$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa File: 8f4961bd-1c13-3519-8827-c63d49ab0683.roa (raw, json) Hash identifier: Vk2DS4xw5xzs8GSM7RdwAmyAAYajLTuBC1/qvgqFs2I= Subject key identifier: 5A:8E:24:73:0A:B6:3D:F0:A8:D8:EF:61:75:0F:DC:10:80:82:87:0A Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584D4A8F8CB703877196E95FE4D0 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 20454 IP address blocks: 96.47.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8c:b7:03:87:71:96:e9:5f:e4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=fdf35207-3626-4aaf-bd99-e5cf04b5c38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:84:5b:67:97:3a:b1:c3:0c:3b:4d:73:63: 43:cd:65:74:0c:72:c1:2d:a1:d6:ca:d4:62:d9:0d: 41:73:4d:38:04:da:f8:3b:9d:95:bb:63:c4:9c:76: 98:d3:ba:e7:4d:f3:5e:a2:3e:cc:14:3d:91:75:f5: b4:9a:69:82:f6:26:5b:ce:eb:54:2c:ee:3c:ac:bf: d1:e9:3e:6b:d0:6f:57:a7:be:c0:0d:a5:a0:a1:fa: 9d:c0:e8:53:89:ef:96:03:d8:c9:85:93:3f:44:c0: ea:44:d8:85:fb:69:61:b6:1d:05:51:4e:f8:2a:60: 1a:11:0f:55:7d:9b:fc:d5:aa:1d:0d:b7:77:5c:f1: d5:65:24:73:26:80:bb:10:97:2c:48:61:11:ec:88: 79:eb:a3:7b:51:e5:58:36:a2:1e:30:ec:45:f0:5f: 0d:95:96:64:ab:93:4d:04:3c:98:aa:69:93:67:a0: 5f:de:97:5e:bc:fc:ab:0e:ac:6e:c5:13:c1:9f:bd: 3f:c3:d8:56:4f:5f:25:a3:36:66:c5:36:ab:5d:59: 65:fd:40:0d:bc:7e:ce:8b:07:5f:19:85:bd:9d:69: 4e:10:bd:e3:3b:1a:e0:05:18:db:13:55:18:76:40: 2c:c6:bc:5e:ea:97:77:ae:b9:2d:c4:3b:01:95:c7: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8E:24:73:0A:B6:3D:F0:A8:D8:EF:61:75:0F:DC:10:80:82:87:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/8f4961bd-1c13-3519-8827-c63d49ab0683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fe:59:eb:48:d7:72:30:f2:68:4e:12:5d:4f:9d:17:88:80: a8:a2:c4:f3:f6:ca:4a:99:c4:34:e1:0e:43:da:e7:b2:26:18: ae:c0:91:7a:df:be:81:db:09:43:68:23:e5:e9:cb:52:15:4c: 65:0c:0d:07:8d:77:d9:ed:ff:27:d3:95:8d:ba:d8:1a:dd:36: 9f:44:51:f7:cc:52:93:e6:66:77:a5:6f:d4:db:91:eb:b2:40: e8:c7:0a:e1:da:bb:24:d1:84:a0:b9:2f:25:db:08:3b:65:99: 99:02:75:66:97:29:eb:f6:4b:30:b5:5b:82:0a:6e:8a:5d:f7: 74:16:18:bb:86:3b:9f:85:a8:6c:b2:0c:8d:17:f6:38:a0:48: 72:89:25:5c:b3:41:45:b8:38:99:99:38:40:bb:ba:04:d9:bc: 30:79:3c:86:09:06:70:2a:5c:db:e3:1b:be:17:c6:ba:c1:b4: 64:ea:30:34:49:52:f5:29:fa:13:90:eb:10:77:d7:50:39:25: 5d:79:7f:bc:d8:32:e5:85:4c:73:c3:6f:17:48:58:1f:02:0c: 11:75:30:0e:2a:89:85:39:cb:95:3d:87:e2:6b:87:7a:97:47: 52:98:af:a1:ee:7e:f8:3a:79:59:48:0e:30:76:16:4f:a0:67: 22:f3:02:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4y3A4dxlulf5NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZmRmMzUyMDctMzYyNi00YWFmLWJkOTktZTVjZjA0YjVjMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHSEW2eXOrHDDDtNc2NDzWV0DHLBLaHWytRi 2Q1Bc004BNr4O52Vu2PEnHaY07rnTfNeoj7MFD2RdfW0mmmC9iZbzutULO48rL/R 6T5r0G9Xp77ADaWgofqdwOhTie+WA9jJhZM/RMDqRNiF+2lhth0FUU74KmAaEQ9V fZv81aodDbd3XPHVZSRzJoC7EJcsSGER7Ih566N7UeVYNqIeMOxF8F8NlZZkq5NN BDyYqmmTZ6Bf3pdevPyrDqxuxRPBn70/w9hWT18lozZmxTarXVll/UANvH7Oiwdf GYW9nWlOEL3jOxrgBRjbE1UYdkAsxrxe6pd3rrktxDsBlcft9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqOJHMKtj3wqNjvYXUP3BCAgocKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvOGY0OTYxYmQtMWMxMy0z NTE5LTg4MjctYzYzZDQ5YWIwNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/+WetI13Iw8mhOEl1PnReIgKiixPP2ykqZxDThDkPa57ImGK7AkXrf voHbCUNoI+Xpy1IVTGUMDQeNd9nt/yfTlY262BrdNp9EUffMUpPmZnelb9Tbkeuy QOjHCuHauyTRhKC5LyXbCDtlmZkCdWaXKev2SzC1W4IKbopd93QWGLuGO5+FqGyy DI0X9jigSHKJJVyzQUW4OJmZOEC7ugTZvDB5PIYJBnAqXNvjG74XxrrBtGTqMDRJ UvUp+hOQ6xB311A5JV15f7zYMuWFTHPDbxdIWB8CDBF1MA4qiYU5y5U9h+Jrh3qX R1KYr6Hufvg6eVlIDjB2Fk+gZyLzAmE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:43 2026 by rpki-client