$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa File: c162141d-e85e-3661-95e8-c0baecb23358.roa (raw, json) Hash identifier: 6/4SK4BqBlGNUIpjv5/cwNYcJA7NSM1O8Yw1rTmFpdw= Subject key identifier: 28:B2:62:4D:96:0D:A4:F2:12:56:11:3C:A0:2F:14:FB:D5:DE:F8:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A321A394EA50A0C7297280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 35994 IP address blocks: 96.17.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:21:a3:94:ea:50:a0:c7:29:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=54fa95c7-5981-4aa9-8b7b-9e2c91dbbbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:04:96:34:af:3a:90:98:16:40:6d:a0:4d: ea:ad:bd:dd:4f:fd:9f:ae:f3:ab:53:40:1d:73:9f: 3a:fd:75:ed:f0:3d:d6:5d:20:3a:3b:a0:72:48:5d: 4a:12:41:92:42:2f:2e:6d:ba:fc:b3:81:74:d4:02: 93:1c:58:71:40:77:dd:34:4d:b1:4e:48:69:d7:7b: 34:bc:f0:2a:59:b4:0c:04:0b:89:3b:fc:ae:d2:86: 19:33:c6:86:54:c2:ab:6d:95:c3:78:ec:b5:85:0c: b6:e0:e0:e5:81:27:26:a6:02:56:ac:98:0a:77:57: f1:00:3f:f1:9d:aa:1a:1c:5e:f2:06:6d:ca:91:23: 3c:37:34:60:78:5a:56:04:7b:2e:23:b1:84:d1:33: d6:bb:8c:b4:5a:eb:cb:89:00:95:75:fc:cf:86:68: 88:f2:c8:d8:7b:28:50:c6:1f:d6:2a:4a:64:8c:99: f6:b9:2a:8c:15:06:91:ed:34:3c:14:1c:2a:76:1e: 83:7a:a5:81:44:2e:e5:42:48:b0:67:ef:4a:26:8d: a2:c3:f1:fa:be:10:18:69:f4:ab:a5:7c:6f:6d:f6: 32:db:29:79:f7:8f:9d:01:cf:0f:13:88:4d:10:30: dd:46:0a:cc:4a:b9:dd:c7:b6:bf:02:f2:32:13:0c: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:62:4D:96:0D:A4:F2:12:56:11:3C:A0:2F:14:FB:D5:DE:F8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:26:cf:a0:7d:36:31:68:cf:59:f1:d2:d6:bf:b8:5f:2e: 8d:b5:63:e8:a0:0a:8d:e4:27:7c:eb:a1:52:56:1a:db:e3:6e: 49:6e:c4:be:05:19:59:ff:2e:f9:cf:52:96:68:b8:be:07:cb: c4:69:99:f3:23:41:df:b2:19:9b:61:2e:b8:59:88:3c:e0:3b: de:09:10:03:5b:a5:15:5b:41:be:84:0c:76:18:45:24:bb:c0: 5c:1c:7d:eb:f1:4f:d6:a2:91:f0:d1:28:3e:3d:08:04:ae:e4: 22:41:0c:ff:fc:d8:01:c4:04:f6:f4:9c:65:41:c8:d9:d4:17: 06:77:45:46:fb:f4:3e:e9:75:0c:bb:ca:bf:bb:20:bc:1e:27: 43:63:8b:8e:ed:26:22:59:63:28:ab:07:88:2b:ba:75:5a:40: d8:6f:bc:30:78:f0:55:50:60:a8:b1:41:b8:e9:ad:83:bc:97: dd:ba:d5:1a:8d:7f:60:c4:d9:cd:54:aa:83:1c:70:84:f1:ce: 84:39:1a:d5:43:ee:2e:c0:db:2a:72:c4:42:dc:32:c5:3a:96: a8:3e:a1:2a:6d:95:34:fc:86:b5:7d:2c:b6:b2:7c:68:6f:a1: 66:b3:9b:27:d6:62:4f:91:12:d7:dc:d0:e6:4b:ae:2e:05:22: c1:4a:0d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyGjlOpQoMcpcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NTRmYTk1YzctNTk4MS00YWE5LThiN2ItOWUyYzkxZGJiYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AQEljSvOpCYFkBtoE3qrb3dT/2frvOrU0Ad c586/XXt8D3WXSA6O6BySF1KEkGSQi8ubbr8s4F01AKTHFhxQHfdNE2xTkhp13s0 vPAqWbQMBAuJO/yu0oYZM8aGVMKrbZXDeOy1hQy24ODlgScmpgJWrJgKd1fxAD/x naoaHF7yBm3KkSM8NzRgeFpWBHsuI7GE0TPWu4y0WuvLiQCVdfzPhmiI8sjYeyhQ xh/WKkpkjJn2uSqMFQaR7TQ8FBwqdh6DeqWBRC7lQkiwZ+9KJo2iw/H6vhAYafSr pXxvbfYy2yl594+dAc8PE4hNEDDdRgrMSrndx7a/AvIyEwwksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiyYk2WDaTyElYRPKAvFPvV3vjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzE2MjE0MWQtZTg1ZS0z NjYxLTk1ZTgtYzBiYWVjYjIzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpeJs+gfTYxaM9Z8dLWv7hfLo21Y+igCo3kJ3zroVJWGtvjbkluxL4F GVn/LvnPUpZouL4Hy8RpmfMjQd+yGZthLrhZiDzgO94JEANbpRVbQb6EDHYYRSS7 wFwcfevxT9aikfDRKD49CASu5CJBDP/82AHEBPb0nGVByNnUFwZ3RUb79D7pdQy7 yr+7ILweJ0Nji47tJiJZYyirB4grunVaQNhvvDB48FVQYKixQbjprYO8l9261RqN f2DE2c1UqoMccITxzoQ5GtVD7i7A2ypyxELcMsU6lqg+oSptlTT8hrV9LLayfGhv oWazmyfWYk+REtfc0OZLri4FIsFKDe0= -----END CERTIFICATE-----Generated at Wed Oct 21 14:48:54 2026 by rpki-client