$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa File: 8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa (raw, json) Hash identifier: 3BT8Mp8HY61/3G+39koDt7F77xBfJ5hG8Ms3h7SBLZg= Subject key identifier: 81:30:0D:1B:3C:3D:FF:CF:A9:B6:F9:25:7F:8B:D4:BA:16:47:65:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3113E9888FCD27C3B1AA8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 96.16.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:11:3e:98:88:fc:d2:7c:3b:1a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=e39d4e0a-5c1d-4314-adbf-27f7975d5ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:7c:67:f3:44:3d:96:43:2a:dd:e1:8c:82: a3:db:b6:84:c3:0b:18:62:f8:2d:e2:eb:6b:b4:2b: 4c:bb:fc:a3:ff:45:d6:47:6f:9e:f7:d4:45:ea:4b: de:cc:00:a0:a1:3e:5c:bc:c2:b1:75:b1:f9:b2:10: a0:a2:22:85:ad:0e:35:91:59:3a:da:a8:7d:08:8f: ea:b9:79:fe:c4:62:68:e8:76:df:6c:7b:2d:62:47: 68:47:cf:cb:d4:e6:a4:84:20:1e:2c:3e:ea:6f:01: 14:09:bf:be:38:28:65:c9:ae:fa:98:5d:79:91:b7: 02:f0:56:0e:51:68:eb:ea:52:66:b0:2e:86:30:95: 5f:47:0d:9e:02:fb:17:0e:d4:4a:19:4e:7f:22:58: ca:5e:e5:00:99:07:a0:77:56:44:e9:af:57:cb:34: 7c:ea:2e:18:4a:39:13:e6:32:46:da:8d:12:a4:bb: 20:14:c5:45:b9:70:f0:d8:97:7a:ce:06:3e:1b:49: 2e:13:b9:fd:60:6d:12:a6:0c:88:75:af:a0:ee:63: 3f:dc:ee:32:25:f3:1e:9c:8a:b2:9f:bf:ee:61:68: b7:4a:da:db:a7:54:44:99:9e:1a:ff:a6:f7:80:1a: 67:46:8b:fa:f3:76:b0:ea:d0:9a:b8:2a:55:0f:a4: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:0D:1B:3C:3D:FF:CF:A9:B6:F9:25:7F:8B:D4:BA:16:47:65:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:94:ac:46:fa:11:f2:61:07:54:4e:e3:c2:b4:dd:7f:54:89: 60:67:b0:f4:30:84:5f:88:02:0a:de:9d:73:a8:c8:18:23:33: c7:cf:d2:5f:fa:5b:60:b9:5f:c4:2c:e1:74:32:4f:ee:70:3e: 92:d4:63:f6:93:c6:14:c1:bf:72:a1:3a:e3:e5:1b:b0:e4:fe: 00:f7:2e:20:9c:e0:69:44:51:19:c0:e1:e4:c7:9b:f9:27:86: 0c:02:ed:db:a5:20:f0:50:c3:a7:43:4d:12:d1:af:7a:b0:b1: d3:92:1a:ed:1f:db:aa:69:6e:96:74:36:ce:e1:47:6e:6a:4f: 4e:a6:b0:56:29:0b:d2:5f:6f:7a:2f:b7:19:7e:5b:d2:4a:e2: a5:76:8e:fb:4a:2b:8b:53:20:b1:c4:04:5c:46:77:46:30:a4: 0a:bd:95:62:1e:5a:7d:ce:d7:72:d3:18:d1:73:b4:1e:7d:9e: 71:b5:42:5d:f1:63:da:ed:ee:7f:59:b5:fa:20:0b:44:1d:12: 90:eb:42:00:d9:98:0c:94:46:a0:10:8a:d2:9a:31:e6:7b:6f: fc:cf:12:fe:b2:68:32:e9:86:4c:9b:87:72:b2:62:7a:cf:1a: 30:df:64:64:16:f3:4d:58:bd:17:4a:7d:68:64:05:ef:58:e3: dd:81:45:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxE+mIj80nw7GqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ZTM5ZDRlMGEtNWMxZC00MzE0LWFkYmYtMjdmNzk3NWQ1ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDl8Z/NEPZZDKt3hjIKj27aEwwsYYvgt4utr tCtMu/yj/0XWR2+e99RF6kvezACgoT5cvMKxdbH5shCgoiKFrQ41kVk62qh9CI/q uXn+xGJo6HbfbHstYkdoR8/L1OakhCAeLD7qbwEUCb++OChlya76mF15kbcC8FYO UWjr6lJmsC6GMJVfRw2eAvsXDtRKGU5/IljKXuUAmQegd1ZE6a9XyzR86i4YSjkT 5jJG2o0SpLsgFMVFuXDw2Jd6zgY+G0kuE7n9YG0SpgyIda+g7mM/3O4yJfMenIqy n7/uYWi3Strbp1REmZ4a/6b3gBpnRov683aw6tCauCpVD6T9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEwDRs8Pf/Pqbb5JX+L1LoWR2UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI5YWEwMjAtNmRkMi0z YTJiLWFjMmQtODc0NGM4MGRiMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyUrEb6EfJhB1RO48K03X9UiWBnsPQwhF+IAgrenXOoyBgjM8fP0l/6 W2C5X8Qs4XQyT+5wPpLUY/aTxhTBv3KhOuPlG7Dk/gD3LiCc4GlEURnA4eTHm/kn hgwC7dulIPBQw6dDTRLRr3qwsdOSGu0f26ppbpZ0Ns7hR25qT06msFYpC9Jfb3ov txl+W9JK4qV2jvtKK4tTILHEBFxGd0YwpAq9lWIeWn3O13LTGNFztB59nnG1Ql3x Y9rt7n9ZtfogC0QdEpDrQgDZmAyURqAQitKaMeZ7b/zPEv6yaDLphkybh3KyYnrP GjDfZGQW801YvRdKfWhkBe9Y492BRfk= -----END CERTIFICATE-----Generated at Tue Oct 20 22:19:13 2026 by rpki-client