:cd:2a:a0:54:29:da:bd:9c:8b:28: 4f:be:35:1b:ec:da:2f:c2:94:25:b4:24:51:9c:0b:38:df:d4: 43:77:92:26:0e:b0:31:41:a5:e1:40:3e:59:fd:5c:7d:d0:ac: ce:dd:e6:99:1c:ef:ec:d2:cc:91:6c:d9:2b:ed:07:f4:ca:a7: ad:8e:81:c4:46:48:4f:1d:15:26:b2:02:26:a3:55:b6:11:83: ea:28:d2:fc:e1:4e:6a:c4:26:25:c0:0c:57:10:4f:82:bc:aa: 66:11:a0:98:a8:7f:f9:32:06:88:58:53:8c:ce:75:2a:d0:03: 54:ef:e0:97:13:2a:c3:7d:00:61:a2:05:e3:25:20:17:2d:31: a1:64:0c:04:13:5c:7c:43:e3:70:75:82:b0:b2:c3:fa:71:db: e5:59:e8:00:d3:24:d1:f9:5a:31:4f:22:6b:e2:de:8f:58:b2: 18:43:8e:28:6a:ec:4e:b6:2e:ad:ca:f6:d1:cc:3a:b7:62:20: 62:d1:76:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyDS2lsZB/7mz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ODcxYTgwNTktYWViYS00NjJhLWI5N2MtNTJiOGFkYWQ1M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK8Ed8FTCzm7psDF0idYsuOzZ+5nUBKwDJLN EEWFAjLyrmeaiatlGa18BgjfN9dYw//InLucFtsltWsJvbh8wtwIvSJ9R/eN4qSK cGvRhOMMVM2XqnIUcES0U9Xp9DI9qClp57XNgnKKo18Vd6mz/qz16ECRGi6BNssi KUitsAGG3Ev+NAogLWPRD9J8DHmueNNJ6Y+lHtFs1CldHHZa2RwQ/gQ4WUMRKD/c 4OKLJ6sEzIgzXjdblgKbvZKMOFVET45euDm3FfD+XQKm5jNfu6EPjIBj/aHBa4zQ OBmcQ/ikX+ALu6ZBpEEaqQrFuwTNDd51udsN5FdY3ISVLQzCjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFugwvjlbS16vok97IEYDiuR11A3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmMyNTZjOTgtYTQzYy0z MDYxLTgwYjUtOGMzNDljNDczODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTgGiSPoU38Z18hHLvVf5z2h7fZ6b6l43I6+5UH+oFkN0cbCwPLjE07 kLQTEAFa7dwOGCX8TLzI1BdIRh5lzSqgVCnavZyLKE++NRvs2i/ClCW0JFGcCzjf 1EN3kiYOsDFBpeFAPln9XH3QrM7d5pkc7+zSzJFs2SvtB/TKp62OgcRGSE8dFSay AiajVbYRg+oo0vzhTmrEJiXADFcQT4K8qmYRoJiof/kyBohYU4zOdSrQA1Tv4JcT KsN9AGGiBeMlIBctMaFkDAQTXHxD43B1grCyw/px2+VZ6ADTJNH5WjFPImvi3o9Y shhDjihq7E62Lq3K9tHMOrdiIGLRdlE= -----END CERTIFICATE-----Generated at Sun Oct 25 07:59:32 2026 by rpki-client