$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa File: 2db60313-820c-3bb6-85f6-8c85184ca8a4.roa (raw, json) Hash identifier: bLYBMUpGLqol1941AO5L4fJv+bRlkFmKSVJlZxgLbRY= Subject key identifier: F4:94:C8:63:C9:17:A8:B1:4B:94:99:79:55:9C:34:76:11:4F:A2:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A32043360B483213E6A380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 96.16.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:20:43:36:0b:48:32:13:e6:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=4766197f-7faf-4bad-b06f-68f8d91c3ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:a2:2b:db:dc:23:59:03:36:e6:5b:6d:97: 94:da:88:6d:f0:2c:72:8a:d4:c0:4a:8a:b9:a9:f8: e0:b5:d7:b0:43:50:cc:9f:64:60:af:4c:eb:e1:62: f2:0f:65:8c:e0:f3:9b:e0:03:40:f2:17:93:bd:b1: e2:82:29:43:eb:7f:a5:39:e2:0c:2a:db:89:6f:a1: a9:31:5f:23:83:fd:3c:1b:38:83:4f:e1:51:ee:07: 71:06:7e:b1:47:ff:d0:6c:96:45:4d:b0:ec:e9:d2: 0f:c7:08:59:dc:8e:f8:e2:af:fc:ec:78:65:a2:09: 99:f6:01:7e:d3:83:36:c5:e9:a0:fc:79:ca:85:66: 76:0c:99:f8:95:89:fb:a8:f4:de:20:31:97:b1:11: 82:56:67:3e:06:01:0b:97:1b:be:55:00:44:6e:78: f8:4e:ad:98:cd:75:fc:9e:9c:26:3c:a9:0d:66:e2: 9a:98:65:d1:9f:10:79:74:07:d8:c9:e9:1b:d8:d5: 9d:7c:ef:04:80:07:58:a6:0c:a5:26:cf:00:f2:f0: ca:99:fb:a2:df:90:ce:3a:2e:4e:f6:c0:aa:b8:6e: 15:92:4c:f3:52:4d:d8:85:3f:6f:ce:40:2f:3d:43: 6d:fd:71:1e:ac:33:1b:34:a4:04:d9:a1:12:c9:90: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:94:C8:63:C9:17:A8:B1:4B:94:99:79:55:9C:34:76:11:4F:A2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:36:9c:78:88:ba:38:ad:e8:9b:cb:a7:00:9c:2f:4f:4c:d5: 74:60:9c:b0:43:de:17:04:e6:c3:bb:bc:a1:0b:36:2c:78:20: 55:54:9f:1b:bf:f0:9e:2f:94:0b:37:85:98:af:82:d9:2b:f5: 57:8d:a2:e5:10:1b:6c:ca:3b:4f:d6:2b:2e:ce:ab:c2:87:a1: b0:b0:ca:f1:a3:2c:00:99:a1:11:29:62:1d:b1:7d:eb:98:e0: 00:1b:70:44:cd:f4:74:15:c2:e1:76:6b:26:8f:2a:7f:72:9f: 76:fc:cd:4e:d6:9d:64:d9:d7:02:c3:b9:ce:27:68:a3:27:95: 00:d7:91:42:75:9f:4c:a6:4b:05:84:37:34:51:dd:d1:95:2c: 07:36:b1:d6:88:4b:61:da:85:b2:49:27:da:21:15:3c:e3:b6: 0f:b9:ec:0f:d2:d4:58:59:36:c4:be:48:cd:eb:8a:90:f5:77: 66:16:d2:07:e8:c9:69:b7:c6:bb:bc:bb:7e:ea:31:b6:d2:80: 2e:27:6b:0f:b1:26:05:ae:e3:18:a5:05:68:23:5f:74:c3:e2: ed:ef:f1:43:07:c4:dc:85:50:af:18:8f:9c:70:3c:8a:71:c6: e8:ad:a3:50:0d:de:fb:f4:19:27:dc:95:5f:01:98:b7:55:df: 6e:3c:db:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyBDNgtIMhPmo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NDc2NjE5N2YtN2ZhZi00YmFkLWIwNmYtNjhmOGQ5MWMzZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXOiK9vcI1kDNuZbbZeU2oht8CxyitTASoq5 qfjgtdewQ1DMn2Rgr0zr4WLyD2WM4POb4ANA8heTvbHigilD63+lOeIMKtuJb6Gp MV8jg/08GziDT+FR7gdxBn6xR//QbJZFTbDs6dIPxwhZ3I744q/87HhlogmZ9gF+ 04M2xemg/HnKhWZ2DJn4lYn7qPTeIDGXsRGCVmc+BgELlxu+VQBEbnj4Tq2YzXX8 npwmPKkNZuKamGXRnxB5dAfYyekb2NWdfO8EgAdYpgylJs8A8vDKmfui35DOOi5O 9sCquG4VkkzzUk3YhT9vzkAvPUNt/XEerDMbNKQE2aESyZCHoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSUyGPJF6ixS5SZeVWcNHYRT6JPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRiNjAzMTMtODIwYy0z YmI2LTg1ZjYtOGM4NTE4NGNhOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs2nHiIujit6JvLpwCcL09M1XRgnLBD3hcE5sO7vKELNix4IFVUnxu/ 8J4vlAs3hZivgtkr9VeNouUQG2zKO0/WKy7Oq8KHobCwyvGjLACZoREpYh2xfeuY 4AAbcETN9HQVwuF2ayaPKn9yn3b8zU7WnWTZ1wLDuc4naKMnlQDXkUJ1n0ymSwWE NzRR3dGVLAc2sdaIS2HahbJJJ9ohFTzjtg+57A/S1FhZNsS+SM3ripD1d2YW0gfo yWm3xru8u37qMbbSgC4naw+xJgWu4xilBWgjX3TD4u3v8UMHxNyFUK8Yj5xwPIpx xuito1AN3vv0GSfclV8BmLdV32482/c= -----END CERTIFICATE-----Generated at Thu Oct 22 10:23:27 2026 by rpki-client