$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa File: aeb59863-a3d1-30da-b760-843a670437ad.roa (raw, json) Hash identifier: tWbvK83NSs5AureMgNv3v1jRDcuGex+YY+oh1M1g6RI= Subject key identifier: 82:F1:1D:2F:3A:85:C9:2A:E9:D5:3D:3C:21:5B:90:15:99:D8:35:56 Certificate issuer: /CN=96239d53-1062-4a21-8f97-639809abe5de Certificate serial: 010D0C9F4328584ED001D9ABDC36043B6B60FE80 Authority key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 22933 IP address blocks: 65.255.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d9:ab:dc:36:04:3b:6b:60:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96239d53-1062-4a21-8f97-639809abe5de Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=addaee51-96c7-430a-8f40-5383b1b2b1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:17:10:1b:75:79:9b:a9:d4:53:55:c1:51: 14:e5:ea:c7:c9:01:a1:7d:6b:b4:94:95:d1:84:64: 14:04:b0:3b:bd:b3:0b:94:f6:96:57:11:c0:46:72: 49:e3:21:2c:dc:aa:fa:4a:a0:f4:d7:48:73:25:2c: 03:6d:9a:1a:36:8e:53:9d:5a:aa:0e:a1:1e:45:2f: 6d:41:a8:c1:41:9f:9f:12:e6:e2:2d:e7:a1:26:2f: 1a:7a:5b:22:69:45:2d:dd:b8:69:68:0a:18:cf:20: 6e:89:a5:b8:13:d6:f0:bd:94:aa:9a:7f:82:60:36: 20:93:4b:37:c4:d0:e0:9a:ed:37:f2:96:fb:25:76: fd:29:20:12:10:a9:fb:ba:56:f2:51:b0:fa:a2:b6: 1d:19:94:92:90:9f:96:a7:43:79:40:1b:86:f9:56: fe:da:75:c0:78:a0:d7:a3:2e:0d:46:4f:72:28:1f: 34:9d:1e:20:27:50:95:da:80:50:24:9c:bd:ab:28: 1e:b1:9d:60:95:bc:a6:20:ce:fa:47:f7:da:f0:b8: 48:cb:f8:48:c0:52:70:6a:29:17:e7:27:76:f2:9f: 3b:47:a8:07:05:b6:9c:f1:61:dd:9d:a9:fc:84:83: 89:25:47:2f:ec:cc:b8:98:75:ab:f6:7e:ab:99:34: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:1D:2F:3A:85:C9:2A:E9:D5:3D:3C:21:5B:90:15:99:D8:35:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl X509v3 Authority Key Identifier: keyid:D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer sbgp-ipAddrBlock: critical IPv4: 65.255.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:ec:7c:60:fe:60:58:60:8d:0a:31:1e:bc:33:94:45:9d: 40:01:80:df:de:06:90:7d:3d:83:e4:e8:88:c3:f5:9b:2b:78: ea:c6:ab:24:46:9b:30:74:c4:3d:e8:a6:58:3f:b9:cd:d7:b1: 14:cc:da:35:17:8d:1a:b9:41:b2:8e:5e:4e:c6:bc:a6:43:09: d4:c3:56:73:a7:5b:f3:51:db:b2:7a:b4:85:a2:d2:49:af:98: 98:4d:1f:76:65:7b:b2:c4:b2:46:2e:5d:da:30:b9:5d:db:34: bb:ed:e2:77:7e:85:82:e5:cb:cd:80:b8:86:29:1d:5b:b8:7c: 8b:1a:e7:27:52:1a:32:c3:97:11:d8:5c:b2:28:e5:33:4e:5f: 4f:27:0f:02:94:46:e0:ee:20:5b:4e:b5:5b:25:4a:1c:0d:05: 5d:82:aa:ff:3c:eb:01:05:2e:45:d1:7e:a7:37:69:68:c9:0b: 7d:db:60:54:2d:83:82:1f:0d:e1:66:c2:9a:75:95:88:18:17: a2:ff:78:e9:06:fb:f9:67:e3:66:04:50:b0:27:16:14:88:fa: 3e:a6:4d:fd:5d:11:0f:cd:77:c2:b4:63:c9:d5:1c:f6:99:8e: b9:61:73:a0:ba:70:08:83:54:81:25:5d:68:ed:b5:19:fa:d9: 8e:79:49:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdmr3DYEO2tg/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYyMzlkNTMtMTA2Mi00YTIxLThmOTctNjM5ODA5YWJl NWRlMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWRkYWVlNTEtOTZjNy00MzBhLThmNDAtNTM4M2IxYjJiMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfEXEBt1eZup1FNVwVEU5erHyQGhfWu0lJXR hGQUBLA7vbMLlPaWVxHARnJJ4yEs3Kr6SqD010hzJSwDbZoaNo5TnVqqDqEeRS9t QajBQZ+fEubiLeehJi8aelsiaUUt3bhpaAoYzyBuiaW4E9bwvZSqmn+CYDYgk0s3 xNDgmu038pb7JXb9KSASEKn7ulbyUbD6orYdGZSSkJ+Wp0N5QBuG+Vb+2nXAeKDX oy4NRk9yKB80nR4gJ1CV2oBQJJy9qygesZ1glbymIM76R/fa8LhIy/hIwFJwaikX 5yd28p87R6gHBbac8WHdnan8hIOJJUcv7My4mHWr9n6rmTT/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILxHS86hckq6dU9PCFbkBWZ2DVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjIz OWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlhYmU1ZGUvYWViNTk4NjMtYTNkMS0z MGRhLWI3NjAtODQzYTY3MDQzN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYyMzlkNTMtMTA2Mi00YTIxLThm OTctNjM5ODA5YWJlNWRlLzk2MjM5ZDUzLTEwNjItNGEyMS04Zjk3LTYzOTgwOWFi ZTVkZS5jcmwwHwYDVR0jBBgwFoAU2eA/F0XUhvY4Z94xYMndYcaFFhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4 MDlhYmU1ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBJ7Hxg/mBYYI0KMR68M5RFnUABgN/eBpB9PYPk6IjD9ZsreOrGqyRG mzB0xD3oplg/uc3XsRTM2jUXjRq5QbKOXk7GvKZDCdTDVnOnW/NR27J6tIWi0kmv mJhNH3Zle7LEskYuXdowuV3bNLvt4nd+hYLly82AuIYpHVu4fIsa5ydSGjLDlxHY XLIo5TNOX08nDwKURuDuIFtOtVslShwNBV2Cqv886wEFLkXRfqc3aWjJC33bYFQt g4IfDeFmwpp1lYgYF6L/eOkG+/ln42YEULAnFhSI+j6mTf1dEQ/Nd8K0Y8nVHPaZ jrlhc6C6cAiDVIElXWjttRn62Y55SS4= -----END CERTIFICATE-----Generated at Thu Aug 13 13:02:37 2026 by rpki-client