$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa File: d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa (raw, json) Hash identifier: M5JaU62vaONmypDzBF3ZyVdrVcDygEfs8O6fC27mdUE= Subject key identifier: 15:12:2C:AC:6B:FC:EE:8A:94:C0:43:F2:20:B5:46:CC:51:EB:C2:E3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3123DF79F350489613980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 96.17.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:12:3d:f7:9f:35:04:89:61:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=4cafa458-8d72-4841-b948-dfb76ff6cbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:04:de:1d:ac:fb:e3:ca:40:5a:30:14:31: 27:b6:bd:e6:39:44:e8:a0:a4:15:12:43:7c:d8:cc: fc:b1:09:02:3c:e0:64:73:48:d2:06:48:ce:65:f7: b0:31:ae:68:c0:db:00:26:b2:ad:cb:a6:6d:8b:b3: e9:b5:c2:0e:06:bd:01:54:47:f1:fb:d8:d3:78:5b: ce:f3:d9:5f:e6:fd:8f:35:9f:13:5c:1e:ac:ca:4d: 3c:ea:89:a2:c4:ce:4b:97:77:e7:5a:67:77:8a:69: 55:a3:2c:33:0f:16:62:87:ef:a1:c0:12:9a:58:40: 24:0d:71:a2:0f:83:e1:d7:cf:a4:23:ec:85:4a:86: bb:b8:10:26:82:ce:e3:2d:71:fb:2a:b0:a4:a1:17: 17:dd:a5:92:e6:90:2c:54:65:9e:c6:17:19:a0:2e: a4:d1:e5:5c:06:64:cd:80:73:c5:dd:4e:96:1e:61: df:58:f5:5c:18:1f:6d:ce:ad:70:0e:c8:62:ce:60: 91:04:cd:e8:5c:cf:87:bf:9b:1f:2d:56:4f:ad:be: 2e:cf:62:a9:2e:32:e6:04:ec:fa:36:45:db:f2:91: f9:fd:dd:5e:5d:88:76:bd:dc:19:96:d0:77:ff:78: 9f:97:a1:8b:b9:6f:0c:db:75:03:fb:94:b4:24:3e: 27:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:12:2C:AC:6B:FC:EE:8A:94:C0:43:F2:20:B5:46:CC:51:EB:C2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96e9e19-9766-33b0-b2bb-aab95fa0decf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a3:7e:1f:df:41:5e:10:62:b5:65:7a:4c:3d:53:63:a1:5b: 65:94:86:1c:14:7d:24:78:e8:e8:e2:73:6b:8d:f6:02:2f:25: 6a:06:a4:ed:b0:cc:68:9a:23:7d:3a:a3:58:c0:de:29:f2:ba: 76:04:de:d5:4a:5f:e8:84:68:41:0b:db:7c:f8:82:34:40:21: a6:b9:7d:95:fe:7a:f0:fa:df:b2:e7:2f:3b:7d:41:e0:18:fa: 6a:da:47:da:4c:96:2e:9a:6f:63:7f:c6:7f:40:72:27:5e:f2: be:6b:09:b0:ad:44:b5:b3:66:44:93:0f:10:e0:c6:bf:e5:cc: 70:63:14:d6:38:bb:57:28:a3:42:0d:2e:02:5c:03:0c:84:b3: 0e:e1:38:a4:fa:55:1d:4e:cd:25:f9:ec:f2:d1:ba:72:f2:f8: 9a:39:8d:85:eb:24:69:18:d7:67:f9:1f:fb:c2:56:3a:75:59: 75:07:dd:a5:51:07:6c:4d:47:b6:60:4b:0c:f1:aa:5f:d6:25: 23:d0:64:c6:6f:c9:3e:2f:4b:fa:42:08:69:a5:00:f3:90:40: 91:65:d2:31:ad:79:5b:e7:a2:eb:0f:f8:5d:1e:1a:cf:3c:6d: b6:de:6b:18:61:80:f0:f2:24:ab:c1:b2:22:f5:54:24:30:f1: b9:cb:a9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxI99581BIlhOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NGNhZmE0NTgtOGQ3Mi00ODQxLWI5NDgtZGZiNzZmZjZjYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtgE3h2s++PKQFowFDEntr3mOUTooKQVEkN8 2Mz8sQkCPOBkc0jSBkjOZfewMa5owNsAJrKty6Zti7PptcIOBr0BVEfx+9jTeFvO 89lf5v2PNZ8TXB6syk086omixM5Ll3fnWmd3imlVoywzDxZih++hwBKaWEAkDXGi D4Ph18+kI+yFSoa7uBAmgs7jLXH7KrCkoRcX3aWS5pAsVGWexhcZoC6k0eVcBmTN gHPF3U6WHmHfWPVcGB9tzq1wDshizmCRBM3oXM+Hv5sfLVZPrb4uz2KpLjLmBOz6 NkXb8pH5/d1eXYh2vdwZltB3/3ifl6GLuW8M23UD+5S0JD4ncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUSLKxr/O6KlMBD8iC1RsxR68LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk2ZTllMTktOTc2Ni0z M2IwLWIyYmItYWFiOTVmYTBkZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6jfh/fQV4QYrVlekw9U2OhW2WUhhwUfSR46Ojic2uN9gIvJWoGpO2w zGiaI306o1jA3inyunYE3tVKX+iEaEEL23z4gjRAIaa5fZX+evD637LnLzt9QeAY +mraR9pMli6ab2N/xn9Acide8r5rCbCtRLWzZkSTDxDgxr/lzHBjFNY4u1coo0IN LgJcAwyEsw7hOKT6VR1OzSX57PLRunLy+Jo5jYXrJGkY12f5H/vCVjp1WXUH3aVR B2xNR7ZgSwzxql/WJSPQZMZvyT4vS/pCCGmlAPOQQJFl0jGteVvnousP+F0eGs88 bbbeaxhhgPDyJKvBsiL1VCQw8bnLqS0= -----END CERTIFICATE-----Generated at Thu Oct 22 11:59:54 2026 by rpki-client