$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa File: bcc973e1-9d01-3d4e-85af-27d694043429.roa (raw, json) Hash identifier: Ho9YE9pkXGzyfnW81igkBcjHjJN2oVRW8D9q7uYOJYU= Subject key identifier: 6E:EA:DE:29:2C:71:D5:F9:D9:68:B3:E2:9C:6B:73:2C:6D:0A:37:2B Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584F2ABD1D5FCE168C77CAFCCD80 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 199.47.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1d:5f:ce:16:8c:77:ca:fc:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=20e829c2-2470-47f7-971f-3e1636db7a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:d7:aa:60:6d:88:73:5a:2f:d3:87:ad:24: f0:ec:87:64:49:b6:ba:94:5f:88:4c:b6:98:a1:b0: e1:d5:c0:89:f3:2c:eb:b2:dd:8d:aa:3f:e9:a6:15: 17:2e:10:6a:b5:81:79:c7:ae:ce:af:8f:fb:00:ff: 50:f8:12:7c:00:6d:b9:fd:e1:5c:a5:fd:c4:22:99: 09:d8:17:83:30:9b:d2:33:67:0e:b1:1c:6b:68:bd: 1d:fe:39:08:c3:ce:72:90:7e:6b:57:94:ce:a9:72: 23:de:7e:8e:03:93:86:fa:c0:f6:23:6a:41:e0:d8: d5:ff:e4:35:a7:a7:ae:39:01:ca:20:f3:a5:fa:ca: d0:c1:d4:a4:ce:ab:dc:7e:2f:89:9b:de:6b:87:9c: 61:36:64:be:ff:27:a9:88:cf:99:4a:e9:55:d5:55: da:d0:9e:23:c1:b8:70:41:01:d6:61:1e:a8:4c:4c: eb:f8:15:92:d3:29:e4:4a:d8:78:b2:05:7f:0e:9c: 88:aa:77:b2:02:9a:ef:2f:4b:fb:d3:7d:2d:45:16: e5:59:44:8f:a2:15:40:ba:6d:71:37:ab:74:21:ed: cb:b9:29:b5:72:f0:e1:7c:d3:b4:2e:77:83:13:f7: c2:62:97:2a:d0:57:de:af:d1:40:22:1b:59:df:58: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:DE:29:2C:71:D5:F9:D9:68:B3:E2:9C:6B:73:2C:6D:0A:37:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a1:40:57:c7:c4:87:f5:87:54:8c:2c:cc:7f:c8:62:fc:87: 85:0d:e6:65:89:57:4d:e9:1c:24:19:42:38:cc:1f:aa:38:88: 66:cb:83:22:0c:fe:00:36:4f:10:fa:d8:bf:1c:f9:e2:60:cc: 9d:50:8a:be:c9:76:4c:5f:3b:b6:14:96:2a:ec:74:98:26:af: dd:66:0c:d6:1d:3c:3c:dc:79:2d:75:56:63:b9:33:b7:35:d4: e3:6d:18:28:b3:5e:1b:73:28:44:34:e3:78:a2:de:ae:04:ef: 67:20:75:35:d8:9b:4d:3a:69:48:96:1c:d6:df:b8:b2:b4:ff: 08:b0:b3:54:b3:62:49:ce:92:4b:16:00:97:36:6e:ea:ec:f8: 99:95:dd:6a:af:7b:06:16:ad:64:3f:b9:5c:6d:d2:33:dc:78: 60:62:f7:61:86:63:d4:cd:a5:4e:e7:f0:be:28:14:48:16:60: 05:b0:66:4f:4b:db:64:03:26:25:a0:b4:af:57:71:e2:0b:dc: 14:4a:72:b4:8b:31:f4:35:f6:6b:c7:4b:9d:1e:57:79:b3:0c: 24:c3:30:55:98:69:b5:2c:80:1c:c0:ee:8c:a1:63:5f:e5:c3: 6d:75:35:ac:b7:ca:ed:b9:53:84:54:d0:be:89:30:e3:f0:94: d8:ff:75:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvR1fzhaMd8r8zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MjBlODI5YzItMjQ3MC00N2Y3LTk3MWYtM2UxNjM2ZGI3YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc7XqmBtiHNaL9OHrSTw7IdkSba6lF+ITLaY obDh1cCJ8yzrst2Nqj/pphUXLhBqtYF5x67Or4/7AP9Q+BJ8AG25/eFcpf3EIpkJ 2BeDMJvSM2cOsRxraL0d/jkIw85ykH5rV5TOqXIj3n6OA5OG+sD2I2pB4NjV/+Q1 p6euOQHKIPOl+srQwdSkzqvcfi+Jm95rh5xhNmS+/yepiM+ZSulV1VXa0J4jwbhw QQHWYR6oTEzr+BWS0ynkSth4sgV/DpyIqneyAprvL0v7030tRRblWUSPohVAum1x N6t0Ie3LuSm1cvDhfNO0LneDE/fCYpcq0Ffer9FAIhtZ31gTIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7q3ikscdX52Wiz4pxrcyxtCjcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvYmNjOTczZTEtOWQwMS0z ZDRlLTg1YWYtMjdkNjk0MDQzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWhQFfHxIf1h1SMLMx/yGL8h4UN5mWJV03pHCQZQjjMH6o4iGbLgyIM /gA2TxD62L8c+eJgzJ1Qir7JdkxfO7YUlirsdJgmr91mDNYdPDzceS11VmO5M7c1 1ONtGCizXhtzKEQ043ii3q4E72cgdTXYm006aUiWHNbfuLK0/wiws1SzYknOkksW AJc2burs+JmV3WqvewYWrWQ/uVxt0jPceGBi92GGY9TNpU7n8L4oFEgWYAWwZk9L 22QDJiWgtK9XceIL3BRKcrSLMfQ19mvHS50eV3mzDCTDMFWYabUsgBzA7oyhY1/l w211Nay3yu25U4RU0L6JMOPwlNj/db0= -----END CERTIFICATE-----Generated at Tue Sep 22 03:59:16 2026 by rpki-client