$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa File: 2dd8db05-37da-3eca-8ef7-817dce970a0d.roa (raw, json) Hash identifier: GnXosLq5DbI2IOQsu1rXbrvDMKl4Iq4k1T/lfUa3FDI= Subject key identifier: C3:5B:DC:A6:F9:AF:CA:F9:A2:88:6A:24:2E:39:84:8E:0E:08:99:3C Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584D4A8FBC14C2CA7E9126BB6C80 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 20454 IP address blocks: 96.47.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:bc:14:c2:ca:7e:91:26:bb:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=559ba32d-2f5b-4614-8e6f-6ac01299a3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:e6:0c:d7:88:4e:a2:d0:06:77:f0:68:ce: 90:cd:a6:ea:14:06:1e:aa:ff:50:ef:4a:f2:e0:fc: 3f:f8:f1:16:3c:59:ca:51:99:92:43:38:da:62:df: cb:38:5d:d2:af:30:98:50:9f:a8:3a:68:25:ee:a5: ad:2c:e0:72:2d:ed:b3:c3:1c:8a:93:67:d2:64:17: 09:15:00:77:1a:91:52:c4:d3:29:9d:89:ff:f7:47: 9a:8b:05:fa:b0:e3:16:5a:e3:ea:63:ac:c1:5d:71: 0d:2c:11:46:d9:e7:7f:ab:c5:24:b1:3c:fd:80:8e: c0:98:95:de:f0:b6:e4:ec:39:20:ed:82:84:9e:91: f8:db:9e:8e:fb:c3:67:54:42:9f:23:ab:0a:19:fc: 1b:27:ed:27:81:fe:fc:c2:d3:73:21:82:a1:ea:7b: a4:ce:64:78:b8:df:ea:09:1b:8c:91:31:01:a1:03: 98:c6:80:51:1f:fe:bf:07:b3:05:64:0a:29:15:c0: f5:fa:c3:84:82:83:44:42:5c:3f:5e:7a:a4:ac:11: 17:06:88:be:03:87:09:65:e1:48:cb:8e:4f:18:d8: ee:4a:9a:49:e9:8a:79:45:b3:df:6a:ad:24:45:39: ce:42:20:af:c8:4c:77:6e:48:66:cc:2c:41:af:0f: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:DC:A6:F9:AF:CA:F9:A2:88:6A:24:2E:39:84:8E:0E:08:99:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/2dd8db05-37da-3eca-8ef7-817dce970a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a8:44:80:aa:3b:cf:cf:a6:35:88:5f:fa:4e:0b:62:06:44: 6c:a2:e7:c0:11:31:84:1b:a6:5c:57:ea:0f:37:00:b5:e4:22: b3:52:60:19:13:d1:25:0f:32:d2:12:e4:6d:69:f7:f7:f2:77: f1:f5:63:ce:61:a2:c2:d2:ac:17:e2:2d:4e:15:6a:0c:79:72: 7d:39:b6:7c:62:f7:de:63:08:3b:da:8a:74:bb:11:4e:b0:c5: df:16:c1:bf:32:95:e3:dc:8b:48:69:1a:f4:0c:93:df:51:38: f2:84:3f:fd:71:b6:82:87:46:42:41:2d:56:59:ad:0f:c8:bd: e2:ec:ea:ee:e0:7c:5c:2a:af:ea:ef:06:03:72:3e:cf:43:60: 8e:db:bd:3d:72:4b:ab:0b:57:25:a6:4d:cb:1d:e6:1d:ee:58: c0:cb:37:28:cf:7f:fe:fe:8d:fb:6b:2c:c7:e6:22:48:0e:88: 34:aa:28:6b:99:ad:ee:b4:62:9f:f9:16:f4:98:da:85:9b:a9: 79:ce:ab:03:c7:34:ed:51:fc:cd:db:db:ac:6f:86:80:7a:a7: e5:31:80:2e:66:fa:de:23:7a:58:b6:e9:ed:94:01:f9:b2:16: 83:69:70:23:0c:b6:e2:78:f2:6d:f1:19:d2:53:c2:8d:8d:3d: 03:b5:1a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7wUwsp+kSa7bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NTU5YmEzMmQtMmY1Yi00NjE0LThlNmYtNmFjMDEyOTlhM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukLmDNeITqLQBnfwaM6QzabqFAYeqv9Q70ry 4Pw/+PEWPFnKUZmSQzjaYt/LOF3SrzCYUJ+oOmgl7qWtLOByLe2zwxyKk2fSZBcJ FQB3GpFSxNMpnYn/90eaiwX6sOMWWuPqY6zBXXENLBFG2ed/q8UksTz9gI7AmJXe 8Lbk7Dkg7YKEnpH4256O+8NnVEKfI6sKGfwbJ+0ngf78wtNzIYKh6nukzmR4uN/q CRuMkTEBoQOYxoBRH/6/B7MFZAopFcD1+sOEgoNEQlw/XnqkrBEXBoi+A4cJZeFI y45PGNjuSppJ6Yp5RbPfaq0kRTnOQiCvyEx3bkhmzCxBrw9HlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNb3Kb5r8r5oohqJC45hI4OCJk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMmRkOGRiMDUtMzdkYS0z ZWNhLThlZjctODE3ZGNlOTcwYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOoRICqO8/PpjWIX/pOC2IGRGyi58ARMYQbplxX6g83ALXkIrNSYBkT 0SUPMtIS5G1p9/fyd/H1Y85hosLSrBfiLU4Vagx5cn05tnxi995jCDvainS7EU6w xd8Wwb8ylePci0hpGvQMk99ROPKEP/1xtoKHRkJBLVZZrQ/IveLs6u7gfFwqr+rv BgNyPs9DYI7bvT1yS6sLVyWmTcsd5h3uWMDLNyjPf/7+jftrLMfmIkgOiDSqKGuZ re60Yp/5FvSY2oWbqXnOqwPHNO1R/M3b26xvhoB6p+UxgC5m+t4jeli26e2UAfmy FoNpcCMMtuJ48m3xGdJTwo2NPQO1Gj4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:49 2026 by rpki-client