$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa File: 3e8828ed-0322-3dec-8145-aa943c8f2112.roa (raw, json) Hash identifier: Sm3WU1wvklNSLBbsYjt2DC1UtIU6WdClTzx9IPBk2ug= Subject key identifier: C5:20:AD:68:6C:6F:0D:05:C9:9F:C2:45:6E:39:55:2A:5B:8F:0B:A4 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584DBFD07A54AAF4183FEB86B400 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 53828 IP address blocks: 96.8.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:7a:54:aa:f4:18:3f:eb:86:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=d3adddca-e7fd-49a8-8457-48fc9bace7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:84:e6:77:04:d4:51:df:30:7d:ca:3d:48: fb:5e:1e:01:4c:df:1c:0b:99:0f:18:a1:29:c3:b6: 5f:66:62:31:f1:1d:74:7a:c6:0d:98:3a:23:a5:fc: c9:77:75:c4:c3:da:29:52:6c:40:b0:34:0d:7e:7f: 97:50:cf:c3:3a:b5:52:9a:24:01:26:c2:b8:27:ce: fb:c4:6a:d8:fd:5f:46:16:8d:73:d9:e1:01:61:fe: 75:dd:89:09:33:08:45:41:50:6d:f6:9f:fe:66:bb: e2:5b:70:90:d0:73:cb:24:14:12:a1:68:90:c2:c3: 67:73:84:40:d8:0f:ee:3d:da:c8:71:5f:7b:1b:d1: 05:23:4e:f2:b6:c7:bb:32:53:e0:95:f9:cd:23:16: f4:4b:5d:39:b7:4d:ec:24:8e:8f:2b:19:35:ba:be: 8f:4b:49:44:57:72:56:0b:e8:f2:71:5b:b7:c9:e5: d2:71:c7:a5:91:05:ca:f9:0d:f6:f1:16:a4:8b:e6: bd:5b:2b:87:d3:12:15:c0:f7:32:8f:db:8d:4c:06: a2:6c:89:c2:82:5f:bd:d3:ed:a7:14:da:98:a3:63: 58:c6:6a:39:51:1d:8d:db:bd:d0:23:26:9b:ef:6e: bc:c5:bf:c0:f6:c8:8d:48:56:8b:3b:64:5d:c6:ed: 22:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:AD:68:6C:6F:0D:05:C9:9F:C2:45:6E:39:55:2A:5B:8F:0B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 96.8.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d2:83:b4:f5:95:43:09:5f:f9:29:15:df:ff:70:e2:4c:27: 7d:03:5d:c6:fd:f7:50:36:e9:09:5e:9c:da:64:46:4a:95:35: 4b:40:dc:35:44:16:38:2c:57:7c:d1:ed:26:39:5f:d3:1e:0d: ee:91:22:9e:0b:ff:a9:c1:cf:1f:32:52:4d:f7:18:54:c3:9a: d6:60:ca:08:7c:c9:9c:1b:4c:41:a0:e2:f2:44:6f:28:54:11: 7f:73:5c:77:ba:ca:47:69:71:97:77:1a:ec:61:56:db:fb:01: 7b:e7:f6:4b:1f:7f:4b:19:30:d9:f3:28:9a:bc:52:a3:d9:73: a5:5b:50:fa:04:7c:95:29:bd:28:ea:5e:93:8e:c7:5b:fa:b9: 13:ec:58:03:3a:5a:f4:d3:62:d9:f5:cf:53:3c:af:39:d7:de: 14:55:99:01:14:26:3c:0b:f0:f8:e2:44:76:12:42:ac:e2:14: e3:73:26:36:f1:35:7a:2f:77:23:11:5a:96:aa:5b:cc:5f:b2: b6:87:2a:bd:9c:9e:d6:62:74:df:c3:d9:6b:ed:8b:21:f2:ca: 31:bf:f7:8e:55:a5:08:c0:69:2b:d7:f5:83:97:54:f7:05:14: a7:c2:97:dc:46:21:76:5c:57:91:ba:f6:dd:cd:2c:45:f9:1c: 6c:cc:70:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0HpUqvQYP+uGtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZDNhZGRkY2EtZTdmZC00OWE4LTg0NTctNDhmYzliYWNlN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OSE5ncE1FHfMH3KPUj7Xh4BTN8cC5kPGKEp w7ZfZmIx8R10esYNmDojpfzJd3XEw9opUmxAsDQNfn+XUM/DOrVSmiQBJsK4J877 xGrY/V9GFo1z2eEBYf513YkJMwhFQVBt9p/+ZrviW3CQ0HPLJBQSoWiQwsNnc4RA 2A/uPdrIcV97G9EFI07ytse7MlPglfnNIxb0S105t03sJI6PKxk1ur6PS0lEV3JW C+jycVu3yeXSccelkQXK+Q328Raki+a9WyuH0xIVwPcyj9uNTAaibInCgl+90+2n FNqYo2NYxmo5UR2N273QIyab7268xb/A9siNSFaLO2Rdxu0iYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUgrWhsbw0FyZ/CRW45VSpbjwukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvM2U4ODI4ZWQtMDMyMi0z ZGVjLTgxNDUtYWE5NDNjOGYyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Sg7T1lUMJX/kpFd//cOJMJ30DXcb991A26QlenNpkRkqVNUtA3DVE FjgsV3zR7SY5X9MeDe6RIp4L/6nBzx8yUk33GFTDmtZgygh8yZwbTEGg4vJEbyhU EX9zXHe6ykdpcZd3GuxhVtv7AXvn9ksff0sZMNnzKJq8UqPZc6VbUPoEfJUpvSjq XpOOx1v6uRPsWAM6WvTTYtn1z1M8rznX3hRVmQEUJjwL8PjiRHYSQqziFONzJjbx NXovdyMRWpaqW8xfsraHKr2cntZidN/D2WvtiyHyyjG/945VpQjAaSvX9YOXVPcF FKfCl9xGIXZcV5G69t3NLEX5HGzMcAM= -----END CERTIFICATE-----Generated at Wed May 13 15:29:54 2026 by rpki-client