$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af7e7f-131b-33f7-b959-81be6a1197f1.roa File: 20af7e7f-131b-33f7-b959-81be6a1197f1.roa (raw, json) Hash identifier: 31tRBPJuUTHP7See+AgOIBZvqnTb0/oAu/1hdt9Ui60= Subject key identifier: AB:35:07:DE:92:D3:39:68:BC:0F:CC:70:74:80:70:59:10:E1:35:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DF210A616725D442C2D4F42C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af7e7f-131b-33f7-b959-81be6a1197f1.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 7922 IP address blocks: 96.196.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:a6:16:72:5d:44:2c:2d:4f:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=e0b134b2-a20b-489c-b7ec-dc817af25aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:cd:7a:50:9f:76:dc:a9:d3:34:00:51:26: 9f:87:fb:30:39:88:46:19:d8:af:e9:32:47:28:40: 3f:ba:28:c9:c8:e8:09:57:f4:e1:51:2b:e9:de:97: 13:6d:5c:37:ed:ef:3d:b0:c2:5a:12:4c:66:8e:5c: 1e:f5:6b:05:54:3c:30:bd:a3:85:ea:62:8c:7e:b1: 7c:06:ce:36:12:c8:3f:e8:14:91:76:49:10:17:f7: cf:84:b8:71:a3:41:d5:05:14:99:0d:65:a5:35:94: 9e:1e:ef:76:16:8f:1b:28:fc:fd:46:24:63:c0:2d: ef:06:2b:ac:d7:89:49:2d:f7:17:e8:5c:e5:5c:af: bf:1b:56:a9:47:ee:f4:6b:20:fe:77:5d:3d:23:ba: 88:bd:87:8b:3e:f8:d1:b0:c8:82:bc:e4:ab:0c:ca: 9b:b1:7d:16:03:b8:a2:df:4e:6c:ca:eb:a2:d7:ba: 9d:e2:0f:57:b4:90:d6:1d:11:97:7c:57:46:5e:b7: 26:fd:ff:56:88:9b:cb:7f:f9:ee:ef:64:32:37:68: d1:67:37:9f:77:dd:b5:ef:05:f7:d0:70:0d:d6:c4: 65:a2:d1:d4:22:85:c2:e4:28:b2:97:7a:1e:64:e6: 55:8f:16:69:31:a2:ef:50:0f:4b:95:8f:97:aa:06: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:35:07:DE:92:D3:39:68:BC:0F:CC:70:74:80:70:59:10:E1:35:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20af7e7f-131b-33f7-b959-81be6a1197f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.196.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fe:a6:b2:6d:7d:75:2e:70:45:20:19:5d:27:42:f6:7b:0d: 0e:a1:4f:34:f1:56:e0:70:88:88:5f:84:ea:e8:30:a2:d3:75: 5b:aa:e0:ae:5d:0e:2d:e4:c8:91:07:0b:3c:13:ea:7a:7b:bf: aa:a9:10:2f:68:4d:8c:02:e4:97:25:f3:76:cd:80:c5:b1:91: 95:73:ae:75:5c:ac:1b:05:f8:b4:6c:5e:fb:30:3b:92:58:ba: e5:5b:a9:25:16:5b:8d:cd:73:64:72:70:7c:be:86:82:b0:26: 59:a4:1e:44:03:b4:28:c7:ef:71:f9:39:94:d6:d2:79:62:fc: 07:1e:3a:87:05:5d:82:e7:3e:11:7c:4a:c2:79:da:88:93:7f: c8:cf:47:dc:69:65:f0:38:e2:8a:d6:52:41:b4:d1:0e:2b:d0: f8:08:07:a1:0b:6a:ac:c0:00:a3:42:ce:9a:cd:a2:20:05:8f: 5b:2d:11:1a:b5:8f:f5:30:fb:26:2a:d0:76:2b:26:b1:a6:f6: 32:e2:ea:d5:f0:8f:b9:dd:c8:d6:97:50:80:eb:95:65:a1:0c: ea:4a:64:df:00:36:2f:27:c8:8a:20:fb:e3:0f:65:b8:61:3f: 0d:ad:dc:dc:8a:f9:76:35:fe:67:65:ce:1d:53:f2:5d:5b:53: 2c:17:73:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEKYWcl1ELC1PQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk ZTBiMTM0YjItYTIwYi00ODljLWI3ZWMtZGM4MTdhZjI1YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz/NelCfdtyp0zQAUSafh/swOYhGGdiv6TJH KEA/uijJyOgJV/ThUSvp3pcTbVw37e89sMJaEkxmjlwe9WsFVDwwvaOF6mKMfrF8 Bs42Esg/6BSRdkkQF/fPhLhxo0HVBRSZDWWlNZSeHu92Fo8bKPz9RiRjwC3vBius 14lJLfcX6FzlXK+/G1apR+70ayD+d109I7qIvYeLPvjRsMiCvOSrDMqbsX0WA7ii 305syuui17qd4g9XtJDWHRGXfFdGXrcm/f9WiJvLf/nu72QyN2jRZzefd9217wX3 0HAN1sRlotHUIoXC5Ciyl3oeZOZVjxZpMaLvUA9LlY+XqgZoCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs1B96S0zlovA/McHSAcFkQ4TWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBhZjdlN2YtMTMxYi0z M2Y3LWI5NTktODFiZTZhMTE5N2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYMSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL+prJtfXUucEUgGV0nQvZ7DQ6hTzTxVuBwiIhfhOroMKLTdVuq4K5d Di3kyJEHCzwT6np7v6qpEC9oTYwC5Jcl83bNgMWxkZVzrnVcrBsF+LRsXvswO5JY uuVbqSUWW43Nc2RycHy+hoKwJlmkHkQDtCjH73H5OZTW0nli/AceOocFXYLnPhF8 SsJ52oiTf8jPR9xpZfA44orWUkG00Q4r0PgIB6ELaqzAAKNCzprNoiAFj1stERq1 j/Uw+yYq0HYrJrGm9jLi6tXwj7ndyNaXUIDrlWWhDOpKZN8ANi8nyIog++MPZbhh Pw2t3NyK+XY1/mdlzh1T8l1bUywXc5E= -----END CERTIFICATE-----Generated at Sat Jun 13 20:49:26 2026 by rpki-client