$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa File: 2d21722f-f967-3318-a2a3-4ca16697a6c8.roa (raw, json) Hash identifier: hjmyHAPFP9ZhfERXKmqgPAmNdfPAeYvwuP1QYD5zr0g= Subject key identifier: F2:9C:4D:29:58:67:EC:ED:3E:A8:53:30:36:F2:D3:12:5F:42:B8:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D09125427D794A841DB168100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 200005 IP address blocks: 96.7.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:54:27:d7:94:a8:41:db:16:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=542d4446-0308-4a19-8693-55a15ce71772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:0c:88:00:01:ea:6f:d4:d1:b0:94:8a:18: b8:18:8d:34:d0:b6:06:4a:c8:3f:f1:57:32:b2:73: 2c:3d:7e:b4:ea:ba:cf:9f:87:78:df:5f:a2:28:20: 28:3b:d8:3d:84:33:f8:0f:fc:b8:ee:25:98:53:59: 7d:a2:ef:20:c9:8f:87:0d:5d:e6:9d:5b:06:77:dd: 13:02:1f:b1:45:ba:4c:7c:8d:7d:66:2b:d7:bb:3b: a4:9d:b0:5f:a6:ef:e8:71:2a:93:f9:a6:e7:3c:78: 55:1c:2b:fa:93:5a:e0:47:c0:92:18:d1:c4:b9:e9: 77:9f:83:11:b7:d2:47:78:7d:5f:4c:ee:72:fa:c8: 54:a7:40:64:a9:43:a4:75:0d:c4:01:e6:36:8e:5b: e2:44:32:62:1f:e4:66:fd:56:fe:2d:85:01:ba:35: 8b:c2:27:3a:83:13:c5:92:87:da:58:c0:bb:41:ef: ed:d0:39:54:58:1a:aa:cc:b9:eb:5b:0e:f1:1c:a5: d8:95:ae:a9:05:0f:ec:3e:2b:7d:2f:7b:c0:58:09: fe:66:df:a6:08:f5:09:c7:cc:72:6e:ba:36:fd:b3: b1:2c:4e:28:fa:6c:35:bd:9f:6c:04:24:6e:4b:13: 3c:4a:3b:2f:e8:30:3a:bf:51:3a:d7:62:42:40:a9: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9C:4D:29:58:67:EC:ED:3E:A8:53:30:36:F2:D3:12:5F:42:B8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d21722f-f967-3318-a2a3-4ca16697a6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:40:9e:c0:88:ae:cf:29:0c:33:90:b0:6c:95:51:b6:81:bd: 3a:f4:a0:9e:c7:98:7a:31:72:d5:49:bc:00:6b:14:c0:46:2f: 5b:10:12:3c:c5:17:4a:0c:f3:df:84:fc:93:5d:ef:9b:f1:48: 2d:02:95:26:fe:7c:d8:78:7e:a4:0c:da:8e:dd:a6:70:30:4c: 1c:71:3d:26:81:39:f8:7a:03:f1:1a:2b:f2:55:30:7d:2c:56: cf:3a:10:6d:50:fe:cc:32:23:74:d8:a7:dc:5e:ea:3a:e3:90: f8:24:97:25:f9:fa:53:24:d2:16:5b:b0:5a:6d:8b:1f:6e:c4: 08:5c:dd:d0:27:d7:bb:f4:8f:a2:aa:f7:f6:44:65:42:60:e8: 81:05:39:4e:25:a8:22:25:17:b4:7c:c4:64:ac:91:51:73:22: 34:a2:8b:47:d9:80:a2:e2:17:d5:a1:75:c4:f9:25:ce:90:ea: 48:2a:78:e0:8a:1d:b8:00:42:d1:6a:6f:5c:2b:c8:52:d6:99: 81:79:a0:5d:82:45:75:0b:b8:95:34:45:b2:6a:8e:19:2b:4c: c8:6b:af:41:bc:46:6e:c8:81:73:b3:00:34:55:43:d0:67:56: 21:8c:2f:fc:0e:81:37:e9:7f:aa:7f:55:29:11:8e:56:51:0d: ed:0c:43:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElQn15SoQdsWgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NTQyZDQ0NDYtMDMwOC00YTE5LTg2OTMtNTVhMTVjZTcxNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAQMiAAB6m/U0bCUihi4GI000LYGSsg/8Vcy snMsPX606rrPn4d431+iKCAoO9g9hDP4D/y47iWYU1l9ou8gyY+HDV3mnVsGd90T Ah+xRbpMfI19ZivXuzuknbBfpu/ocSqT+abnPHhVHCv6k1rgR8CSGNHEuel3n4MR t9JHeH1fTO5y+shUp0BkqUOkdQ3EAeY2jlviRDJiH+Rm/Vb+LYUBujWLwic6gxPF kofaWMC7Qe/t0DlUWBqqzLnrWw7xHKXYla6pBQ/sPit9L3vAWAn+Zt+mCPUJx8xy bro2/bOxLE4o+mw1vZ9sBCRuSxM8Sjsv6DA6v1E612JCQKm1cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKcTSlYZ+ztPqhTMDby0xJfQrjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQyMTcyMmYtZjk2Ny0z MzE4LWEyYTMtNGNhMTY2OTdhNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElAnsCIrs8pDDOQsGyVUbaBvTr0oJ7HmHoxctVJvABrFMBGL1sQEjzF F0oM89+E/JNd75vxSC0ClSb+fNh4fqQM2o7dpnAwTBxxPSaBOfh6A/EaK/JVMH0s Vs86EG1Q/swyI3TYp9xe6jrjkPgklyX5+lMk0hZbsFptix9uxAhc3dAn17v0j6Kq 9/ZEZUJg6IEFOU4lqCIlF7R8xGSskVFzIjSii0fZgKLiF9WhdcT5Jc6Q6kgqeOCK HbgAQtFqb1wryFLWmYF5oF2CRXULuJU0RbJqjhkrTMhrr0G8Rm7IgXOzADRVQ9Bn ViGML/wOgTfpf6p/VSkRjlZRDe0MQ9A= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:19 2026 by rpki-client