$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa File: 9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa (raw, json) Hash identifier: RbyqJswCWoBZSnoeeRycuc4uPhzi/9NTs5zHuLLnilc= Subject key identifier: D9:B4:96:0D:6E:6B:DC:97:77:E0:7F:A9:BB:32:BC:20:AD:F1:4E:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D651537F983353F8B05A71B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 16625 IP address blocks: 96.7.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:37:f9:83:35:3f:8b:05:a7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=dd3bcd88-fa1d-4dff-a98d-679b88f12e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:d9:d8:6e:2f:32:00:2f:a3:bb:fc:5a:bc: c5:bf:2a:76:b1:b7:9e:86:43:bc:f7:72:00:12:52: ac:3b:bf:f0:c8:1d:8a:dd:8c:7f:26:7b:20:f6:7c: dd:70:a5:e5:c1:b5:df:9d:88:b5:fe:5f:3b:a7:8e: 0e:42:f3:20:fd:69:6c:0c:de:43:5e:09:41:c5:45: 41:d1:cf:ac:7d:af:8d:f6:d7:79:54:1b:68:87:c4: c7:61:c9:c3:81:f9:13:4c:d6:5b:ee:17:fe:6e:9c: 58:29:1b:65:0d:55:09:73:52:9d:d0:44:0f:c7:29: bd:b9:90:6f:fc:0d:93:5f:60:55:8d:5e:4d:d5:9c: a5:91:c6:70:5f:88:61:ea:9d:ea:01:dc:5e:fe:ce: b2:28:43:b3:dd:3d:f0:ea:12:d7:e1:de:a2:bd:92: 2d:d3:a9:07:71:a2:95:7c:45:7b:e3:44:b9:b0:e1: 4f:cc:27:20:91:9d:12:4e:ef:49:55:22:8f:9b:e2: 6b:49:f6:ca:e8:50:a4:f3:59:b0:63:d7:89:6d:26: 74:91:ea:b8:5d:6d:6c:f1:ec:34:aa:23:c9:cb:43: 67:54:6f:de:ca:73:49:0d:b9:ab:03:2d:4c:61:a0: 80:e1:0c:25:82:2f:05:bd:53:a5:f8:e7:30:ce:73: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:96:0D:6E:6B:DC:97:77:E0:7F:A9:BB:32:BC:20:AD:F1:4E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9e:f0:ee:da:88:b5:1a:00:ce:54:35:9e:90:2a:ba:ab:ac: e4:32:49:9d:82:25:5e:ac:d2:e6:7a:f7:0e:37:29:93:d5:b8: 12:14:1b:cc:9e:6f:94:57:be:02:91:8e:b6:32:83:5c:a4:f4: cc:db:ed:1f:c0:39:9e:28:c7:67:ec:aa:9e:63:ec:35:41:de: 20:39:b2:e3:15:6d:56:f1:a9:4b:a8:ad:2f:ee:50:92:d7:a9: 75:13:50:92:0e:f6:2d:c2:8e:53:1f:0a:22:b3:63:67:11:a1: 92:d8:91:d7:29:25:c3:60:da:05:4e:61:c4:2d:5e:3d:f0:22: b5:c3:df:90:5f:bb:00:72:9b:1e:e0:ae:b2:e6:f9:57:4e:12: 05:53:ca:87:be:38:19:70:b2:96:a7:57:3b:2b:44:96:22:9d: 7d:b5:d3:01:7b:30:c9:61:00:65:28:f4:0c:2a:75:1b:f0:23: 26:19:cb:cb:ac:bc:0d:71:48:8d:ca:b7:a5:c4:cb:9f:1f:63: fe:e9:1b:70:ba:7e:03:24:43:9b:26:1a:87:f5:0f:77:9b:2b: 19:90:9d:ba:ae:92:41:4a:9b:f4:09:33:fd:79:e5:ff:99:18: 20:a0:85:ee:44:6f:88:58:c2:f2:c2:25:ca:64:7c:ab:71:98: 5e:53:60:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTf5gzU/iwWnG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZGQzYmNkODgtZmExZC00ZGZmLWE5OGQtNjc5Yjg4ZjEyZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRvZ2G4vMgAvo7v8WrzFvyp2sbeehkO893IA ElKsO7/wyB2K3Yx/Jnsg9nzdcKXlwbXfnYi1/l87p44OQvMg/WlsDN5DXglBxUVB 0c+sfa+N9td5VBtoh8THYcnDgfkTTNZb7hf+bpxYKRtlDVUJc1Kd0EQPxym9uZBv /A2TX2BVjV5N1ZylkcZwX4hh6p3qAdxe/s6yKEOz3T3w6hLX4d6ivZIt06kHcaKV fEV740S5sOFPzCcgkZ0STu9JVSKPm+JrSfbK6FCk81mwY9eJbSZ0keq4XW1s8ew0 qiPJy0NnVG/eynNJDbmrAy1MYaCA4Qwlgi8FvVOl+OcwznM83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm0lg1ua9yXd+B/qbsyvCCt8U7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFmMmMzNDYtNWU4NS0z NmVjLWE0ZWUtNmMwYWNmNDViODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGe8O7aiLUaAM5UNZ6QKrqrrOQySZ2CJV6s0uZ69w43KZPVuBIUG8ye b5RXvgKRjrYyg1yk9Mzb7R/AOZ4ox2fsqp5j7DVB3iA5suMVbVbxqUuorS/uUJLX qXUTUJIO9i3CjlMfCiKzY2cRoZLYkdcpJcNg2gVOYcQtXj3wIrXD35BfuwBymx7g rrLm+VdOEgVTyoe+OBlwspanVzsrRJYinX210wF7MMlhAGUo9AwqdRvwIyYZy8us vA1xSI3Kt6XEy58fY/7pG3C6fgMkQ5smGof1D3ebKxmQnbqukkFKm/QJM/155f+Z GCCghe5Eb4hYwvLCJcpkfKtxmF5TYEM= -----END CERTIFICATE-----Generated at Fri Apr 17 10:50:11 2026 by rpki-client