$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa File: 37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa (raw, json) Hash identifier: 1ckv4vkKZ1bjj0/l/364mQ9c/BskyK1j619TG9Z0izU= Subject key identifier: A5:34:85:B8:70:11:0B:65:64:76:0C:2E:95:AA:EC:1C:B7:4C:DA:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F89A88125E8832049F73E3988 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 16625 IP address blocks: 96.6.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:81:25:e8:83:20:49:f7:3e:39:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=d45c575c-3d29-4917-8b0d-2f252a450836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:1a:06:4e:5d:c3:43:96:b5:d2:31:f1:77: 51:ab:a3:cc:93:dc:fa:e9:ed:79:10:2f:e2:e2:bb: 05:95:34:dc:0f:88:9d:a0:21:c0:72:78:45:63:29: 6c:cd:0b:b1:2d:b5:6d:c2:00:eb:11:7e:93:e8:77: 46:c0:fe:32:71:7a:4f:b3:26:39:a1:24:c7:57:65: cc:c9:c6:08:2a:be:20:86:ae:33:1f:a8:da:49:d5: b3:69:b2:eb:48:4d:69:9a:5b:9b:fc:74:17:32:54: f5:e4:1b:e7:94:68:e7:f6:14:33:aa:3a:6a:c8:83: ee:e9:cb:bd:94:43:31:fd:4b:b7:20:a3:22:a4:fc: 79:2f:24:a8:db:d8:ac:2d:3b:7a:b8:d0:23:23:f6: 23:a6:56:e7:b2:70:47:ba:a1:c4:ed:67:0e:22:92: 79:de:27:c5:7c:92:be:1c:c2:32:df:6e:ca:d1:dc: 1e:59:38:14:72:4d:07:e9:7a:59:e1:84:bc:41:d0: 24:07:a8:96:6c:7a:32:a3:50:87:e2:2f:7e:de:72: c4:a3:55:9d:98:84:0c:a4:f6:01:09:5b:30:fa:13: 16:80:48:1b:22:e7:cd:e1:5e:e5:7e:9a:26:b8:4d: 54:ce:09:45:6b:56:f3:a6:6f:b4:29:1a:13:6c:37: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:34:85:B8:70:11:0B:65:64:76:0C:2E:95:AA:EC:1C:B7:4C:DA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37a3e38c-3235-3dcb-b594-51f5e4a49a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4c:26:14:37:12:fe:b2:52:80:c8:1b:76:6b:4c:a2:6e:87: e2:37:1b:2e:28:11:a9:df:b5:26:bb:df:fe:77:a6:04:b8:04: 44:60:95:a9:53:ba:a2:3e:57:3a:d0:ac:ce:c5:b7:da:c0:5a: f2:8b:03:de:7d:d5:f2:b1:cd:cc:4a:63:b8:2a:85:fe:b1:17: 34:bd:cc:cc:a0:be:8d:3f:1f:59:03:3c:a1:22:a5:60:eb:8d: 52:59:37:a8:bc:31:ae:8e:19:ee:19:a7:77:17:36:f0:e8:13: 24:03:eb:66:68:e5:17:41:6d:8c:a8:bc:9b:9f:0a:24:22:fb: ee:aa:b6:c7:d8:e1:96:bb:fa:16:c2:34:d1:1d:cd:b9:51:2c: f3:0e:72:23:c2:50:f1:93:3b:0c:3c:d7:f5:77:b9:86:5e:20: 0b:9b:79:27:ba:83:da:8a:87:ec:aa:ee:cc:1a:74:6e:d3:8f: 51:74:f9:70:39:71:51:37:f5:4f:8c:0c:a9:8a:7f:f8:79:86: a8:73:b9:ef:b5:c9:f8:d6:e6:6b:9e:39:54:ea:a8:fe:f5:89: b8:c1:43:1b:55:04:f5:b0:a6:a3:f9:83:a5:9a:94:2d:68:4f: f1:b4:05:65:7b:55:ab:28:8a:38:45:bf:19:0c:ab:1e:99:91: 59:04:a5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIEl6IMgSfc+OYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZDQ1YzU3NWMtM2QyOS00OTE3LThiMGQtMmYyNTJhNDUwODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EUaBk5dw0OWtdIx8XdRq6PMk9z66e15EC/i 4rsFlTTcD4idoCHAcnhFYylszQuxLbVtwgDrEX6T6HdGwP4ycXpPsyY5oSTHV2XM ycYIKr4ghq4zH6jaSdWzabLrSE1pmlub/HQXMlT15BvnlGjn9hQzqjpqyIPu6cu9 lEMx/Uu3IKMipPx5LySo29isLTt6uNAjI/YjplbnsnBHuqHE7WcOIpJ53ifFfJK+ HMIy327K0dweWTgUck0H6XpZ4YS8QdAkB6iWbHoyo1CH4i9+3nLEo1WdmIQMpPYB CVsw+hMWgEgbIufN4V7lfpomuE1UzglFa1bzpm+0KRoTbDfTjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU0hbhwEQtlZHYMLpWq7By3TNogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdhM2UzOGMtMzIzNS0z ZGNiLWI1OTQtNTFmNWU0YTQ5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVMJhQ3Ev6yUoDIG3ZrTKJuh+I3Gy4oEanftSa73/53pgS4BERglalT uqI+VzrQrM7Ft9rAWvKLA9591fKxzcxKY7gqhf6xFzS9zMygvo0/H1kDPKEipWDr jVJZN6i8Ma6OGe4Zp3cXNvDoEyQD62Zo5RdBbYyovJufCiQi++6qtsfY4Za7+hbC NNEdzblRLPMOciPCUPGTOww81/V3uYZeIAubeSe6g9qKh+yq7swadG7Tj1F0+XA5 cVE39U+MDKmKf/h5hqhzue+1yfjW5mueOVTqqP71ibjBQxtVBPWwpqP5g6WalC1o T/G0BWV7VasoijhFvxkMqx6ZkVkEpSs= -----END CERTIFICATE-----Generated at Thu Oct 22 20:19:33 2026 by rpki-client