$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa File: dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa (raw, json) Hash identifier: Q6xth9bo+ijtygVJ/ZKnkTzkX+6GiaRwh7XjEa5HwDo= Subject key identifier: 97:92:D3:17:C4:08:6B:0D:17:B9:D7:94:84:F4:38:96:E2:D7:A1:B0 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584D6AAA6730F472117807E31800 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 20454 IP address blocks: 96.47.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:67:30:f4:72:11:78:07:e3:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=8e6aa577-7513-4352-a14c-7dbe6a3947fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:9a:c5:0b:29:82:26:67:9b:d9:06:dd:9b: 0b:46:d6:72:58:f5:b8:47:96:2e:a3:70:05:0a:0f: 3b:24:4b:df:a9:02:24:cd:ab:49:f4:51:df:cd:fe: 15:9d:a1:90:93:47:8f:f5:8c:5b:45:47:1d:43:de: e6:ff:15:00:e6:51:c5:7a:78:ca:0b:62:fe:91:69: 9a:0c:07:0a:88:58:ee:c1:ec:20:a0:fa:fe:eb:cf: 4d:4a:f8:a7:86:0a:50:b4:f7:e1:3d:14:41:f8:94: 2b:be:aa:af:33:b2:6b:fb:b5:12:bd:32:bf:22:49: cc:9e:b1:83:e2:be:ae:02:82:10:2a:a4:30:07:47: 2f:c0:04:69:34:6d:a2:d6:e1:f7:01:3f:54:ff:fb: b0:0b:41:c1:58:8a:76:c3:50:c6:a2:13:30:41:09: 63:87:97:dc:da:e1:34:3c:9c:ef:bc:87:2f:20:48: 01:77:12:26:6c:d0:2b:df:9e:d3:d8:4f:a9:b1:e1: 40:c5:e6:57:64:6e:61:6e:c3:2c:28:a4:cd:05:8f: f4:d6:8a:5b:c7:9e:60:a0:a0:27:33:26:1d:cf:b0: b9:b0:3d:27:01:f5:43:01:08:39:c7:7d:4a:e8:1a: 1d:c1:25:40:1d:18:b9:9d:e6:89:75:60:3d:69:9e: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:92:D3:17:C4:08:6B:0D:17:B9:D7:94:84:F4:38:96:E2:D7:A1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/dcc96401-52ac-3070-8bcb-bafb4ded95b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:55:e6:4e:97:0c:a3:39:07:e5:69:d9:35:ae:a6:b6:4c:93: 70:4f:54:ce:d0:6a:b2:9b:3e:b0:89:e7:2b:e5:a2:9e:65:21: 66:cb:5d:d3:66:03:36:4e:72:da:a4:22:51:d4:cd:53:5a:41: 87:de:aa:73:ca:bd:d3:6c:50:eb:91:3e:bc:d1:20:0f:70:b3: 30:f1:70:e8:71:d9:57:f7:f8:18:5b:6c:50:1b:8b:cf:88:2d: 66:ac:c6:2f:21:ed:d0:ad:31:ae:6a:c2:cc:d6:1a:89:bb:bb: 3a:0d:d0:ef:34:1f:32:30:83:e9:a7:0e:99:f8:f8:71:8a:82: 16:ec:3d:45:7d:e2:cf:61:75:d1:fe:0e:a3:4c:44:1a:25:5b: 78:1d:f9:2e:69:02:3c:16:aa:df:d4:76:0d:e3:b0:f9:cd:90: 15:85:a1:66:11:f5:68:ee:1e:ef:0e:f8:09:a3:b3:9a:30:1a: 41:94:e3:da:50:e1:49:58:2f:e5:11:e1:36:e2:9a:5a:9e:da: 3e:89:ac:9f:3f:d9:2e:ec:cf:b6:db:5c:89:20:18:1c:aa:10: 3d:2a:53:46:55:33:be:22:d2:ad:72:2e:1c:a1:79:47:12:30: 81:37:68:0b:02:a3:c5:9a:9d:84:63:26:08:5e:5d:3f:5f:62: 04:7b:08:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmcw9HIReAfjGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OGU2YWE1NzctNzUxMy00MzUyLWExNGMtN2RiZTZhMzk0N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNeaxQspgiZnm9kG3ZsLRtZyWPW4R5Yuo3AF Cg87JEvfqQIkzatJ9FHfzf4VnaGQk0eP9YxbRUcdQ97m/xUA5lHFenjKC2L+kWma DAcKiFjuwewgoPr+689NSvinhgpQtPfhPRRB+JQrvqqvM7Jr+7USvTK/IknMnrGD 4r6uAoIQKqQwB0cvwARpNG2i1uH3AT9U//uwC0HBWIp2w1DGohMwQQljh5fc2uE0 PJzvvIcvIEgBdxImbNAr357T2E+pseFAxeZXZG5hbsMsKKTNBY/01opbx55goKAn MyYdz7C5sD0nAfVDAQg5x31K6BodwSVAHRi5neaJdWA9aZ79wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeS0xfECGsNF7nXlIT0OJbi16GwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvZGNjOTY0MDEtNTJhYy0z MDcwLThiY2ItYmFmYjRkZWQ5NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNV5k6XDKM5B+Vp2TWuprZMk3BPVM7QarKbPrCJ5yvlop5lIWbLXdNm AzZOctqkIlHUzVNaQYfeqnPKvdNsUOuRPrzRIA9wszDxcOhx2Vf3+BhbbFAbi8+I LWasxi8h7dCtMa5qwszWGom7uzoN0O80HzIwg+mnDpn4+HGKghbsPUV94s9hddH+ DqNMRBolW3gd+S5pAjwWqt/Udg3jsPnNkBWFoWYR9WjuHu8O+Amjs5owGkGU49pQ 4UlYL+UR4Tbimlqe2j6JrJ8/2S7sz7bbXIkgGByqED0qU0ZVM74i0q1yLhyheUcS MIE3aAsCo8WanYRjJgheXT9fYgR7CJA= -----END CERTIFICATE-----Generated at Fri Apr 17 10:50:32 2026 by rpki-client