$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa File: 3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa (raw, json) Hash identifier: oQ6GIKNyli4edxxPt0bzYuc0TieFF0dKLIlGwjZKnT8= Subject key identifier: 95:42:9A:71:5D:B8:7D:83:1D:8B:AD:7D:9F:25:38:7F:65:FB:CA:59 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F2ABD1663ED68EB62EE986DB0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 29802 IP address blocks: 96.43.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:16:63:ed:68:eb:62:ee:98:6d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=68ec6036-4b6e-49f6-9183-c2de442c53b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:a2:fb:15:15:09:f6:5f:e0:94:19:75:3f: 75:22:93:5d:0b:1b:79:38:13:28:91:e7:e9:fb:d8: df:02:5a:97:5d:2b:9b:2f:03:05:82:d3:e7:8c:72: da:20:14:f8:21:01:ab:9e:67:5c:a9:7d:bc:34:0a: 33:b6:1d:b0:a8:89:70:9d:df:21:02:78:11:97:3f: 07:14:c1:37:40:e6:7c:9d:f9:32:b1:6b:e8:db:50: 39:22:33:3f:c8:05:ce:4a:31:a2:04:92:4c:3e:f8: 32:61:dc:6a:ad:79:08:80:d9:d0:2e:0c:68:fc:5c: 0f:67:fa:3e:dc:19:64:33:65:0f:cc:19:32:6c:dc: 32:62:06:9c:82:6a:65:80:18:a9:e7:6b:59:85:32: c7:bd:3d:88:44:8f:e1:ca:8b:38:ee:ed:3a:75:57: 04:52:a3:67:98:bd:9c:1a:a2:92:45:11:19:ca:ad: 94:32:40:a8:e4:c2:fe:a3:93:54:86:57:4f:92:34: 65:5d:3c:f3:de:d1:b3:28:fd:91:75:91:d2:7b:d9: 36:29:85:e5:ff:b5:5a:a8:5e:3b:a2:d6:4d:08:b6: 42:4e:4d:ef:72:2b:c3:f2:c6:12:4f:f9:38:75:43: 5b:eb:af:71:af:35:61:c3:7d:3c:da:d8:81:df:75: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:42:9A:71:5D:B8:7D:83:1D:8B:AD:7D:9F:25:38:7F:65:FB:CA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:74:3b:ab:ce:41:18:68:a8:b0:d3:dd:ee:9d:14:c9:7d:72: d2:3d:25:33:42:d2:a6:89:a9:6e:4c:80:31:36:1c:96:16:71: bc:9d:04:a7:e0:8e:de:25:b0:e9:ba:06:4a:e7:1d:a3:3a:4a: 68:8f:0a:d8:af:26:46:ba:4b:1e:99:bb:42:27:14:27:db:28: 33:21:23:df:87:48:6f:e9:54:53:b1:03:0a:23:04:ed:87:20: 47:3e:af:47:ce:46:94:13:ae:60:99:9d:78:6c:b2:b7:54:6c: 6f:c0:a6:ba:85:7a:44:13:63:d6:4d:0a:33:13:10:7f:c3:e4: 96:bb:bb:8f:e6:fd:44:71:6e:fd:19:ea:a5:de:e0:21:71:ef: 69:e2:4c:d4:6f:b3:1c:4c:2b:04:3b:39:35:c4:19:93:59:f7: 9a:a6:e2:82:75:0b:18:12:cb:81:e6:28:e3:c5:af:84:a5:da: f1:d5:1f:65:a4:5a:15:66:82:8a:3d:54:90:c7:82:0a:64:92: 05:e2:20:18:cf:83:77:90:88:8a:77:b0:4f:d0:45:7f:15:38: 91:2c:a9:79:56:7c:d8:cd:b8:89:a5:0d:0b:b6:15:5f:12:bd: 0e:29:fb:b8:5c:e7:18:18:24:02:1c:3d:32:18:45:6d:0d:1f: 9b:75:90:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRZj7WjrYu6YbbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NjhlYzYwMzYtNGI2ZS00OWY2LTkxODMtYzJkZTQ0MmM1M2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHGi+xUVCfZf4JQZdT91IpNdCxt5OBMokefp +9jfAlqXXSubLwMFgtPnjHLaIBT4IQGrnmdcqX28NAozth2wqIlwnd8hAngRlz8H FME3QOZ8nfkysWvo21A5IjM/yAXOSjGiBJJMPvgyYdxqrXkIgNnQLgxo/FwPZ/o+ 3BlkM2UPzBkybNwyYgacgmplgBip52tZhTLHvT2IRI/hyos47u06dVcEUqNnmL2c GqKSRREZyq2UMkCo5ML+o5NUhldPkjRlXTzz3tGzKP2RdZHSe9k2KYXl/7VaqF47 otZNCLZCTk3vcivD8sYST/k4dUNb669xrzVhw3082tiB33WqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVCmnFduH2DHYutfZ8lOH9l+8pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2UzMjljOTMtMzZiMS0z NThkLTgwZDgtNmEzZGNiZDg0NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV0O6vOQRhoqLDT3e6dFMl9ctI9JTNC0qaJqW5MgDE2HJYWcbydBKfg jt4lsOm6BkrnHaM6SmiPCtivJka6Sx6Zu0InFCfbKDMhI9+HSG/pVFOxAwojBO2H IEc+r0fORpQTrmCZnXhssrdUbG/AprqFekQTY9ZNCjMTEH/D5Ja7u4/m/URxbv0Z 6qXe4CFx72niTNRvsxxMKwQ7OTXEGZNZ95qm4oJ1CxgSy4HmKOPFr4Sl2vHVH2Wk WhVmgoo9VJDHggpkkgXiIBjPg3eQiIp3sE/QRX8VOJEsqXlWfNjNuImlDQu2FV8S vQ4p+7hc5xgYJAIcPTIYRW0NH5t1kDo= -----END CERTIFICATE-----Generated at Sun Sep 20 17:34:39 2026 by rpki-client