$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa File: daf2984e-8d27-3568-87a6-93096592e972.roa (raw, json) Hash identifier: KYmknVfUPtXsAIm9gHRLMEEoF+bsmD4KaWXDM9PKtLI= Subject key identifier: 54:9A:81:81:01:EC:0F:4D:1B:00:FB:B2:99:56:7A:40:0B:9F:B6:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D6C0FCF73EDA26B08E5D1E5D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 35994 IP address blocks: 96.17.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:cf:73:ed:a2:6b:08:e5:d1:e5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=b8c4062e-cea3-4874-9513-12a6949add04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:23:a1:cf:23:1c:23:e6:7c:89:92:ea:47: 3a:d4:5b:db:83:bc:8a:ee:85:59:cf:c6:5a:14:c8: 25:39:c9:25:26:15:bf:cf:c1:a4:70:fd:0b:76:94: e1:8a:12:08:71:df:db:f9:19:ff:e3:ac:a3:ad:d3: da:1f:b4:f1:95:5d:1d:93:cd:12:64:e4:e2:5e:41: a8:6c:40:ea:13:78:b5:99:74:41:77:5d:4d:13:f1: 7b:4c:01:82:c0:99:70:1f:a4:9e:d0:c0:b9:12:c9: 0b:e8:38:3a:f6:30:7f:17:cf:4c:22:5d:23:fb:51: aa:f8:bb:93:e9:f8:32:ba:2b:35:0d:ed:a3:73:73: 2b:91:ae:de:f5:48:be:fb:e5:71:71:f5:43:e1:96: 0c:82:1e:70:dc:0a:5b:c8:38:4f:ca:9b:c0:27:2a: 7b:3d:b4:e4:f2:23:76:84:2d:b6:90:33:05:66:6f: 5a:8b:de:1e:94:c5:a2:c7:89:b0:bd:23:f6:f8:54: 1a:a4:7f:f1:bb:2c:1f:8c:d0:5e:bb:cb:b1:bf:b6: 68:37:9e:f2:e4:f0:d2:f7:45:20:10:4d:bb:83:d4: 19:61:79:a1:55:f7:10:c7:40:9a:17:7e:5b:cb:8e: b3:33:f3:75:20:6f:1b:25:7b:4f:f7:4c:53:ac:dc: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9A:81:81:01:EC:0F:4D:1B:00:FB:B2:99:56:7A:40:0B:9F:B6:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:73:02:ca:6d:b8:b5:82:48:12:2c:bc:c8:21:5e:ce:9f:ce: 96:5c:04:62:e9:d9:28:e6:d2:62:d1:71:52:15:e6:41:9c:bd: 83:b5:3a:11:26:1b:73:7a:8a:3b:2d:9b:3a:b1:9f:4c:eb:5f: ae:6e:52:18:bf:e7:b2:cd:c1:2b:3e:37:8c:7d:a0:94:aa:e2: ae:16:3c:a6:c5:33:bb:c4:a3:4f:7a:ea:86:7a:4b:44:6c:1a: 62:ae:37:b0:2c:a8:0b:b1:11:74:8f:9d:12:9b:91:01:e2:1b: a9:96:cf:63:68:4a:50:ea:ce:78:2b:65:78:08:65:05:ba:ae: 36:a1:f8:dc:99:e1:7a:a8:8b:a7:7f:74:87:db:8c:63:55:a7: 1b:7d:a3:e1:25:ed:95:67:d1:b4:5a:5c:78:00:5b:76:69:12: 15:0d:c2:32:fd:9b:6b:c7:75:b5:95:ab:24:ba:ba:8b:4e:c5: fe:b8:06:a0:00:59:ff:06:7d:41:4b:ab:76:6b:a0:87:75:df: a4:98:16:43:d0:03:99:72:c1:0f:91:71:7f:f6:42:c6:34:9d: 22:70:c2:7d:89:35:87:72:d6:70:69:26:41:6a:06:95:5d:c1: fb:11:63:a8:5a:cc:60:e0:22:4c:86:63:6a:a9:3d:02:a4:98: 53:4e:fe:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD89z7aJrCOXR5dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YjhjNDA2MmUtY2VhMy00ODc0LTk1MTMtMTJhNjk0OWFkZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXkjoc8jHCPmfImS6kc61Fvbg7yK7oVZz8Za FMglOcklJhW/z8GkcP0LdpThihIIcd/b+Rn/46yjrdPaH7TxlV0dk80SZOTiXkGo bEDqE3i1mXRBd11NE/F7TAGCwJlwH6Se0MC5EskL6Dg69jB/F89MIl0j+1Gq+LuT 6fgyuis1De2jc3Mrka7e9Ui+++VxcfVD4ZYMgh5w3ApbyDhPypvAJyp7PbTk8iN2 hC22kDMFZm9ai94elMWix4mwvSP2+FQapH/xuywfjNBeu8uxv7ZoN57y5PDS90Ug EE27g9QZYXmhVfcQx0CaF35by46zM/N1IG8bJXtP90xTrNx/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSagYEB7A9NGwD7splWekALn7bqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmMjk4NGUtOGQyNy0z NTY4LTg3YTYtOTMwOTY1OTJlOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpzAsptuLWCSBIsvMghXs6fzpZcBGLp2Sjm0mLRcVIV5kGcvYO1OhEm G3N6ijstmzqxn0zrX65uUhi/57LNwSs+N4x9oJSq4q4WPKbFM7vEo0966oZ6S0Rs GmKuN7AsqAuxEXSPnRKbkQHiG6mWz2NoSlDqzngrZXgIZQW6rjah+NyZ4Xqoi6d/ dIfbjGNVpxt9o+El7ZVn0bRaXHgAW3ZpEhUNwjL9m2vHdbWVqyS6uotOxf64BqAA Wf8GfUFLq3ZroId136SYFkPQA5lywQ+RcX/2QsY0nSJwwn2JNYdy1nBpJkFqBpVd wfsRY6hazGDgIkyGY2qpPQKkmFNO/jA= -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:46 2026 by rpki-client