$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa File: 540179f1-12c7-36b3-82d6-626a329ee8e2.roa (raw, json) Hash identifier: bK6CW3I88BJaRF3B+V3GFGMrx6ZBDtTQ2DXwV7rD2BM= Subject key identifier: CA:CD:69:AC:C2:A1:73:90:3D:EA:BE:98:A6:58:C5:0C:83:7E:73:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D6515375B3463001E838F6840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 20940 IP address blocks: 96.7.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:37:5b:34:63:00:1e:83:8f:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=03af000e-77a6-4a08-bf72-1b88d7af7d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:1b:59:9a:83:3c:a4:de:76:96:57:90:18: 90:d9:bf:d8:4d:3f:14:76:b0:ae:fa:7d:01:91:d4: 63:29:b6:18:8c:7e:79:66:4e:10:70:94:6c:1a:cf: 3d:ab:a6:bb:18:ea:fd:85:4a:a1:4c:ea:10:53:05: ab:b2:5d:b8:79:67:13:3e:61:63:2e:3b:79:01:90: 88:9d:ca:f1:8c:4d:c3:85:68:16:17:68:88:09:81: d9:9f:b9:3a:23:93:60:8e:93:41:f5:ca:96:4d:40: 65:3b:84:5a:31:85:f5:7f:26:db:eb:d5:b1:d3:ee: 30:d6:ff:c8:a4:c9:b3:a8:cf:01:0c:e6:89:56:b8: 5a:ae:61:53:4a:78:74:15:9a:13:22:98:19:7a:85: 5e:cc:56:b8:3d:b0:b2:d2:b3:b9:c7:f4:e1:f5:16: 96:a9:07:a8:07:d6:71:56:f6:e1:10:92:bf:54:3c: e6:2e:19:64:27:12:bc:fc:a9:c0:27:36:b7:09:de: 3f:0e:a0:69:e5:2f:ea:2e:6f:a9:de:1b:14:ce:20: c1:22:71:63:40:d5:da:0d:61:17:c1:51:84:bb:99: b0:e3:97:a2:f6:a0:a8:d5:58:39:f6:d7:cf:74:91: f0:3e:7a:d2:4f:62:95:13:62:a7:eb:89:bb:c6:0b: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:69:AC:C2:A1:73:90:3D:EA:BE:98:A6:58:C5:0C:83:7E:73:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/540179f1-12c7-36b3-82d6-626a329ee8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7e:b3:0f:dc:96:44:b2:76:e0:d4:3c:3a:32:07:37:5a:08: 92:c0:3f:52:cc:01:1f:6a:3e:c0:1c:ee:dd:da:29:9f:a6:93: d3:22:ea:c3:53:71:e9:6f:bf:88:7b:fe:d5:49:ae:ac:c1:38: 80:ee:b5:1a:a0:67:63:9a:3b:94:16:35:84:f8:a2:6c:1e:7f: d0:2c:09:56:5f:1f:0f:ae:b8:cb:80:47:7f:04:2e:47:66:3e: c4:c9:cd:ff:e3:89:51:4f:e9:6f:0a:96:bc:57:0b:22:19:71: 0c:bc:8c:06:4d:4e:21:63:da:c8:48:54:c0:07:3c:a5:37:b5: 09:1f:44:ed:bc:89:84:12:89:6d:ac:0c:fe:3e:38:df:57:d8: 39:3e:26:5e:b5:ac:95:db:92:74:0c:6c:2c:cb:28:5e:b3:10: b6:4e:5e:f5:e6:a8:39:a5:56:03:38:dd:b5:52:64:88:a0:b7: 44:45:67:74:2a:2b:0c:90:83:fb:d9:02:5c:9f:ff:97:26:7f: a4:25:84:03:fd:6e:75:30:04:33:74:87:a6:dd:cd:e2:7d:96: 3d:c9:43:9c:de:16:a2:cf:2c:b0:9a:34:c9:16:24:b3:89:b0: f9:26:36:a2:db:ad:d8:b9:49:8f:55:60:4c:f5:b1:5e:34:ed: 36:d8:db:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTdbNGMAHoOPaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MDNhZjAwMGUtNzdhNi00YTA4LWJmNzItMWI4OGQ3YWY3ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVgbWZqDPKTedpZXkBiQ2b/YTT8UdrCu+n0B kdRjKbYYjH55Zk4QcJRsGs89q6a7GOr9hUqhTOoQUwWrsl24eWcTPmFjLjt5AZCI ncrxjE3DhWgWF2iICYHZn7k6I5NgjpNB9cqWTUBlO4RaMYX1fybb69Wx0+4w1v/I pMmzqM8BDOaJVrharmFTSnh0FZoTIpgZeoVezFa4PbCy0rO5x/Th9RaWqQeoB9Zx VvbhEJK/VDzmLhlkJxK8/KnAJza3Cd4/DqBp5S/qLm+p3hsUziDBInFjQNXaDWEX wVGEu5mw45ei9qCo1Vg59tfPdJHwPnrST2KVE2Kn64m7xgtw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrNaazCoXOQPeq+mKZYxQyDfnPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQwMTc5ZjEtMTJjNy0z NmIzLTgyZDYtNjI2YTMyOWVlOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV+sw/clkSyduDUPDoyBzdaCJLAP1LMAR9qPsAc7t3aKZ+mk9Mi6sNT celvv4h7/tVJrqzBOIDutRqgZ2OaO5QWNYT4omwef9AsCVZfHw+uuMuAR38ELkdm PsTJzf/jiVFP6W8KlrxXCyIZcQy8jAZNTiFj2shIVMAHPKU3tQkfRO28iYQSiW2s DP4+ON9X2Dk+Jl61rJXbknQMbCzLKF6zELZOXvXmqDmlVgM43bVSZIigt0RFZ3Qq KwyQg/vZAlyf/5cmf6QlhAP9bnUwBDN0h6bdzeJ9lj3JQ5zeFqLPLLCaNMkWJLOJ sPkmNqLbrdi5SY9VYEz1sV407TbY2zo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:15 2026 by rpki-client