$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa File: 65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa (raw, json) Hash identifier: TW2PJS3OGsQ+DfDXxWo1WpxCc2u57QYalBxQJDfzCR4= Subject key identifier: 87:BA:57:D7:CA:AB:34:15:15:5B:5E:CD:C5:12:A4:49:83:0B:A6:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3113339E04A7B10540840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 96.16.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:11:33:39:e0:4a:7b:10:54:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=43c8dffa-02bf-4a8b-b2c5-3b7f72c50da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:ba:e7:20:35:0d:29:de:68:9a:36:48:cd: b7:d3:d1:1d:15:35:bf:2f:1d:df:b7:6d:ce:1f:d7: f7:32:6e:f4:f3:f4:0f:0c:18:69:e1:ed:f1:4e:27: bd:7e:a4:f0:c0:5e:fb:16:81:3b:f8:61:e3:bf:06: c9:32:fe:1c:7d:1c:8d:c0:87:51:87:c6:c3:61:50: 2a:8a:41:fa:ad:e4:01:14:e9:c5:fe:25:d2:02:87: ed:a8:fc:25:a3:67:26:8f:76:34:18:14:d8:8e:39: db:a5:e9:13:90:ce:b2:b3:e3:35:97:37:e9:da:4f: 72:e3:d1:f9:d7:8d:05:a0:2c:96:65:e3:47:33:c2: b5:fd:fd:c0:c6:8a:a9:67:0f:73:8c:48:44:fa:ec: bf:f2:49:e2:18:69:79:d9:10:4c:94:e5:24:a8:08: b4:ee:e5:03:1e:3f:b7:cf:f1:0c:7b:78:f0:21:02: 8f:d9:2d:bd:0a:2c:4a:a8:ae:0f:eb:f5:fa:d4:9e: cf:db:c7:ec:8a:17:b7:b0:75:89:8a:b2:4a:32:c0: fe:b6:96:ae:d0:f3:9d:82:60:a0:81:7d:e1:0a:b8: d1:e0:6d:c2:99:59:6e:68:57:c5:f8:2f:e8:bb:af: bd:36:6f:65:e9:6c:73:56:ff:4c:70:c8:c9:25:fd: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:57:D7:CA:AB:34:15:15:5B:5E:CD:C5:12:A4:49:83:0B:A6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ed:00:ac:da:82:aa:61:08:3a:94:02:94:5b:7c:34:24:d3: 48:23:fe:64:21:aa:68:ed:36:8d:90:ce:bb:32:01:bd:a3:fc: a0:a3:67:49:ff:46:82:c0:5c:f7:c7:a0:76:3f:6b:90:df:38: 62:6b:fe:d9:ce:8b:c7:e2:e9:73:34:c8:80:54:89:33:89:a4: a8:b9:18:18:70:67:d7:5a:23:33:71:1c:b6:f9:98:61:26:e4: 4b:e1:bb:ea:19:fe:c7:b4:b4:85:d8:2c:df:c6:dd:36:a1:5a: 9f:dc:e4:3f:94:7d:81:36:28:fc:fe:53:5e:ec:1a:d4:b7:53: a3:59:d8:59:65:f7:10:29:08:f7:d5:f3:7e:3c:a9:e2:fd:bc: cc:e7:d1:4c:6e:69:da:9e:e0:45:fa:58:b3:15:e5:35:f1:7a: dd:62:e0:af:67:3f:a2:d1:d4:b5:aa:bb:94:55:b5:5d:7a:e2: b6:68:07:a9:28:12:57:1c:04:8d:dc:fc:be:b5:e4:d0:b4:c6: 4f:51:0b:77:65:24:84:30:50:c4:2a:a4:98:5c:8e:f7:c5:7f: 62:59:e7:55:a2:dc:b8:24:a9:b8:4a:07:e2:08:9f:70:31:8e: e5:70:75:bd:fc:fb:8d:ba:f7:f7:c1:49:c6:be:7e:6a:86:f7: 7b:98:17:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxEzOeBKexBUCEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NDNjOGRmZmEtMDJiZi00YThiLWIyYzUtM2I3ZjcyYzUwZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjm65yA1DSneaJo2SM2309EdFTW/Lx3ft23O H9f3Mm708/QPDBhp4e3xTie9fqTwwF77FoE7+GHjvwbJMv4cfRyNwIdRh8bDYVAq ikH6reQBFOnF/iXSAoftqPwlo2cmj3Y0GBTYjjnbpekTkM6ys+M1lzfp2k9y49H5 140FoCyWZeNHM8K1/f3AxoqpZw9zjEhE+uy/8kniGGl52RBMlOUkqAi07uUDHj+3 z/EMe3jwIQKP2S29CixKqK4P6/X61J7P28fsihe3sHWJirJKMsD+tpau0POdgmCg gX3hCrjR4G3CmVluaFfF+C/ou6+9Nm9l6WxzVv9McMjJJf2iNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe6V9fKqzQVFVtezcUSpEmDC6bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVkNDBjMWMtZjg2Zi0z ZWRmLThmNmEtYWE3MDM4NTdiZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITtAKzagqphCDqUApRbfDQk00gj/mQhqmjtNo2QzrsyAb2j/KCjZ0n/ RoLAXPfHoHY/a5DfOGJr/tnOi8fi6XM0yIBUiTOJpKi5GBhwZ9daIzNxHLb5mGEm 5Evhu+oZ/se0tIXYLN/G3TahWp/c5D+UfYE2KPz+U17sGtS3U6NZ2Fll9xApCPfV 8348qeL9vMzn0Uxuadqe4EX6WLMV5TXxet1i4K9nP6LR1LWqu5RVtV164rZoB6ko ElccBI3c/L615NC0xk9RC3dlJIQwUMQqpJhcjvfFf2JZ51Wi3LgkqbhKB+IIn3Ax juVwdb38+4269/fBSca+fmqG93uYF6w= -----END CERTIFICATE-----Generated at Sat Oct 24 10:45:56 2026 by rpki-client