$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa File: 3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa (raw, json) Hash identifier: DVosnP2PAmINgq4BSDSQWKFGPLNgfIWjF9G5kylnp2Y= Subject key identifier: 2A:78:80:0D:6D:55:58:23:8A:C9:DB:E4:BD:76:CC:43:D5:85:92:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3201A9024A1994E2BBD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 96.16.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:20:1a:90:24:a1:99:4e:2b:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=f54b6df5-b3fa-45c8-a717-f6a1e0809e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:ec:1e:ca:9e:d2:64:39:3d:52:32:bc:b9: b9:f9:0d:31:4c:e5:4d:6d:21:64:f0:32:3c:88:65: f2:eb:87:b1:33:0a:d6:58:7c:32:da:74:41:24:fb: eb:54:18:18:cb:f5:3d:3b:c0:cd:a7:9b:68:9b:99: 57:bb:88:21:56:51:74:8a:54:25:8f:d3:15:af:3f: 36:db:09:35:b2:71:de:21:ed:25:c5:e0:76:6b:0c: 66:cc:ba:e2:d2:7f:e8:8e:f2:33:42:55:2e:7b:7f: b2:4e:5a:28:09:7f:a9:94:11:77:da:44:02:e0:94: cd:29:60:26:f7:13:90:6e:c2:40:0b:6d:0a:e3:a5: f9:1e:b4:15:a0:01:6b:d8:32:02:8d:e1:1f:38:8f: 55:fb:77:13:cb:92:c6:db:58:e8:e0:51:df:a5:95: 47:ca:cc:01:b9:79:4a:96:16:e6:a1:5b:c6:e7:82: d6:e8:fc:b2:9a:ff:6a:b2:36:49:23:4e:73:8b:b0: 9c:d2:ab:37:71:f7:cf:67:55:fd:4d:87:43:6f:3a: c4:7c:d2:bc:16:de:29:e4:e8:bb:c3:4d:86:28:95: e7:46:1b:56:fc:9e:58:b7:07:6e:81:8b:38:dd:41: d2:09:00:5b:8f:3c:b0:73:10:26:a1:7d:3c:d0:77: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:80:0D:6D:55:58:23:8A:C9:DB:E4:BD:76:CC:43:D5:85:92:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3da49800-be20-3e2e-b73f-fca7e30e6b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3a:54:c4:71:32:85:4a:95:f0:fc:e4:8d:14:d8:8c:bd:02: d6:7d:a0:b4:b2:3f:fe:b4:a0:ad:ba:13:01:dd:62:54:4c:e1: a3:a5:85:81:4b:ab:10:e8:5b:1c:5c:e1:93:75:f9:33:40:ec: 98:52:00:a1:6a:39:23:5a:9e:d7:b8:38:f5:a2:53:a1:8c:35: 39:05:ba:53:14:2f:77:77:d7:1c:0b:eb:6d:18:84:f8:c1:e2: fd:5b:49:37:4d:4e:6e:c9:f3:4e:b1:43:e1:01:73:c1:01:d1: a3:f7:c8:d8:12:1c:f6:f7:5a:52:fe:43:33:79:cd:ec:22:da: d9:33:81:b9:ba:41:44:2f:42:95:ec:7f:96:e9:ac:8c:5e:f4: 69:05:db:a6:45:d7:79:b1:e5:94:d8:e6:6c:41:d8:bc:e4:94: 43:53:bc:a2:05:e0:7b:6c:f1:8a:27:ee:bd:c2:ca:06:be:fd: 31:cd:10:6a:f3:e2:d7:bb:91:de:65:3e:de:6a:62:2c:4e:73: 7c:11:a7:fb:ad:ce:2c:a2:10:0e:9e:06:e0:3f:cf:3f:f3:07: 2f:33:5a:5d:ac:92:79:23:b5:27:c5:1c:89:9f:d1:b5:33:92: 8b:88:7f:b7:28:7b:a6:8a:13:a0:0e:14:65:f4:e5:5f:6f:f4: 9b:e3:79:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyAakCShmU4rvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ZjU0YjZkZjUtYjNmYS00NWM4LWE3MTctZjZhMWUwODA5ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVDsHsqe0mQ5PVIyvLm5+Q0xTOVNbSFk8DI8 iGXy64exMwrWWHwy2nRBJPvrVBgYy/U9O8DNp5tom5lXu4ghVlF0ilQlj9MVrz82 2wk1snHeIe0lxeB2awxmzLri0n/ojvIzQlUue3+yTlooCX+plBF32kQC4JTNKWAm 9xOQbsJAC20K46X5HrQVoAFr2DICjeEfOI9V+3cTy5LG21jo4FHfpZVHyswBuXlK lhbmoVvG54LW6Pyymv9qsjZJI05zi7Cc0qs3cffPZ1X9TYdDbzrEfNK8Ft4p5Oi7 w02GKJXnRhtW/J5YtwdugYs43UHSCQBbjzywcxAmoX080HcDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp4gA1tVVgjisnb5L12zEPVhZLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RhNDk4MDAtYmUyMC0z ZTJlLWI3M2YtZmNhN2UzMGU2YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU6VMRxMoVKlfD85I0U2Iy9AtZ9oLSyP/60oK26EwHdYlRM4aOlhYFL qxDoWxxc4ZN1+TNA7JhSAKFqOSNante4OPWiU6GMNTkFulMUL3d31xwL620YhPjB 4v1bSTdNTm7J806xQ+EBc8EB0aP3yNgSHPb3WlL+QzN5zewi2tkzgbm6QUQvQpXs f5bprIxe9GkF26ZF13mx5ZTY5mxB2LzklENTvKIF4Hts8Yon7r3Cyga+/THNEGrz 4te7kd5lPt5qYixOc3wRp/utziyiEA6eBuA/zz/zBy8zWl2sknkjtSfFHImf0bUz kouIf7coe6aKE6AOFGX05V9v9JvjeXk= -----END CERTIFICATE-----Generated at Sun Oct 25 04:55:34 2026 by rpki-client