$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea4de6-1cb1-36b6-8e58-69419de84a4e.roa File: 8aea4de6-1cb1-36b6-8e58-69419de84a4e.roa (raw, json) Hash identifier: fgHy24Ay/aVCYCjReqi+mhH2YvAdG8zCF8WW50zf+Qo= Subject key identifier: 60:CE:97:68:D0:9B:9F:12:0B:53:30:A4:19:DE:E8:C6:B1:CC:A5:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978B81E3CB9EED5DFA33300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea4de6-1cb1-36b6-8e58-69419de84a4e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 96.86.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:b8:1e:3c:b9:ee:d5:df:a3:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e4a4bfb-4705-49eb-88a8-e94c09d12195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:93:ac:88:a3:cd:7a:b0:5b:0c:44:d5:c3: 03:91:35:c5:62:0c:41:89:69:60:86:67:ea:6a:46: bd:02:18:29:04:18:b5:fd:42:ab:70:b6:3b:f3:e4: 3e:11:84:94:e9:d8:6d:7d:40:b6:9a:b3:ec:5a:0c: 06:1f:17:1a:f9:35:9f:33:24:fa:ef:0b:c7:19:c2: a5:81:16:37:33:dc:91:d1:03:dd:89:52:af:52:b3: bd:50:2e:b1:57:25:36:d8:68:55:3c:02:c6:5e:c9: cc:42:dd:e1:65:fe:db:32:c5:b2:3b:55:d3:98:b4: cb:e7:6c:02:c8:1e:4f:ea:f7:05:2c:8d:cf:d1:de: 19:ee:50:f9:26:0c:0e:79:ae:c3:30:d5:cd:61:4a: 07:9c:7c:07:54:0a:c5:f0:d2:e6:a3:02:56:d2:62: 2f:60:ec:ff:b9:a9:2f:13:60:12:0d:33:96:17:27: 6f:92:19:51:7d:73:74:a3:ca:d2:6f:90:c9:4d:a4: 54:57:84:28:31:ee:2d:c9:e4:a6:91:9d:b3:66:66: 12:e0:ec:f4:45:c3:ff:e0:19:9e:62:78:72:15:29: ae:66:51:66:56:ea:da:57:75:9e:33:6f:6c:bc:c4: 72:63:b7:0d:e8:13:a5:aa:8c:ef:8b:4e:b6:c5:2f: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CE:97:68:D0:9B:9F:12:0B:53:30:A4:19:DE:E8:C6:B1:CC:A5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aea4de6-1cb1-36b6-8e58-69419de84a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.86.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:85:b7:ce:ce:bf:9b:34:a5:cf:b6:4d:47:c0:64:4c:df:8f: 27:10:98:01:a8:ce:c0:ec:8f:c9:69:a5:2b:d4:ec:f1:2c:38: 16:6a:d5:cf:93:24:68:fa:55:01:84:f0:61:12:af:44:64:fb: ff:f6:06:ef:4f:d5:8f:3a:15:a7:80:5e:f1:b6:de:06:0e:65: 04:d4:3f:34:a8:c4:7f:29:e7:0b:6a:fa:1a:12:df:bc:69:ac: 90:01:57:f7:a7:10:9b:94:b5:9d:b5:18:f0:16:37:dc:69:cd: d2:46:55:66:d1:70:b0:62:34:ec:07:d9:7a:5d:29:af:a0:47: 74:49:91:35:fd:bd:2a:e7:36:09:12:58:23:12:ee:1c:da:87: 9d:a9:da:6f:17:cb:5f:70:f5:1b:c1:9d:cd:1f:dd:fb:0c:b4: 27:33:f8:13:9d:5d:bf:6b:0b:c5:5b:00:81:c8:81:dd:b5:bf: de:cc:9c:d0:1e:f4:5c:08:4b:6b:66:ba:3f:ea:94:fb:5e:5e: 62:a4:df:39:c6:16:9b:79:46:9c:66:7d:b2:fd:2e:ec:00:65: 55:02:6c:0f:a6:31:5a:3b:7f:b4:52:24:f0:60:1e:b2:7a:c8: d1:9b:34:5d:43:60:01:82:d5:bb:8d:65:25:c0:56:cf:8f:f7: 44:cb:15:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeLgePLnu1d+jMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU0YTRiZmItNDcwNS00OWViLTg4YTgtZTk0YzA5ZDEyMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNSTrIijzXqwWwxE1cMDkTXFYgxBiWlghmfq aka9AhgpBBi1/UKrcLY78+Q+EYSU6dhtfUC2mrPsWgwGHxca+TWfMyT67wvHGcKl gRY3M9yR0QPdiVKvUrO9UC6xVyU22GhVPALGXsnMQt3hZf7bMsWyO1XTmLTL52wC yB5P6vcFLI3P0d4Z7lD5JgwOea7DMNXNYUoHnHwHVArF8NLmowJW0mIvYOz/uakv E2ASDTOWFydvkhlRfXN0o8rSb5DJTaRUV4QoMe4tyeSmkZ2zZmYS4Oz0RcP/4Bme YnhyFSmuZlFmVuraV3WeM29svMRyY7cN6BOlqozvi062xS90AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDOl2jQm58SC1MwpBne6MaxzKVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFlYTRkZTYtMWNiMS0z NmI2LThlNTgtNjk0MTlkZTg0YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYFbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWFt87Ov5s0pc+2TUfAZEzfjycQmAGozsDsj8lppSvU7PEsOBZq1c+T JGj6VQGE8GESr0Rk+//2Bu9P1Y86FaeAXvG23gYOZQTUPzSoxH8p5wtq+hoS37xp rJABV/enEJuUtZ21GPAWN9xpzdJGVWbRcLBiNOwH2XpdKa+gR3RJkTX9vSrnNgkS WCMS7hzah52p2m8Xy19w9RvBnc0f3fsMtCcz+BOdXb9rC8VbAIHIgd21v97MnNAe 9FwIS2tmuj/qlPteXmKk3znGFpt5RpxmfbL9LuwAZVUCbA+mMVo7f7RSJPBgHrJ6 yNGbNF1DYAGC1buNZSXAVs+P90TLFeE= -----END CERTIFICATE-----Generated at Fri Sep 25 07:22:04 2026 by rpki-client