$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa File: 8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa (raw, json) Hash identifier: wFEWZzZQO+p4w/DlY8knHs5uY9GyieyZQD7rxs8SxeU= Subject key identifier: 13:FE:E7:C1:79:5E:77:58:D6:75:8E:36:42:A9:78:F1:A0:3E:25:C8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4974019AB003EC0E3AF80F40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 96.1.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:01:9a:b0:03:ec:0e:3a:f8:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3859c7c-56f0-489b-825e-a053805ebc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:48:23:09:98:e8:be:b8:1f:1f:46:d3:16: 86:86:17:79:78:88:c4:ea:7c:9c:bd:47:bb:23:c7: a8:7b:ee:14:76:c1:6f:36:10:5f:00:c1:8b:1f:84: 43:a1:28:0c:97:98:b1:5b:95:6f:5c:01:74:5a:ad: d5:94:09:8b:56:2c:e7:77:78:c0:32:d0:96:5e:27: 1d:78:26:0a:ef:42:af:bf:4f:72:72:f1:4e:d0:9f: ce:db:e1:6d:2b:cb:4b:6e:30:22:c7:5c:68:b5:f9: 9b:69:e2:25:28:b8:a4:d6:cb:7b:4a:33:a6:3f:a6: 6e:43:b0:66:e5:13:54:13:db:76:29:eb:c8:c2:6a: 58:52:f3:fb:26:c5:4e:52:35:35:c4:5c:58:c8:27: 53:92:42:0e:59:36:8d:89:fc:2f:f5:57:d0:2a:8c: 87:e8:66:cd:5a:4e:2b:80:5c:98:0c:80:17:95:10: 86:9c:23:ec:30:13:8d:d4:03:45:93:0b:dd:a4:d4: ea:54:d2:78:3a:45:ab:7e:83:02:8e:39:80:ce:bf: 43:ef:6c:78:24:97:61:1a:e2:c4:56:5e:0e:ad:be: 46:8b:dd:70:02:1e:b1:c4:e9:9f:f8:67:2e:fb:31: 62:af:39:c6:22:fb:c2:31:dd:a9:4d:26:9f:4b:20: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FE:E7:C1:79:5E:77:58:D6:75:8E:36:42:A9:78:F1:A0:3E:25:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 96.1.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:84:dd:8b:35:d8:c3:f0:4c:58:50:9c:5d:94:8f:36:c2:c2: 9d:f5:36:1b:1a:52:2d:56:41:71:6f:ac:7b:bf:82:7e:a0:50: 0d:9c:f5:6b:83:e9:79:87:09:dd:87:aa:29:b3:0c:90:6a:64: 43:4a:e8:46:04:15:98:96:eb:ea:80:62:5d:ad:83:cb:67:16: ea:fd:b4:ab:7c:37:da:9f:f3:b9:6e:f8:26:c0:94:d8:a6:e5: 71:67:7a:30:fa:c6:59:7a:17:e6:f0:2a:f1:8c:a5:0b:c9:2c: ae:f6:42:0f:e5:4c:48:08:a2:e9:69:3f:16:b9:81:da:3f:2f: 76:2f:08:a2:5a:35:de:a7:9f:ec:0e:2d:45:93:df:61:90:56: b3:ee:6c:22:a5:49:69:e1:16:1a:3d:47:4a:21:d1:56:47:27: b3:9e:30:cc:58:c3:75:5c:19:b3:78:c7:4a:30:9b:58:f9:fa: b9:8f:5c:de:ce:6f:df:24:ed:c1:08:91:67:3b:42:4d:2f:a9: 6a:91:ce:61:d3:0f:0b:9c:48:65:46:48:86:3b:94:7a:2d:39: 35:e7:9a:2d:98:8b:88:3f:78:8e:ed:12:0d:2d:25:41:f3:c5: f7:07:9b:84:a8:52:01:3a:93:ce:80:1e:bc:43:0b:2c:22:46: 6d:4c:fc:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAGasAPsDjr4D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM4NTljN2MtNTZmMC00ODliLTgyNWUtYTA1MzgwNWViYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n5IIwmY6L64Hx9G0xaGhhd5eIjE6nycvUe7 I8eoe+4UdsFvNhBfAMGLH4RDoSgMl5ixW5VvXAF0Wq3VlAmLViznd3jAMtCWXicd eCYK70Kvv09ycvFO0J/O2+FtK8tLbjAix1xotfmbaeIlKLik1st7SjOmP6ZuQ7Bm 5RNUE9t2KevIwmpYUvP7JsVOUjU1xFxYyCdTkkIOWTaNifwv9VfQKoyH6GbNWk4r gFyYDIAXlRCGnCPsMBON1ANFkwvdpNTqVNJ4OkWrfoMCjjmAzr9D72x4JJdhGuLE Vl4Orb5Gi91wAh6xxOmf+Gcu+zFirznGIvvCMd2pTSafSyBrhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP+58F5XndY1nWONkKpePGgPiXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGE5YTdjNjItN2M5ZC0z MDJjLTljMmItNmFkNDE5ZjBjMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOWE3Ys12MPwTFhQnF2UjzbCwp31NhsaUi1WQXFvrHu/gn6gUA2c9WuD 6XmHCd2HqimzDJBqZENK6EYEFZiW6+qAYl2tg8tnFur9tKt8N9qf87lu+CbAlNim 5XFnejD6xll6F+bwKvGMpQvJLK72Qg/lTEgIoulpPxa5gdo/L3YvCKJaNd6nn+wO LUWT32GQVrPubCKlSWnhFho9R0oh0VZHJ7OeMMxYw3VcGbN4x0owm1j5+rmPXN7O b98k7cEIkWc7Qk0vqWqRzmHTDwucSGVGSIY7lHotOTXnmi2Yi4g/eI7tEg0tJUHz xfcHm4SoUgE6k86AHrxDCywiRm1M/DM= -----END CERTIFICATE-----Generated at Mon Sep 28 12:52:57 2026 by rpki-client