$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa File: c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa (raw, json) Hash identifier: v2fg4jemzbq8QUTzmDCSqL19Pk6c8kkD5bqnKcPGu9c= Subject key identifier: B3:9E:95:52:9E:8A:65:53:B8:C4:28:EB:29:FF:50:6B:67:DC:DD:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A321C6482B6069AE4B6200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 45758 IP address blocks: 96.17.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:21:c6:48:2b:60:69:ae:4b:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=83df7a1b-5dc2-4241-bb01-51197f8c73a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:a6:13:43:15:26:b5:ec:54:84:1d:5b:9d: c4:c5:52:0d:6d:76:22:5d:7e:df:e0:2a:b6:01:11: ae:4c:0b:ff:a6:9d:29:44:a3:1d:aa:64:62:70:aa: 1c:c1:54:5f:87:5c:d4:c9:a0:b3:6a:f6:5f:63:0a: b6:24:b9:36:8b:76:ce:34:aa:86:8a:10:df:03:b1: 76:26:9e:8b:b4:92:bb:35:6a:6b:1a:d7:25:fc:cc: 17:f7:3d:d2:b7:6b:a9:72:76:d4:73:61:cb:0d:91: 2a:60:1e:31:d9:16:9f:80:74:90:27:e0:47:2e:89: 2a:25:6d:b8:2a:e1:e9:b2:67:d1:ce:43:ac:06:2c: 47:d2:ce:00:6d:05:f4:49:19:72:7c:0a:78:3a:72: 98:8b:b3:76:4e:56:9c:4c:56:ca:dc:89:1c:cf:cd: 6e:fc:12:8a:f2:23:0b:5e:e6:d1:dd:28:49:dc:9b: aa:7b:41:15:c3:c2:b2:25:86:16:b5:4f:97:31:35: 1a:e5:5b:0d:f0:c6:6a:50:3e:a2:17:85:94:50:ab: cb:59:c3:4d:c3:9d:84:27:cf:cd:a7:43:0b:9f:b2: ff:07:da:c1:eb:c2:4a:ce:d3:b2:17:52:49:89:fb: d9:b1:5f:dd:16:27:5e:c1:cf:9c:98:17:c9:07:71: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9E:95:52:9E:8A:65:53:B8:C4:28:EB:29:FF:50:6B:67:DC:DD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ba:d5:b1:b3:65:ec:30:a9:8b:5c:a2:2b:c2:44:ae:53:32: 5e:13:81:b7:a7:34:2b:2e:3f:67:60:81:94:2b:d4:af:df:9b: 8c:6b:27:af:47:eb:1d:26:5d:a6:90:99:1d:73:cb:34:f2:86: 5c:bb:7b:cd:69:79:71:cb:e8:88:6e:a1:a0:5b:a1:7e:86:77: 0e:8f:0d:2c:3b:e0:b5:e1:99:09:1c:bb:ae:3c:be:b3:7d:8e: 3d:a8:a1:1e:38:f9:f7:94:c8:ce:fe:de:ab:f7:a2:0e:1b:61: 32:40:cc:63:69:29:b8:81:81:bc:f5:f9:fa:7c:e4:40:43:c2: 0f:f1:cd:d6:4f:e3:73:b2:5b:18:27:32:e8:d6:54:80:9a:67: ea:38:a2:d5:ad:cc:e6:39:60:dc:a5:8e:83:37:10:0a:dd:66: 4a:9f:08:50:36:93:4b:ce:e1:14:91:67:d3:f1:4b:d2:39:eb: 42:7f:44:27:1b:e1:33:dd:92:a6:9b:48:49:c9:6b:8e:79:64: b3:6c:e0:29:a5:d4:95:5a:21:b2:ef:57:6a:a1:85:f1:42:5a: e6:16:ab:32:05:3e:c6:b6:44:3f:dc:14:4b:e7:be:18:93:d6: 50:b3:ae:4f:74:f9:d1:b7:08:8b:8a:f4:c6:49:65:c0:49:70: 38:a5:c4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoyHGSCtgaa5LYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ODNkZjdhMWItNWRjMi00MjQxLWJiMDEtNTExOTdmOGM3M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg22mE0MVJrXsVIQdW53ExVINbXYiXX7f4Cq2 ARGuTAv/pp0pRKMdqmRicKocwVRfh1zUyaCzavZfYwq2JLk2i3bONKqGihDfA7F2 Jp6LtJK7NWprGtcl/MwX9z3St2upcnbUc2HLDZEqYB4x2RafgHSQJ+BHLokqJW24 KuHpsmfRzkOsBixH0s4AbQX0SRlyfAp4OnKYi7N2TlacTFbK3Ikcz81u/BKK8iML XubR3ShJ3Juqe0EVw8KyJYYWtU+XMTUa5VsN8MZqUD6iF4WUUKvLWcNNw52EJ8/N p0MLn7L/B9rB68JKztOyF1JJifvZsV/dFidewc+cmBfJB3Gm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOelVKeimVTuMQo6yn/UGtn3N1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzYxNzdjYjEtM2IwNi0z MDdjLThlMGQtNzFkMTJhOGQzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYBHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG61bGzZewwqYtcoivCRK5TMl4TgbenNCsuP2dggZQr1K/fm4xrJ69H 6x0mXaaQmR1zyzTyhly7e81peXHL6IhuoaBboX6Gdw6PDSw74LXhmQkcu648vrN9 jj2ooR44+feUyM7+3qv3og4bYTJAzGNpKbiBgbz1+fp85EBDwg/xzdZP43OyWxgn MujWVICaZ+o4otWtzOY5YNyljoM3EArdZkqfCFA2k0vO4RSRZ9PxS9I560J/RCcb 4TPdkqabSEnJa455ZLNs4Cml1JVaIbLvV2qhhfFCWuYWqzIFPsa2RD/cFEvnvhiT 1lCzrk90+dG3CIuK9MZJZcBJcDilxJI= -----END CERTIFICATE-----Generated at Thu Oct 29 13:52:28 2026 by rpki-client