$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa File: 33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa (raw, json) Hash identifier: 8Ol05L9v2I/DSgqAUlh4BFALFUCorlvyFlgGhrZUcIQ= Subject key identifier: FA:05:48:47:B6:FC:D1:D4:AB:BE:F4:3C:54:BC:AE:A2:27:6D:01:B8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AF9514626D9EFD85B3F069A00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 49981 IP address blocks: 96.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:46:26:d9:ef:d8:5b:3f:06:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=971292aa-8600-4570-928d-f5f8b0e6beb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:1f:b0:3a:dd:e8:15:89:4e:bb:ef:38:4e: df:b9:e2:be:88:a5:56:ee:ea:63:34:72:e2:e7:06: 9b:9b:b2:5d:74:f0:24:3d:e2:8d:29:d4:46:6b:1a: a0:64:c7:a9:6d:77:f6:ec:7e:67:ec:11:4f:a6:b6: e8:8a:14:fb:03:13:5b:12:b5:24:7d:82:9a:99:f8: 65:21:e7:e3:98:f3:f2:24:89:92:b1:78:92:eb:e7: 94:b4:a4:9c:b7:c5:f3:8a:c4:8b:f0:e8:42:73:38: 87:01:8c:7e:4e:f8:e3:0b:36:07:1b:c0:01:74:da: 23:7c:f5:41:62:79:c0:a7:25:41:c6:19:34:dc:73: 06:42:15:65:a2:3f:1a:9b:1e:4f:3a:5f:f6:71:de: 61:6b:a7:8f:64:45:46:08:ff:dd:d6:3e:f5:80:5b: 77:e6:18:be:c3:a9:05:2f:fe:c8:3f:16:9d:49:8f: 7b:8c:13:02:9e:18:63:f3:2d:17:cf:fc:3d:ff:ea: b5:16:04:67:80:8c:4e:9b:a3:f8:15:1e:2f:d9:ab: 37:d7:c9:4d:73:44:6f:39:41:ce:e9:f1:3f:a5:8f: 6f:f1:da:64:a6:e4:71:77:a1:9f:ce:d4:62:69:14: cc:39:d4:b9:50:49:61:ad:f7:2b:6f:a0:9f:01:3b: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:48:47:B6:FC:D1:D4:AB:BE:F4:3C:54:BC:AE:A2:27:6D:01:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:90:4f:cc:30:45:9f:70:3f:6f:52:03:56:c8:7c:91:d5:b7: f6:3f:1a:59:80:56:56:41:e9:63:6c:79:eb:5e:1f:05:de:36: 18:71:3f:fa:6b:18:d4:6c:71:1e:47:c0:93:93:d5:d8:15:7f: a4:4b:68:8f:14:01:9d:91:c6:72:a0:ed:4a:51:bb:bb:95:66: ba:c3:38:57:62:2b:bf:bc:f0:62:2b:16:5a:48:9e:02:39:f9: 6d:b3:19:b5:03:70:84:84:68:82:3b:8d:31:2f:ef:88:5a:74: 21:17:78:5a:c6:26:70:b4:e2:85:4d:c6:a8:08:68:f7:72:7d: c4:8e:b7:c2:0c:0e:a8:a3:79:1b:d4:20:ba:3f:90:3b:de:15: ce:1a:07:87:cb:b4:f4:6a:8b:4f:5d:66:85:6c:4e:88:e7:9e: 43:5d:17:d4:06:91:23:ab:72:cf:a2:0b:49:90:83:5d:62:d1: fa:fc:83:5a:ad:38:95:21:14:a7:39:2d:b7:60:fc:8d:55:2a: bf:70:86:af:b9:be:25:c5:88:5f:7d:5f:d8:41:a8:a2:dc:b1: f3:d9:fc:48:32:01:2f:a5:79:8e:de:bf:f9:33:c4:12:51:aa: fa:78:05:c5:43:2a:bd:27:d2:b1:5c:6c:52:8f:7c:7b:f6:03: a7:af:c7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUYm2e/YWz8GmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTcxMjkyYWEtODYwMC00NTcwLTkyOGQtZjVmOGIwZTZiZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm78fsDrd6BWJTrvvOE7fueK+iKVW7upjNHLi 5wabm7JddPAkPeKNKdRGaxqgZMepbXf27H5n7BFPprboihT7AxNbErUkfYKamfhl IefjmPPyJImSsXiS6+eUtKSct8XzisSL8OhCcziHAYx+TvjjCzYHG8ABdNojfPVB YnnApyVBxhk03HMGQhVloj8amx5POl/2cd5ha6ePZEVGCP/d1j71gFt35hi+w6kF L/7IPxadSY97jBMCnhhj8y0Xz/w9/+q1FgRngIxOm6P4FR4v2as318lNc0RvOUHO 6fE/pY9v8dpkpuRxd6GfztRiaRTMOdS5UElhrfcrb6CfATuQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoFSEe2/NHUq770PFS8rqInbQG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzNkYjJkOTUtMTA1NS0z NGJjLWJmNzQtNmI4MGVhOWI2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+QT8wwRZ9wP29SA1bIfJHVt/Y/GlmAVlZB6WNseeteHwXeNhhxP/pr GNRscR5HwJOT1dgVf6RLaI8UAZ2RxnKg7UpRu7uVZrrDOFdiK7+88GIrFlpIngI5 +W2zGbUDcISEaII7jTEv74hadCEXeFrGJnC04oVNxqgIaPdyfcSOt8IMDqijeRvU ILo/kDveFc4aB4fLtPRqi09dZoVsTojnnkNdF9QGkSOrcs+iC0mQg11i0fr8g1qt OJUhFKc5Lbdg/I1VKr9whq+5viXFiF99X9hBqKLcsfPZ/EgyAS+leY7ev/kzxBJR qvp4BcVDKr0n0rFcbFKPfHv2A6evx7A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:48 2025 by rpki-client