$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96d1f01a-59f8-3939-a4e7-c8fb826baf99.roa File: 96d1f01a-59f8-3939-a4e7-c8fb826baf99.roa (raw, json) Hash identifier: dTrwkh8rZUwxNngybUd4ToSLde+Y4i/8v53BARjWqx8= Subject key identifier: 53:BB:F6:EA:3F:33:14:73:26:3D:D0:D3:83:CD:BF:B3:DC:9D:5A:2B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4C3DE0ECB5AF2EA0FEE1EDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96d1f01a-59f8-3939-a4e7-c8fb826baf99.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 31898 IP address blocks: 148.116.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:ec:b5:af:2e:a0:fe:e1:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b9ae69c5-1ed3-4748-baba-5bddb1a71642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3e:1d:63:7c:bd:3f:df:ab:14:49:ec:ac:3c: a7:68:ec:06:25:1d:0f:3e:84:5c:93:a2:2f:8f:72: 7a:ae:0a:97:c6:20:ab:dd:bd:db:46:40:de:ed:be: 85:54:af:79:d4:a2:67:c6:eb:a0:3f:e7:30:ea:c7: 88:8c:c8:76:a9:bf:5b:68:2e:26:79:97:1f:31:ef: d3:ad:40:cd:65:c8:aa:55:c3:d9:f6:56:ec:75:f9: 15:77:41:70:22:a8:11:43:00:dc:b1:1b:fb:9b:99: 2d:c3:52:a0:5d:78:fb:bd:06:46:7d:5c:6f:89:66: da:48:dd:45:43:16:ff:72:77:a9:b0:dd:6d:76:2b: 13:00:80:d3:96:8d:0c:f8:f3:90:bd:8d:54:f3:24: f8:db:89:ee:82:10:84:69:3f:03:d2:8f:2c:6e:c4: 68:4f:3c:72:86:4e:ab:47:53:92:08:37:92:81:52: f0:94:a8:73:82:45:90:30:26:66:77:ac:13:94:0a: ca:2b:72:74:61:a2:f3:c5:04:a8:24:bb:e2:ff:0b: 2d:35:d5:f8:bb:13:eb:48:3c:3a:cd:b7:26:83:fb: 3a:8b:c5:c2:9d:0a:0e:86:0a:29:2c:44:24:9d:d2: fe:9a:00:4d:92:0f:16:f0:c5:5b:ef:c8:8f:d4:38: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:F6:EA:3F:33:14:73:26:3D:D0:D3:83:CD:BF:B3:DC:9D:5A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/96d1f01a-59f8-3939-a4e7-c8fb826baf99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 148.116.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5f:32:2d:a1:f2:70:7b:91:f7:d0:1e:a2:a7:62:23:69:00: 55:c9:82:68:49:59:2e:61:8c:ed:e4:24:cb:c7:f6:27:da:b5: 51:e1:2f:1a:bd:6b:0d:b7:7e:dd:c4:04:e1:95:a7:3d:ad:59: e6:2d:18:06:30:e4:b0:22:6a:36:3d:bf:60:f0:08:79:fc:36: 99:79:d1:d5:73:87:b3:07:7f:78:02:ed:57:fe:5c:62:8e:9d: 19:41:6d:9b:6c:64:5d:e8:0e:5f:5e:13:7c:23:f1:3c:c3:92: 46:57:c7:d0:6c:ed:1a:38:e2:66:af:d8:c0:67:11:ff:40:e1: bb:8f:75:08:a9:58:5e:c7:e0:2f:81:a5:0c:70:4e:c1:d4:d0: b7:f2:63:26:df:8a:76:48:91:dc:ac:cb:08:49:fd:cf:21:a1: 9a:f9:e5:b0:57:5a:e7:0b:b5:f4:53:93:9c:86:72:29:2a:70: 1c:bf:0b:a1:de:37:71:06:f1:fc:94:28:13:df:09:39:e7:31: 50:9f:b7:c5:1a:4e:05:58:82:64:09:96:f6:a8:74:ef:88:50: ab:b1:ca:3a:61:d8:44:86:64:e0:9f:b3:fa:7b:f2:c1:28:9f: 08:5b:b0:7f:20:48:9f:ff:a2:3e:f1:37:af:f6:20:8b:16:86: aa:6c:9b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeDsta8uoP7h7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjlhZTY5YzUtMWVkMy00NzQ4LWJhYmEtNWJkZGIxYTcxNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj4dY3y9P9+rFEnsrDynaOwGJR0PPoRck6Iv j3J6rgqXxiCr3b3bRkDe7b6FVK951KJnxuugP+cw6seIjMh2qb9baC4meZcfMe/T rUDNZciqVcPZ9lbsdfkVd0FwIqgRQwDcsRv7m5ktw1KgXXj7vQZGfVxviWbaSN1F Qxb/cnepsN1tdisTAIDTlo0M+POQvY1U8yT424nughCEaT8D0o8sbsRoTzxyhk6r R1OSCDeSgVLwlKhzgkWQMCZmd6wTlArKK3J0YaLzxQSoJLvi/wstNdX4uxPrSDw6 zbcmg/s6i8XCnQoOhgopLEQkndL+mgBNkg8W8MVb78iP1DiezQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO79uo/MxRzJj3Q04PNv7PcnVorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTZkMWYwMWEtNTlmOC0z OTM5LWE0ZTctYzhmYjgyNmJhZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlHQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5fMi2h8nB7kffQHqKnYiNpAFXJgmhJWS5hjO3kJMvH9ifatVHhLxq9 aw23ft3EBOGVpz2tWeYtGAYw5LAiajY9v2DwCHn8Npl50dVzh7MHf3gC7Vf+XGKO nRlBbZtsZF3oDl9eE3wj8TzDkkZXx9Bs7Ro44mav2MBnEf9A4buPdQipWF7H4C+B pQxwTsHU0LfyYybfinZIkdysywhJ/c8hoZr55bBXWucLtfRTk5yGcikqcBy/C6He N3EG8fyUKBPfCTnnMVCft8UaTgVYgmQJlvaodO+IUKuxyjph2ESGZOCfs/p78sEo nwhbsH8gSJ//oj7xN6/2IIsWhqpsm3o= -----END CERTIFICATE-----Generated at Sun Oct 11 14:31:49 2026 by rpki-client