$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/627e8c0d-a3c9-356e-9115-0d91eb7f91f8.roa File: 627e8c0d-a3c9-356e-9115-0d91eb7f91f8.roa (raw, json) Hash identifier: 0JtMgcaYxNEDPuyw2F8odVaJ1jN4OkmXL7uEOmmSH2A= Subject key identifier: 89:02:31:62:87:04:C2:EF:5C:DA:BE:6A:25:DF:30:6E:C8:2E:9A:B7 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BB2EA2BF3978F9FC90AC41780 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/627e8c0d-a3c9-356e-9115-0d91eb7f91f8.roa Signing time: Fri 31 Oct 2025 00:33:25 +0000 ROA not before: Fri 31 Oct 2025 00:33:25 +0000 ROA not after: Thu 29 Jan 2026 01:33:25 +0000 asID: 834 IP address blocks: 96.43.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:ea:2b:f3:97:8f:9f:c9:0a:c4:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 31 00:33:25 2025 GMT Not After : Jan 29 01:33:25 2026 GMT Subject: CN=c4ca3330-c6a0-4afd-81ab-b6e87e573761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:f0:47:39:e6:2c:28:f2:ce:89:c4:0d:24: e8:c1:fd:62:14:66:b6:fe:51:b6:76:e4:f3:ca:fb: 24:07:a5:d5:11:79:b3:55:c0:11:c3:b7:52:66:a0: 07:6c:a0:51:0d:e0:a6:bd:cf:6d:08:af:04:95:14: 07:92:93:10:36:b5:c7:d6:5d:25:0f:8e:d3:99:8c: ef:13:d7:54:48:e4:0e:25:93:6e:82:29:ac:d4:9d: d5:23:31:71:ef:8a:55:ef:14:24:e0:5a:03:af:13: 5a:c5:5a:84:4f:87:bf:f8:7e:25:b7:c6:26:f1:16: f4:9f:72:27:2a:31:c3:37:3b:47:79:6c:b2:bc:84: 9e:b3:4b:c3:71:58:47:7b:23:56:b9:73:b1:8b:af: fc:84:3d:cf:79:c7:6a:6a:86:af:a2:c8:9e:1e:a7: 03:12:dc:82:8e:3a:f1:c3:06:b8:45:b7:e9:8c:29: 44:b6:9d:b3:c9:6e:88:f4:47:87:48:6c:dc:33:fd: 9b:67:10:a8:11:8c:04:a8:9c:53:ae:b8:ff:d3:a4: 21:a1:af:ed:6e:bd:00:87:ae:55:ab:27:45:18:b6: 75:8f:2c:61:c3:b6:3f:62:ed:5b:6b:36:48:26:65: 2a:f2:c9:26:a4:6f:ad:40:9a:55:8e:a8:f9:9a:3e: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:02:31:62:87:04:C2:EF:5C:DA:BE:6A:25:DF:30:6E:C8:2E:9A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/627e8c0d-a3c9-356e-9115-0d91eb7f91f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:bd:2b:71:21:13:fc:49:86:2b:d3:ec:50:f7:a7:11:a4:1c: 5c:20:d1:d4:84:e4:e9:91:2b:0a:8d:44:5e:fd:1c:4c:be:5c: c2:af:84:7b:bd:44:40:b3:fe:48:cb:dc:4c:c8:58:54:b6:5d: 02:4a:34:43:75:06:c9:49:0d:ef:1e:c8:75:c2:64:bc:81:91: 27:96:ab:13:fe:6a:30:7c:0c:fe:1b:c5:d3:73:6a:aa:72:e6: b5:df:41:8e:62:74:d8:c1:ac:8c:c6:86:c3:e5:32:1e:4a:51: a5:09:f2:e2:50:42:56:42:c8:c0:82:64:cd:eb:a0:36:58:d7: d2:64:84:71:12:0e:87:cf:5f:ce:c5:c8:24:db:6c:40:24:86: 8a:57:3c:d1:18:cd:dc:89:09:67:bd:41:ab:91:c8:86:68:fe: e4:fe:fc:8b:85:27:80:53:3d:ed:5f:a9:30:7c:16:e1:1a:37: 71:d8:11:cb:68:62:c8:19:85:8a:9e:ca:65:1c:40:6c:78:20: 54:16:dc:bd:02:d1:8b:62:60:ad:9a:5c:f3:0f:12:22:c5:e8: 68:f6:e3:f6:cc:8c:48:b8:37:c4:c6:81:9d:b0:8f:33:6b:be: 8f:2f:ed:20:82:24:48:82:47:64:59:87:e3:61:9d:c6:34:64: ac:77:12:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy6ivzl4+fyQrEF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAzMTAwMzMyNVoXDTI2MDEyOTAxMzMyNVowLzEtMCsGA1UEAxMk YzRjYTMzMzAtYzZhMC00YWZkLTgxYWItYjZlODdlNTczNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAnwRznmLCjyzonEDSTowf1iFGa2/lG2duTz yvskB6XVEXmzVcARw7dSZqAHbKBRDeCmvc9tCK8ElRQHkpMQNrXH1l0lD47TmYzv E9dUSOQOJZNugims1J3VIzFx74pV7xQk4FoDrxNaxVqET4e/+H4lt8Ym8Rb0n3In KjHDNztHeWyyvISes0vDcVhHeyNWuXOxi6/8hD3PecdqaoavosieHqcDEtyCjjrx wwa4RbfpjClEtp2zyW6I9EeHSGzcM/2bZxCoEYwEqJxTrrj/06Qhoa/tbr0Ah65V qydFGLZ1jyxhw7Y/Yu1bazZIJmUq8skmpG+tQJpVjqj5mj4doQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkCMWKHBMLvXNq+aiXfMG7ILpq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNjI3ZThjMGQtYTNjOS0z NTZlLTkxMTUtMGQ5MWViN2Y5MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+9K3EhE/xJhivT7FD3pxGkHFwg0dSE5OmRKwqNRF79HEy+XMKvhHu9 RECz/kjL3EzIWFS2XQJKNEN1BslJDe8eyHXCZLyBkSeWqxP+ajB8DP4bxdNzaqpy 5rXfQY5idNjBrIzGhsPlMh5KUaUJ8uJQQlZCyMCCZM3roDZY19JkhHESDofPX87F yCTbbEAkhopXPNEYzdyJCWe9QauRyIZo/uT+/IuFJ4BTPe1fqTB8FuEaN3HYEcto YsgZhYqeymUcQGx4IFQW3L0C0YtiYK2aXPMPEiLF6Gj24/bMjEi4N8TGgZ2wjzNr vo8v7SCCJEiCR2RZh+NhncY0ZKx3Etg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:09 2025 by rpki-client