$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa File: 12b40f97-543d-3383-8955-a199391a3d00.roa (raw, json) Hash identifier: 86zgYIMFhy361PtmX7WilkZJUJnYVRY+562mpaetCkA= Subject key identifier: 26:51:B4:49:D5:BC:7A:53:AE:48:1C:54:66:1D:D0:A0:D0:0B:96:68 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B8917830F836CE24E7A6EC000 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 979 IP address blocks: 96.43.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:83:0f:83:6c:e2:4e:7a:6e:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=8b9b4152-a282-4e08-8a27-038a08438dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:72:eb:d7:e2:bd:f8:5a:c6:b3:f1:c4:f0: 1a:c5:36:4f:7e:f6:67:12:3c:68:ad:e1:98:e7:83: 52:8c:7b:d3:a2:0e:13:fd:61:d7:9d:de:e0:51:c0: 53:c4:33:84:e1:ad:b2:ea:1b:26:4d:c0:ca:11:3f: 24:3b:36:cc:80:1f:e5:29:44:88:e3:a6:ad:f5:a7: 8d:86:a3:65:9a:56:b7:4e:10:35:80:c2:8b:cc:c5: c3:b6:da:6b:8a:54:82:1e:2d:9d:ab:f1:ff:75:2d: b5:53:a9:7d:fc:63:35:9c:66:7f:19:46:f7:4b:e1: f4:b0:3b:ee:1b:83:f6:66:77:cb:2d:ea:29:4f:18: e2:04:a3:64:c0:79:7a:ad:0c:cb:43:a8:f9:a3:c6: e8:53:b2:f7:f6:da:7a:25:93:67:15:cf:a8:17:d3: 41:26:f5:22:38:ec:c5:2a:67:de:25:6e:32:42:c9: 54:16:a8:17:2a:ef:b6:e3:4c:89:dd:2e:26:b6:7d: 8c:18:f3:42:cd:f5:77:4a:41:d3:28:5a:ff:98:c2: 11:c9:20:33:a9:ff:76:97:d0:6e:b7:44:90:e7:e2: 20:6b:45:c9:a7:4a:db:c1:a3:db:0d:9c:2f:78:ce: 41:46:d0:31:e2:83:d4:1f:c3:41:17:9c:8f:35:f5: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:B4:49:D5:BC:7A:53:AE:48:1C:54:66:1D:D0:A0:D0:0B:96:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a0:92:6d:12:8d:04:bf:97:3e:47:34:39:f5:d4:38:34:9c: c6:52:35:42:67:3e:93:78:7a:f9:37:0d:12:0b:ab:fd:c6:2c: 21:9c:b0:7b:a3:51:48:1e:53:1c:5d:80:dc:37:78:52:39:e9: 9b:18:f3:02:96:88:f3:c9:d8:a2:7e:89:5a:aa:58:b7:88:be: 50:9c:3c:00:1d:3f:5d:41:c9:4d:0b:29:00:80:64:e4:7c:ff: 8d:71:eb:c5:0a:eb:aa:14:95:17:79:95:35:78:ac:7b:85:b2: 5b:e5:07:91:14:05:3b:1c:06:ef:76:48:36:d8:3e:18:95:4c: ae:28:31:8e:ff:f1:9b:fc:70:7a:37:3c:d6:c0:d0:c7:13:ab: 92:0b:8d:e6:f6:cd:43:93:bf:77:8f:e3:19:f0:9e:6e:88:b9: 04:f4:48:77:07:b7:59:c1:3c:40:c4:05:70:5d:a2:6e:ce:4f: ab:ee:6b:8a:43:51:c8:ff:df:8a:26:ba:53:22:e9:63:d0:78: e7:24:17:59:aa:0a:e0:18:ae:49:1e:c7:54:22:37:c6:35:ae: f1:64:e3:3a:f3:72:a9:64:75:b8:b7:d8:9f:10:91:df:5b:6f: e2:35:c5:cc:1c:3a:a3:b5:ad:ed:ab:3f:50:84:28:78:20:9a: da:bc:fe:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4MPg2ziTnpuwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk OGI5YjQxNTItYTI4Mi00ZTA4LThhMjctMDM4YTA4NDM4ZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTpy69fivfhaxrPxxPAaxTZPfvZnEjxoreGY 54NSjHvTog4T/WHXnd7gUcBTxDOE4a2y6hsmTcDKET8kOzbMgB/lKUSI46at9aeN hqNlmla3ThA1gMKLzMXDttprilSCHi2dq/H/dS21U6l9/GM1nGZ/GUb3S+H0sDvu G4P2ZnfLLeopTxjiBKNkwHl6rQzLQ6j5o8boU7L39tp6JZNnFc+oF9NBJvUiOOzF KmfeJW4yQslUFqgXKu+240yJ3S4mtn2MGPNCzfV3SkHTKFr/mMIRySAzqf92l9Bu t0SQ5+Iga0XJp0rbwaPbDZwveM5BRtAx4oPUH8NBF5yPNfWgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZRtEnVvHpTrkgcVGYd0KDQC5ZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTJiNDBmOTctNTQzZC0z MzgzLTg5NTUtYTE5OTM5MWEzZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAigkm0SjQS/lz5HNDn11Dg0nMZSNUJnPpN4evk3DRILq/3GLCGcsHuj UUgeUxxdgNw3eFI56ZsY8wKWiPPJ2KJ+iVqqWLeIvlCcPAAdP11ByU0LKQCAZOR8 /41x68UK66oUlRd5lTV4rHuFslvlB5EUBTscBu92SDbYPhiVTK4oMY7/8Zv8cHo3 PNbA0McTq5ILjeb2zUOTv3eP4xnwnm6IuQT0SHcHt1nBPEDEBXBdom7OT6vua4pD Ucj/34omulMi6WPQeOckF1mqCuAYrkkex1QiN8Y1rvFk4zrzcqlkdbi32J8Qkd9b b+I1xcwcOqO1re2rP1CEKHggmtq8/ho= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:30 2025 by rpki-client