$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa File: dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json) Hash identifier: qpraaU5FKauq3HjnoVEKoxd0Vu81bINNPwtx0OYVbpA= Subject key identifier: E3:90:D8:D7:F7:99:5C:AA:D0:8F:BC:D1:59:F0:80:3D:47:E3:9F:C6 Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d Certificate serial: 010D0C9F4328584ECD372EC3B64CEEB2C4CD41C0 Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 46632 IP address blocks: 96.45.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2e:c3:b6:4c:ee:b2:c4:cd:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=e20c11cb-9b20-4e5b-969a-e7d979f6ebb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b1:e0:7b:9f:42:db:50:f9:0b:29:13:b2:aa: 60:5b:d6:46:e0:6b:b6:b2:13:84:ee:f6:5d:58:e4: a9:94:6e:1c:1b:ea:96:bf:20:89:2e:45:10:44:3f: 62:3c:45:56:87:47:aa:73:c7:c9:b4:30:9b:92:b1: c8:19:25:66:4e:e0:d8:d9:9c:6f:97:64:6b:49:f9: 82:cb:a4:77:f8:0a:cc:25:a1:60:88:9e:4e:75:6f: e6:66:fc:7a:03:0a:42:a6:fa:bc:f8:be:3c:03:7e: 14:0c:d5:03:b0:02:5f:fc:b8:04:a9:c3:6d:1b:ae: 00:d6:b2:62:58:f0:71:3b:9c:2e:f6:c4:6b:08:ff: db:8d:82:46:c5:3d:3f:2c:03:1a:68:3e:ef:7b:3d: 93:fa:4d:88:ce:1f:31:b8:e9:85:b9:b6:a7:8d:61: c4:bb:ca:5d:4b:78:96:c7:e7:fa:e0:0c:7d:b9:2f: 48:2b:60:c7:45:5e:5f:fc:f3:24:68:c4:f1:a0:fb: eb:e0:15:c9:1d:bd:98:bc:cc:c2:0d:fe:8f:a4:b6: 7f:6b:fc:0a:91:d3:2d:04:75:72:f5:25:71:e6:02: ce:f4:39:d9:c8:14:1d:de:f6:f1:3a:38:60:6b:00: 78:ed:d0:4d:cd:1d:dd:88:b8:9c:51:73:ac:5b:e4: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:D8:D7:F7:99:5C:AA:D0:8F:BC:D1:59:F0:80:3D:47:E3:9F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl X509v3 Authority Key Identifier: keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer sbgp-ipAddrBlock: critical IPv4: 96.45.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:49:0f:24:ae:04:3c:ba:62:7c:6b:bd:31:6a:31:64:b4:a8: 6c:0f:f2:f7:b5:ff:6d:cc:98:ac:91:db:16:d7:43:e8:bc:63: 90:50:e7:ed:c8:a5:62:25:5b:44:95:c8:6f:9d:38:b5:c9:70: d9:14:69:d8:2a:fa:01:46:cc:7b:83:47:7c:f9:51:54:f4:8a: 9f:78:25:fc:59:17:a9:c7:c4:46:55:99:89:28:6e:04:f9:11: 31:0a:c6:d1:b0:99:53:1b:ad:05:82:96:be:89:c7:40:94:4c: 0c:5f:fd:69:bd:12:5e:39:f1:8b:b3:94:60:b4:46:0e:0b:a0: 14:b2:e5:fd:57:2a:b5:51:e2:54:50:e4:f5:f7:2a:1e:37:ef: 2b:2a:92:63:60:ec:24:80:3b:e2:0d:91:96:26:7e:65:78:29: f5:e6:db:85:1c:8f:c7:b4:35:74:b1:af:17:16:2b:4e:e6:4e: 4a:d6:df:69:5e:76:04:30:8e:a6:77:b0:07:c4:c2:7b:1b:21: 96:d0:3e:48:a2:26:4c:59:f6:1b:26:bf:1e:2b:c7:6a:03:64: 9e:31:e3:fb:20:8b:65:e7:25:b1:fd:f4:94:0e:10:8f:37:6b: ef:d9:df:57:2f:99:8e:e1:15:78:1e:05:5e:71:39:70:fc:2b: 94:77:f0:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNy7DtkzussTNQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw OTZkMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZTIwYzExY2ItOWIyMC00ZTViLTk2OWEtZTdkOTc5ZjZlYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rHge59C21D5CykTsqpgW9ZG4Gu2shOE7vZd WOSplG4cG+qWvyCJLkUQRD9iPEVWh0eqc8fJtDCbkrHIGSVmTuDY2Zxvl2RrSfmC y6R3+ArMJaFgiJ5OdW/mZvx6AwpCpvq8+L48A34UDNUDsAJf/LgEqcNtG64A1rJi WPBxO5wu9sRrCP/bjYJGxT0/LAMaaD7vez2T+k2Izh8xuOmFubanjWHEu8pdS3iW x+f64Ax9uS9IK2DHRV5f/PMkaMTxoPvr4BXJHb2YvMzCDf6PpLZ/a/wKkdMtBHVy 9SVx5gLO9DnZyBQd3vbxOjhgawB47dBNzR3diLicUXOsW+QJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOQ2Nf3mVyq0I+80VnwgD1H45/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5 NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvZGZmNmMzNTItNWEyZS0z YzlkLTkxMDYtZTU2NmQxNGI5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3 MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNJDySuBDy6YnxrvTFqMWS0qGwP8ve1/23MmKyR2xbXQ+i8Y5BQ5+3I pWIlW0SVyG+dOLXJcNkUadgq+gFGzHuDR3z5UVT0ip94JfxZF6nHxEZVmYkobgT5 ETEKxtGwmVMbrQWClr6Jx0CUTAxf/Wm9El458YuzlGC0Rg4LoBSy5f1XKrVR4lRQ 5PX3Kh437ysqkmNg7CSAO+INkZYmfmV4KfXm24Ucj8e0NXSxrxcWK07mTkrW32le dgQwjqZ3sAfEwnsbIZbQPkiiJkxZ9hsmvx4rx2oDZJ4x4/sgi2XnJbH99JQOEI83 a+/Z31cvmY7hFXgeBV5xOXD8K5R38E4= -----END CERTIFICATE-----Generated at Tue Sep 29 04:19:49 2026 by rpki-client