$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa File: 33d85d43-8995-3afe-888d-f0b6318ae685.roa (raw, json) Hash identifier: esrSKnKSA8cxZYGHFaW4UJfShJaNQ3IxMy6FE2iwy4U= Subject key identifier: 20:0D:68:AD:81:D3:94:B2:24:A1:52:00:5D:58:53:B3:EE:7C:DF:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4C54A5AA0B9A0BEFF3295400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 20940 IP address blocks: 96.16.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a5:aa:0b:9a:0b:ef:f3:29:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=f42c49b2-762a-4e12-867e-6a07640a95d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:38:18:b7:56:52:57:bf:db:e0:b8:dc:33: ea:f7:b5:e4:1a:37:5f:24:23:27:3a:72:57:29:b8: 62:c2:93:9f:49:29:16:53:43:c5:a0:4a:85:ff:29: 90:c3:3a:43:55:f0:60:96:b6:4b:02:7e:26:2e:ce: 2a:bf:3c:63:2a:29:53:35:cc:18:91:55:3e:80:b7: 6e:49:72:38:11:c0:4c:f9:a4:a7:9d:cf:28:80:36: 86:28:28:2d:bc:6c:81:6a:74:90:5e:7b:41:a1:f5: be:03:3a:bc:b1:83:95:24:b2:29:85:ed:5b:17:32: 56:17:a4:3c:66:3e:46:6a:04:8c:08:12:78:00:14: 0a:06:11:90:ce:94:c5:e0:16:5e:0f:98:30:86:99: 21:7c:fe:89:27:7b:7e:09:42:19:68:14:ce:6d:7a: 42:95:d7:82:a9:cd:00:aa:1b:20:a8:7b:57:8f:27: 99:a6:1e:2e:9a:bb:bc:b6:a7:c1:46:31:47:2d:e0: 4f:9e:ed:49:86:e1:9c:28:28:77:24:10:f4:d2:bd: 9b:cb:97:12:fd:b4:32:42:3d:21:89:30:44:66:81: c4:ce:0c:6c:b8:b4:13:28:be:45:a6:c0:4a:84:77: e2:27:fa:84:53:39:52:55:41:72:83:84:c2:47:f8: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:68:AD:81:D3:94:B2:24:A1:52:00:5D:58:53:B3:EE:7C:DF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33d85d43-8995-3afe-888d-f0b6318ae685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:64:d1:b2:50:73:20:78:b9:aa:79:b6:9e:66:b5:e7:ce:9d: 26:12:36:67:9d:11:d3:92:62:44:43:5f:1f:04:a5:ba:2a:e5: 52:8c:21:2d:80:1e:b6:09:0c:99:e7:dd:84:0e:47:10:be:5f: cd:f4:ad:35:dd:54:22:93:c8:eb:9e:17:29:de:24:49:4f:b5: 17:90:47:ea:5c:94:b2:be:60:79:4a:a9:b5:b8:de:8d:f0:4a: a5:97:01:ed:f9:e6:3e:42:3b:01:d2:bd:86:46:10:4d:1a:91: 97:8f:5b:65:93:0a:dd:67:d3:00:6c:c7:99:5f:d2:22:59:4d: ac:19:32:4a:3d:a7:5a:f3:ab:e2:da:39:da:94:f8:ac:18:10: 0b:8e:3c:d2:f9:96:e5:ef:39:53:5d:d4:20:79:5a:04:ba:85: 31:47:4d:4d:5f:06:b0:91:02:fc:b6:12:69:0d:9a:20:01:5d: e5:94:da:01:b7:38:49:47:7d:49:86:13:d2:bf:b7:71:d2:7a: cb:a6:49:91:3f:e3:68:eb:62:69:8b:ce:bc:ae:b9:0b:80:c1: 18:e4:7f:f6:53:b4:95:26:81:0a:e9:ac:1c:6c:07:cb:1e:19: af:16:1c:a5:64:12:d5:a9:44:75:29:a2:74:e8:e8:3b:a6:d0: 6a:64:7e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKWqC5oL7/MpVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZjQyYzQ5YjItNzYyYS00ZTEyLTg2N2UtNmEwNzY0MGE5NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikI4GLdWUle/2+C43DPq97XkGjdfJCMnOnJX KbhiwpOfSSkWU0PFoEqF/ymQwzpDVfBglrZLAn4mLs4qvzxjKilTNcwYkVU+gLdu SXI4EcBM+aSnnc8ogDaGKCgtvGyBanSQXntBofW+Azq8sYOVJLIphe1bFzJWF6Q8 Zj5GagSMCBJ4ABQKBhGQzpTF4BZeD5gwhpkhfP6JJ3t+CUIZaBTObXpCldeCqc0A qhsgqHtXjyeZph4umru8tqfBRjFHLeBPnu1JhuGcKCh3JBD00r2by5cS/bQyQj0h iTBEZoHEzgxsuLQTKL5FpsBKhHfiJ/qEUzlSVUFyg4TCR/jmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCANaK2B05SyJKFSAF1YU7PufN8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNkODVkNDMtODk5NS0z YWZlLTg4OGQtZjBiNjMxOGFlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1k0bJQcyB4uap5tp5mtefOnSYSNmedEdOSYkRDXx8Epboq5VKMIS2A HrYJDJnn3YQORxC+X830rTXdVCKTyOueFyneJElPtReQR+pclLK+YHlKqbW43o3w SqWXAe355j5COwHSvYZGEE0akZePW2WTCt1n0wBsx5lf0iJZTawZMko9p1rzq+La OdqU+KwYEAuOPNL5luXvOVNd1CB5WgS6hTFHTU1fBrCRAvy2EmkNmiABXeWU2gG3 OElHfUmGE9K/t3HSesumSZE/42jrYmmLzryuuQuAwRjkf/ZTtJUmgQrprBxsB8se Ga8WHKVkEtWpRHUponTo6Dum0GpkfnQ= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:13 2026 by rpki-client