$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa File: 3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa (raw, json) Hash identifier: 71FUs6VH/M9gsjS/ZoKCrfMJqM7nv/Pk5wYcsYVQfl8= Subject key identifier: C5:87:FD:DE:94:63:69:1D:86:26:8B:33:15:A4:41:43:42:92:04:07 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584F2ABD1DB121630C107ADA5600 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 53869 IP address blocks: 198.62.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1d:b1:21:63:0c:10:7a:da:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=49f9f957-fcd1-4ef1-9ea7-7d57ba661cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:f7:28:4d:44:69:b1:3a:77:ee:24:73:68: d8:10:a3:ad:86:66:2c:d5:49:10:9c:ad:38:22:74: 62:34:86:e5:07:4f:56:ea:1f:98:17:f0:73:48:fd: 2a:be:1c:2e:cd:22:ad:1b:2c:3f:e6:83:bb:5e:46: 7a:a5:13:b6:82:e8:8c:67:1b:57:51:4f:a5:76:98: e8:1d:1a:3d:08:b6:44:5d:6e:f2:52:ee:7d:9f:75: a5:85:80:52:a2:0f:4c:5b:76:90:60:10:7e:0e:c7: bc:5a:5c:e0:44:54:32:3c:17:ad:8d:7a:8e:66:0a: 4b:62:0b:6d:58:35:e6:58:70:db:47:80:1b:d5:6f: d5:79:f5:4a:82:ad:bb:ad:69:f0:89:66:ba:18:e3: 87:86:45:58:e2:00:4d:a7:88:a2:81:a3:e2:78:09: c0:31:ea:76:6c:2d:e2:48:34:31:b7:cc:95:9e:7a: 84:0f:95:b1:b4:70:88:b8:f6:f5:91:91:59:8f:02: 8d:4b:81:b1:0b:d1:5e:24:00:70:77:a0:ae:da:b7: 4a:60:36:d9:95:68:6c:62:6d:14:50:83:9b:72:02: c9:db:fb:13:bb:69:66:a5:08:ae:7e:c0:7a:f1:a1: f2:03:e2:92:20:b9:22:b0:bd:24:07:bc:cf:dc:bc: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:87:FD:DE:94:63:69:1D:86:26:8B:33:15:A4:41:43:42:92:04:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 198.62.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:79:7f:3e:0c:ce:71:77:8d:f4:34:77:4e:9f:ba:e3:ab:26: ce:2b:ab:89:04:3e:43:2d:53:8f:d9:40:1d:fb:b0:75:6a:ce: 92:6e:b3:20:43:19:f6:01:e9:73:3a:be:fe:c9:f7:0f:9c:08: 24:d1:95:df:9c:f9:75:4f:9f:ed:d1:c3:fd:cd:af:06:f0:51: b8:3e:59:a6:90:5c:cf:7d:3e:89:ab:2b:9d:24:c6:d2:ed:29: 90:fe:5a:4b:05:1a:a9:f5:54:99:b4:66:e8:be:8a:8f:65:32: 1a:6a:d2:e2:19:05:2b:09:93:e8:42:86:db:d0:26:08:57:41: ec:20:a6:c4:a6:07:0f:ae:47:0e:31:75:02:5a:98:7c:17:83: 08:97:fb:9f:7f:91:ea:97:da:84:bd:34:1c:66:08:c6:2f:07: bd:bc:2c:0d:2f:37:c3:25:9b:84:83:47:a0:ac:d9:dd:e4:5e: ae:d6:6a:58:01:db:83:80:45:38:c5:61:7f:f8:6b:c7:1a:49: f7:f2:29:36:76:1b:6c:eb:b5:6e:79:da:cf:b2:73:25:91:10: c4:2d:9f:d4:4f:b1:ad:02:b1:f2:d6:8e:fd:d7:58:fe:0e:45: c7:e4:47:f7:67:79:14:61:d2:bb:a9:4e:a4:ca:2e:15:f4:ca: bb:3f:8b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvR2xIWMMEHraVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDlmOWY5NTctZmNkMS00ZWYxLTllYTctN2Q1N2JhNjYxY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu73KE1EabE6d+4kc2jYEKOthmYs1UkQnK04 InRiNIblB09W6h+YF/BzSP0qvhwuzSKtGyw/5oO7XkZ6pRO2guiMZxtXUU+ldpjo HRo9CLZEXW7yUu59n3WlhYBSog9MW3aQYBB+Dse8WlzgRFQyPBetjXqOZgpLYgtt WDXmWHDbR4Ab1W/VefVKgq27rWnwiWa6GOOHhkVY4gBNp4iigaPieAnAMep2bC3i SDQxt8yVnnqED5WxtHCIuPb1kZFZjwKNS4GxC9FeJABwd6Cu2rdKYDbZlWhsYm0U UIObcgLJ2/sTu2lmpQiufsB68aHyA+KSILkisL0kB7zP3Lyr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWH/d6UY2kdhiaLMxWkQUNCkgQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvM2RhN2IwYTktN2ZhNS0z YmEwLWI2YzgtZTVhMmFjNzdkMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxj54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp5fz4MznF3jfQ0d06fuuOrJs4rq4kEPkMtU4/ZQB37sHVqzpJusyBD GfYB6XM6vv7J9w+cCCTRld+c+XVPn+3Rw/3NrwbwUbg+WaaQXM99PomrK50kxtLt KZD+WksFGqn1VJm0Zui+io9lMhpq0uIZBSsJk+hChtvQJghXQewgpsSmBw+uRw4x dQJamHwXgwiX+59/keqX2oS9NBxmCMYvB728LA0vN8Mlm4SDR6Cs2d3kXq7WalgB 24OARTjFYX/4a8caSffyKTZ2G2zrtW552s+ycyWREMQtn9RPsa0CsfLWjv3XWP4O RcfkR/dneRRh0rupTqTKLhX0yrs/i48= -----END CERTIFICATE-----Generated at Tue Sep 29 19:15:57 2026 by rpki-client