$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa File: fadabf4c-484e-39bf-b855-d4b07f61005e.roa (raw, json) Hash identifier: tdxew97UZ+bQJtBwqL/x8VK1ZjBJRmOqkVa2r3N4h8g= Subject key identifier: 3D:9B:8D:D6:9E:D4:09:F4:88:0C:94:58:21:04:8F:CE:EB:6A:0C:53 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584F0D6CE0CE16A8AF0A9F82B960 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 14543 IP address blocks: 96.43.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e0:ce:16:a8:af:0a:9f:82:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=f02b4fc0-c33e-4f39-9eff-64a5394c4103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d1:e9:a7:32:4e:9d:2b:13:a4:50:45:57:a0: fc:05:51:0e:44:c0:1d:cc:a0:b6:df:10:40:d4:eb: 43:78:e6:0b:55:19:43:f0:78:a7:d2:69:a2:38:85: 78:2a:76:3b:75:e3:53:c0:66:f6:e1:80:e3:c8:ea: 0b:65:77:4c:bc:2b:55:88:b4:58:14:71:a6:71:22: 7b:75:fa:e7:33:ae:25:a0:db:26:c3:4a:50:39:c6: b5:a3:8b:31:fb:f5:c9:e8:5f:da:e6:4a:ff:9b:5c: 1e:68:d4:78:20:f0:b7:c0:96:46:fa:88:38:07:9f: 22:f5:43:44:6a:7c:e5:22:37:fc:dd:3a:ea:89:0b: cc:c7:b0:42:9d:01:61:d8:6d:7e:44:85:27:6f:32: fe:d6:cb:90:2c:92:55:49:61:e6:53:53:84:60:d8: a7:c2:49:c9:67:7c:48:6d:50:50:ea:d7:19:1b:79: 42:83:cb:a8:04:14:fa:b2:a4:29:84:70:a0:1a:f2: 36:c0:76:fe:12:34:ec:21:25:7d:d0:c8:e2:4a:9d: bb:fe:06:c4:c0:99:ee:63:27:2f:d4:81:2f:f2:62: 27:9c:2e:51:22:8a:df:80:a7:7a:92:3d:b1:4f:f8: e6:49:f8:66:40:f6:5d:04:fe:6d:fc:29:c0:02:c1: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:8D:D6:9E:D4:09:F4:88:0C:94:58:21:04:8F:CE:EB:6A:0C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 96.43.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:17:ec:0b:ec:aa:6d:f6:f6:56:b5:a8:f5:09:af:c2:47:a5: d3:b7:67:2b:ec:11:17:ae:1c:2b:99:cb:f1:12:bb:06:81:0f: 4b:34:c4:f5:fc:9a:be:52:27:a0:10:e3:a4:35:44:3d:6e:96: 14:a0:3d:0a:e4:f3:f6:1a:4f:0c:d5:65:4e:06:ba:08:d8:7c: 76:6b:5a:47:a4:4d:eb:3c:a0:17:68:ea:e5:9c:a7:25:8f:3a: 59:b8:e1:d5:75:21:90:b3:14:a5:cd:94:ab:50:06:0e:91:02: 80:9e:2e:6c:b1:82:ac:76:74:85:0c:7e:8f:42:71:92:48:c3: 0d:08:13:7c:85:22:07:90:b3:3b:9f:92:57:77:46:58:0b:7f: 7b:8e:c7:d2:5e:ac:63:ea:50:60:a5:89:95:71:3e:04:d8:96: 19:ad:ed:d7:26:bb:7c:bd:41:83:4e:69:6e:2d:77:6d:d7:b2: 5e:30:47:b6:02:4a:59:f1:7b:76:ba:12:7f:ab:bd:ad:d0:65: dd:91:33:92:8d:c2:2d:8d:83:aa:22:bf:3a:21:58:00:6a:9d: 2a:6b:ae:a7:eb:d0:b8:26:96:9e:10:66:49:fc:f5:4f:46:76: 8f:f1:f6:fa:1a:40:73:98:aa:1d:3a:b8:52:3d:9f:6a:00:a3: 07:33:ef:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbODOFqivCp+CuWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjAyYjRmYzAtYzMzZS00ZjM5LTllZmYtNjRhNTM5NGM0MTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9HppzJOnSsTpFBFV6D8BVEORMAdzKC23xBA 1OtDeOYLVRlD8Hin0mmiOIV4KnY7deNTwGb24YDjyOoLZXdMvCtViLRYFHGmcSJ7 dfrnM64loNsmw0pQOca1o4sx+/XJ6F/a5kr/m1weaNR4IPC3wJZG+og4B58i9UNE anzlIjf83TrqiQvMx7BCnQFh2G1+RIUnbzL+1suQLJJVSWHmU1OEYNinwknJZ3xI bVBQ6tcZG3lCg8uoBBT6sqQphHCgGvI2wHb+EjTsISV90MjiSp27/gbEwJnuYycv 1IEv8mInnC5RIorfgKd6kj2xT/jmSfhmQPZdBP5t/CnAAsEOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2bjdae1An0iAyUWCEEj87ragxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvZmFkYWJmNGMtNDg0ZS0z OWJmLWI4NTUtZDRiMDdmNjEwMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQX7Avsqm329la1qPUJr8JHpdO3ZyvsEReuHCuZy/ESuwaBD0s0xPX8 mr5SJ6AQ46Q1RD1ulhSgPQrk8/YaTwzVZU4GugjYfHZrWkekTes8oBdo6uWcpyWP Olm44dV1IZCzFKXNlKtQBg6RAoCeLmyxgqx2dIUMfo9CcZJIww0IE3yFIgeQszuf kld3RlgLf3uOx9JerGPqUGCliZVxPgTYlhmt7dcmu3y9QYNOaW4td23Xsl4wR7YC Slnxe3a6En+rva3QZd2RM5KNwi2Ng6oivzohWABqnSprrqfr0Lgmlp4QZkn89U9G do/x9voaQHOYqh06uFI9n2oAowcz770= -----END CERTIFICATE-----Generated at Thu Sep 24 20:23:09 2026 by rpki-client