$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa File: 20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa (raw, json) Hash identifier: ysgeww8P2JPxUta0DMfaLrr3+c5TqRoa3r2UN0XnedY= Subject key identifier: 13:BF:2E:7B:6A:FD:94:BF:53:70:C1:0A:63:37:EF:73:BB:82:2F:C9 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584D6AAAAFAADC06BBA99B618F00 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 20454 IP address blocks: 96.47.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:af:aa:dc:06:bb:a9:9b:61:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=3faa3856-e8dd-4c12-960d-919586912343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:cd:b6:e6:f2:ee:47:81:48:f0:dd:8c:42: aa:70:5d:49:90:b1:ca:ea:76:d2:f5:0c:5e:19:9b: c4:32:ea:6f:d0:b0:e0:2b:f7:5a:03:a7:f2:9f:e7: 78:52:57:10:86:9f:07:89:6b:e1:84:fa:0f:d0:7c: 71:d6:6c:b2:17:e2:61:ed:b5:47:c0:87:81:1e:22: 94:61:13:d9:56:b6:e7:e0:d1:32:b5:c6:e8:3c:7e: c4:70:d9:fd:65:76:08:ff:d2:d8:e4:0a:dd:60:13: 3b:79:96:1b:d8:bc:b6:58:d7:6e:60:1a:5e:1d:4f: 10:34:93:4f:5e:e7:64:c2:3b:30:75:86:b3:00:07: e6:35:c4:ee:82:4b:32:af:44:99:dc:d6:65:13:d4: 6f:31:79:b6:28:1a:79:0b:55:d5:c6:d0:5b:83:0c: 10:06:fb:2c:12:96:0b:37:f0:46:e2:8b:74:f4:0e: e2:89:62:2f:ed:f3:7f:70:62:08:fe:0b:ab:ba:95: 77:48:28:ad:54:d5:c8:a3:e5:ca:fa:bb:c8:08:cf: e5:ff:70:ab:c5:e9:59:6c:5c:6e:c1:81:27:22:56: da:a5:a9:f2:d8:bf:50:ee:ec:e5:d6:51:8a:85:0c: c5:20:bf:92:9b:43:9b:dd:98:03:95:55:04:40:2d: d4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BF:2E:7B:6A:FD:94:BF:53:70:C1:0A:63:37:EF:73:BB:82:2F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f7:bf:4f:8e:30:60:d6:8b:be:9a:e8:58:29:6c:24:e7:79: 81:f7:4d:bc:07:70:b8:24:3f:2e:e1:d8:3d:15:37:bc:a1:fc: 35:e2:8b:47:60:23:d7:8d:b8:b0:dc:62:6e:cb:e4:bd:3e:72: 6d:4f:cb:08:b3:fb:cf:9d:f2:28:b4:d8:ac:dc:5d:d8:f6:bf: f8:34:58:8f:83:5b:7c:36:0c:58:f8:cd:d8:46:db:a3:0e:55: f9:fd:ef:53:ad:69:23:42:eb:4e:63:9b:c6:fb:7a:d4:da:67: f6:16:77:e3:a3:74:ac:c1:28:88:51:d8:93:55:9c:55:de:87: ef:f8:5a:23:bb:4e:fc:ac:d3:90:fb:61:60:31:e3:14:fb:f8: e3:e1:9a:af:07:69:46:13:59:27:d2:3f:1a:25:c0:66:45:96: 21:2c:14:a4:e8:8c:94:35:79:cd:d3:31:f8:4e:d2:5f:00:a0: d2:af:8c:cf:76:26:39:69:c7:0a:fe:f1:9b:39:3f:de:56:89: 7e:e9:90:fa:8d:72:49:98:68:d1:c8:3b:9e:d0:82:1c:b6:0e: 38:53:2f:e3:7b:a2:53:60:e7:4b:e5:df:24:cc:b7:f2:3b:45: 76:06:e6:d9:43:5b:c6:09:a5:c5:39:fb:ac:63:39:33:b8:a5: f3:9d:59:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq+q3Aa7qZthjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk M2ZhYTM4NTYtZThkZC00YzEyLTk2MGQtOTE5NTg2OTEyMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLTNtuby7keBSPDdjEKqcF1JkLHK6nbS9Qxe GZvEMupv0LDgK/daA6fyn+d4UlcQhp8HiWvhhPoP0Hxx1myyF+Jh7bVHwIeBHiKU YRPZVrbn4NEytcboPH7EcNn9ZXYI/9LY5ArdYBM7eZYb2Ly2WNduYBpeHU8QNJNP XudkwjswdYazAAfmNcTugksyr0SZ3NZlE9RvMXm2KBp5C1XVxtBbgwwQBvssEpYL N/BG4ot09A7iiWIv7fN/cGII/gurupV3SCitVNXIo+XK+rvICM/l/3CrxelZbFxu wYEnIlbapany2L9Q7uzl1lGKhQzFIL+Sm0Ob3ZgDlVUEQC3U6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO/Lntq/ZS/U3DBCmM373O7gi/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMjBkZDVjMjUtNWFiZi0z YWVkLWExM2EtYmU1YmU4N2IyYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH3v0+OMGDWi76a6FgpbCTneYH3TbwHcLgkPy7h2D0VN7yh/DXii0dg I9eNuLDcYm7L5L0+cm1Pywiz+8+d8ii02KzcXdj2v/g0WI+DW3w2DFj4zdhG26MO Vfn971OtaSNC605jm8b7etTaZ/YWd+OjdKzBKIhR2JNVnFXeh+/4WiO7Tvys05D7 YWAx4xT7+OPhmq8HaUYTWSfSPxolwGZFliEsFKTojJQ1ec3TMfhO0l8AoNKvjM92 Jjlpxwr+8Zs5P95WiX7pkPqNckmYaNHIO57Qghy2DjhTL+N7olNg50vl3yTMt/I7 RXYG5tlDW8YJpcU5+6xjOTO4pfOdWTY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:07:54 2026 by rpki-client