$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa File: aeb59863-a3d1-30da-b760-843a670437ad.roa (raw, json) Hash identifier: xQ8yPAkBUEmEfCIcngEupdQRmIbd7Tzu9ZUB1FIvpTE= Subject key identifier: E8:F1:12:C9:83:06:EB:DB:BA:A1:95:C2:DE:31:21:FD:BD:9D:02:DC Certificate issuer: /CN=96239d53-1062-4a21-8f97-639809abe5de Certificate serial: 010D0C9F4328584D4D5A4CD68344CF85A0C13300 Authority key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 22933 IP address blocks: 65.255.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4c:d6:83:44:cf:85:a0:c1:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96239d53-1062-4a21-8f97-639809abe5de Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fd50d26c-7e66-4619-a1e9-07ff88baef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:fa:06:fd:24:ca:1d:a9:5e:39:13:dc:80: 1f:30:e6:be:b4:47:29:5b:b5:60:d6:70:34:a9:87: cf:41:d8:4e:c2:72:74:02:fe:9a:1d:26:a0:a2:46: 98:25:fe:3b:8c:67:37:18:e0:bd:ce:69:f9:0d:f7: 7b:7e:66:8f:97:93:69:97:fd:95:65:1d:bc:7a:fd: 5b:8d:24:9e:2c:64:4d:9e:da:5d:a4:39:63:1a:17: 1b:a7:2c:fb:eb:6d:a1:d8:7b:6c:1e:dd:87:8b:77: 8f:20:6c:c5:71:f3:bb:57:dc:f9:c6:11:59:68:b3: ce:f3:36:a6:6c:ce:b8:0b:2d:44:03:cd:8b:0d:82: 08:91:77:0e:8a:2a:1c:80:d7:f1:84:60:59:b7:50: fd:95:ae:d3:2d:81:db:f5:7d:d6:76:fe:58:09:b8: 43:63:a4:dc:88:ad:4b:ab:ce:43:ef:26:11:83:be: 27:28:eb:af:72:a3:a4:46:eb:87:59:81:fb:fd:7a: 44:05:5f:20:88:f6:7d:e8:95:49:37:e0:4e:e6:0a: 4f:77:87:ff:38:8f:5a:c5:93:b9:f4:a5:77:2b:20: 21:21:24:a2:b4:e7:60:f4:e9:b8:a7:16:88:9f:fd: 97:3e:a0:ba:64:cc:86:fa:40:20:b5:b5:68:b8:70: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F1:12:C9:83:06:EB:DB:BA:A1:95:C2:DE:31:21:FD:BD:9D:02:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl X509v3 Authority Key Identifier: keyid:D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer sbgp-ipAddrBlock: critical IPv4: 65.255.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1b:7b:b5:9f:7c:4f:a5:52:0a:d9:36:29:f1:7e:43:87:7f: 4c:6e:5b:e3:0e:51:75:ce:5b:5c:5f:29:62:89:84:21:15:29: 8d:0e:96:f1:01:25:ee:ed:59:95:41:48:c4:5a:bc:5c:8d:2e: b9:11:43:41:84:97:c4:4c:0f:a5:8f:60:9e:10:90:4c:20:a8: b9:5b:3a:19:4f:20:e8:4a:aa:6b:4f:35:4d:06:08:1f:83:1d: 04:67:f8:5e:76:55:24:72:1a:a4:90:9b:32:fa:71:8d:24:bc: ec:96:dc:3b:f3:42:d5:18:5b:ae:a9:3b:56:45:d3:9a:67:8c: 7c:a1:18:51:3f:d6:dc:5a:6d:30:e2:24:8b:57:ad:e8:dd:e1: 68:40:89:db:fd:f2:db:63:4e:27:32:d8:13:b0:0c:fe:68:7a: 64:51:c4:ed:85:53:ab:83:df:6c:11:56:06:e2:25:14:dc:69: 14:eb:a2:c2:a6:dc:f8:9b:aa:06:4f:c2:b8:be:53:7b:52:19: 3e:44:f9:71:2e:c9:4a:85:f8:ec:1b:22:78:ff:6a:9d:a4:eb: 9b:62:65:f4:5a:e6:b8:b9:62:90:1f:92:23:76:5f:b0:5c:37: 4f:2e:ed:6e:35:41:97:a2:20:77:be:52:3d:fc:08:c0:41:1a: f5:bb:68:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkzWg0TPhaDBMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYyMzlkNTMtMTA2Mi00YTIxLThmOTctNjM5ODA5YWJl NWRlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmQ1MGQyNmMtN2U2Ni00NjE5LWExZTktMDdmZjg4YmFlZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriT6Bv0kyh2pXjkT3IAfMOa+tEcpW7Vg1nA0 qYfPQdhOwnJ0Av6aHSagokaYJf47jGc3GOC9zmn5Dfd7fmaPl5Npl/2VZR28ev1b jSSeLGRNntpdpDljGhcbpyz7622h2HtsHt2Hi3ePIGzFcfO7V9z5xhFZaLPO8zam bM64Cy1EA82LDYIIkXcOiiocgNfxhGBZt1D9la7TLYHb9X3Wdv5YCbhDY6TciK1L q85D7yYRg74nKOuvcqOkRuuHWYH7/XpEBV8giPZ96JVJN+BO5gpPd4f/OI9axZO5 9KV3KyAhISSitOdg9Om4pxaIn/2XPqC6ZMyG+kAgtbVouHDK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjxEsmDBuvbuqGVwt4xIf29nQLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjIz OWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlhYmU1ZGUvYWViNTk4NjMtYTNkMS0z MGRhLWI3NjAtODQzYTY3MDQzN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYyMzlkNTMtMTA2Mi00YTIxLThm OTctNjM5ODA5YWJlNWRlLzk2MjM5ZDUzLTEwNjItNGEyMS04Zjk3LTYzOTgwOWFi ZTVkZS5jcmwwHwYDVR0jBBgwFoAU2eA/F0XUhvY4Z94xYMndYcaFFhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4 MDlhYmU1ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwbe7WffE+lUgrZNinxfkOHf0xuW+MOUXXOW1xfKWKJhCEVKY0OlvEB Je7tWZVBSMRavFyNLrkRQ0GEl8RMD6WPYJ4QkEwgqLlbOhlPIOhKqmtPNU0GCB+D HQRn+F52VSRyGqSQmzL6cY0kvOyW3DvzQtUYW66pO1ZF05pnjHyhGFE/1txabTDi JItXrejd4WhAidv98ttjTicy2BOwDP5oemRRxO2FU6uD32wRVgbiJRTcaRTrosKm 3PibqgZPwri+U3tSGT5E+XEuyUqF+OwbInj/ap2k65tiZfRa5ri5YpAfkiN2X7Bc N08u7W41QZeiIHe+Uj38CMBBGvW7aAk= -----END CERTIFICATE-----Generated at Sat Apr 18 03:08:41 2026 by rpki-client