$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa File: 6ae27afd-279e-378f-819f-a9dd3c95365f.roa (raw, json) Hash identifier: FiE/aN8PrGVUMJh/A0d6wRG/uM34tCSLNet3HTtCRmE= Subject key identifier: 0A:4A:94:4F:1B:1C:65:9E:39:BD:8C:1A:F2:95:17:0F:AA:5A:14:26 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584D39CF9ED698926EFCCFC28B80 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 20454 IP address blocks: 96.47.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9e:d6:98:92:6e:fc:cf:c2:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=b27ff96a-d1ff-4ece-bdf7-65db6d6bd548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:ff:59:c8:d5:69:1c:fc:31:1c:78:7c:5d: 09:48:70:69:aa:5f:43:c8:ed:91:7e:20:ba:a7:4a: 15:99:76:b4:3a:91:74:04:e6:74:a9:79:d8:4c:60: 59:0e:da:b9:0e:70:52:ba:7a:07:8c:75:b9:99:b2: d5:7d:a6:b3:d4:a3:4b:1e:41:74:55:95:7f:9f:89: 30:7b:3a:eb:03:2a:43:8f:06:9e:96:b3:38:6a:1c: c5:d9:36:6d:d4:17:74:c6:a7:63:7e:0e:a6:b6:21: 4f:dd:79:f7:b8:74:27:6e:3e:be:66:a2:3d:bf:ce: e0:c1:e9:dc:11:23:a1:de:7c:fe:6b:10:e7:e8:a5: 03:d4:86:94:a3:2c:c4:24:52:8f:1c:72:d8:c2:29: 69:c4:da:f0:7e:47:8e:64:fd:46:25:7a:19:b7:5e: f3:18:ec:a4:a0:bd:ad:bb:a3:a8:c8:b1:e0:3f:5c: 93:6a:fe:cc:2e:cd:33:1d:e8:25:f6:f2:88:75:92: 49:9c:3c:e3:c0:ad:12:22:27:af:6a:b4:7e:b8:94: 87:9f:79:c2:ff:bc:0b:20:8f:d1:e4:9c:f0:95:e2: 76:ad:8f:66:6a:25:1b:18:ca:4e:77:ca:46:a7:a5: 70:84:74:38:e0:63:48:4e:90:2c:c9:bc:8e:6e:86: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:94:4F:1B:1C:65:9E:39:BD:8C:1A:F2:95:17:0F:AA:5A:14:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6ae27afd-279e-378f-819f-a9dd3c95365f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3c:d2:00:83:98:d9:2e:d2:95:13:ad:2e:1e:22:83:ca:dd: 87:93:1c:46:80:af:f4:cd:6f:02:e7:1f:a9:1d:15:bb:3f:05: 35:87:71:a7:c1:f6:70:ad:fa:6e:c0:8e:62:7c:99:17:f8:d0: f3:0f:bf:0c:e4:38:66:e5:a8:56:c4:19:6f:0b:34:36:14:59: d8:d6:cd:0f:5f:7c:a6:da:40:b8:58:15:c5:3c:5c:ad:b8:6c: f4:8f:6a:18:b6:99:b1:95:7d:0d:f9:53:5b:6d:39:00:16:0c: 49:39:07:84:55:f1:5a:f1:4e:7d:19:65:42:3b:57:a1:76:96: be:42:bc:6c:7c:12:e1:34:25:d8:be:20:a6:8b:b7:76:ed:84: 46:8c:dc:2b:85:e2:4e:1c:e5:08:3f:d6:92:3f:aa:47:9d:4a: 2a:61:bd:27:a1:d7:ad:a5:37:63:95:34:5c:65:b3:23:14:d7: 14:01:d6:75:fe:78:f6:ef:e0:f6:d4:a1:b8:5e:cc:aa:ba:05: 7b:e7:41:a6:09:41:1d:74:9c:d4:ee:77:ae:04:b9:51:db:59: 95:cb:20:d2:60:7b:68:6a:7d:99:ba:21:08:0a:e7:9f:1e:83: 05:a8:e0:fa:68:bd:fa:33:97:ab:0d:1b:f2:b4:2d:c2:35:0f: 3c:61:d5:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z57WmJJu/M/Ci4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YjI3ZmY5NmEtZDFmZi00ZWNlLWJkZjctNjVkYjZkNmJkNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sT/WcjVaRz8MRx4fF0JSHBpql9DyO2RfiC6 p0oVmXa0OpF0BOZ0qXnYTGBZDtq5DnBSunoHjHW5mbLVfaaz1KNLHkF0VZV/n4kw ezrrAypDjwaelrM4ahzF2TZt1Bd0xqdjfg6mtiFP3Xn3uHQnbj6+ZqI9v87gwenc ESOh3nz+axDn6KUD1IaUoyzEJFKPHHLYwilpxNrwfkeOZP1GJXoZt17zGOykoL2t u6OoyLHgP1yTav7MLs0zHegl9vKIdZJJnDzjwK0SIievarR+uJSHn3nC/7wLII/R 5JzwleJ2rY9maiUbGMpOd8pGp6VwhHQ44GNITpAsybyObobklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApKlE8bHGWeOb2MGvKVFw+qWhQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNmFlMjdhZmQtMjc5ZS0z NzhmLTgxOWYtYTlkZDNjOTUzNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC480gCDmNku0pUTrS4eIoPK3YeTHEaAr/TNbwLnH6kdFbs/BTWHcafB 9nCt+m7AjmJ8mRf40PMPvwzkOGblqFbEGW8LNDYUWdjWzQ9ffKbaQLhYFcU8XK24 bPSPahi2mbGVfQ35U1ttOQAWDEk5B4RV8VrxTn0ZZUI7V6F2lr5CvGx8EuE0Jdi+ IKaLt3bthEaM3CuF4k4c5Qg/1pI/qkedSiphvSeh162lN2OVNFxlsyMU1xQB1nX+ ePbv4PbUobhezKq6BXvnQaYJQR10nNTud64EuVHbWZXLINJge2hqfZm6IQgK558e gwWo4Ppovfozl6sNG/K0LcI1Dzxh1UM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:35 2026 by rpki-client