$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa File: 7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa (raw, json) Hash identifier: Ix/nAYVMjaARhchbyp+sP9HGwIb5jIpvD827SoLAYZE= Subject key identifier: D0:A5:F1:6C:A4:50:E9:5D:56:C5:64:AF:1E:64:8F:4B:7F:94:D8:53 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B1D9C2D6D4A1C1E5522DF68C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 266400 IP address blocks: 96.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2d:6d:4a:1c:1e:55:22:df:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c7ce4fe5-a14b-4c5f-96a8-be42ce511ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:97:88:43:11:15:80:6b:5f:ca:e5:ea:ba:18: 14:c6:f5:31:5b:34:38:f2:2d:3d:7e:a5:33:79:3a: 41:ca:26:93:78:53:60:5c:c9:6f:d8:11:f0:ce:1c: be:a0:68:14:d9:71:d4:09:be:26:61:f2:68:06:78: 7d:db:d0:90:6e:e0:36:c4:94:7b:a4:72:d9:86:55: ab:96:d2:fb:e3:43:a7:f1:8f:e0:4b:56:0f:d0:61: 81:3d:3d:c2:fb:68:2d:51:c0:5e:e8:8f:7e:be:4e: 3f:f7:7f:17:54:c4:10:2b:f3:8e:ba:fa:09:12:2d: e1:cc:03:7a:9b:3d:1e:a3:4c:e3:70:d3:1a:56:86: c6:e3:79:c8:24:1f:b2:3b:6d:0a:0a:11:6b:ab:da: 1c:ba:2e:7b:a5:2f:cd:45:f7:8d:5f:93:74:99:77: d8:ca:48:80:d4:4d:76:f0:79:b8:54:9f:4f:a0:84: c7:7a:9f:2f:ec:66:5c:9a:f0:91:17:0b:fb:eb:ee: a5:e1:5e:98:be:aa:9e:73:cf:1a:8d:f6:27:a5:ad: b4:87:a8:9a:39:ca:ad:84:31:80:56:59:7d:98:7b: 65:b8:b7:fe:5b:30:60:b3:64:f7:3e:73:39:81:fe: ef:b7:42:7e:f2:c7:a3:19:40:47:93:5b:c2:09:50: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A5:F1:6C:A4:50:E9:5D:56:C5:64:AF:1E:64:8F:4B:7F:94:D8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:73:4a:43:54:46:c0:9f:63:1e:38:62:96:12:3c:f4:50:46: 34:b1:5d:22:d4:93:3b:e3:b9:15:75:8e:d0:97:70:09:a0:bf: 48:5c:06:d5:5f:cd:41:e5:af:6a:49:31:19:55:c5:d8:c4:2c: 04:20:17:dd:b9:b2:b5:b1:90:9a:15:4e:b5:44:c6:97:85:90: 1b:fb:9e:c1:ae:b7:3b:01:91:e5:7c:6f:70:51:7e:4d:d9:97: e1:8e:00:6b:6c:ca:ff:5f:33:20:82:83:30:94:21:a3:91:e2: c8:be:83:09:b9:17:be:58:35:31:57:35:71:d4:a1:b8:4a:7e: 7f:62:00:08:90:82:7e:f0:71:13:97:e5:c2:ff:de:e6:b5:15: 21:6c:40:da:f4:1a:07:5d:fb:5a:df:29:77:86:b0:de:75:c4: a6:0e:16:c5:be:fa:da:c5:9c:a8:7a:42:17:56:f7:78:93:60: 12:8f:22:74:0f:e5:de:e7:c7:37:09:79:1a:91:3d:be:5a:bb: 02:d7:87:25:51:54:48:b2:d2:75:99:ba:3d:b1:73:57:19:a7: 1e:91:04:6f:71:f0:d5:1a:ed:02:24:c5:00:6a:11:44:03:af: 95:1c:76:a1:77:2d:d5:cb:35:02:b5:68:9b:00:9e:ff:cd:2b: 27:5d:2e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnC1tShweVSLfaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzdjZTRmZTUtYTE0Yi00YzVmLTk2YTgtYmU0MmNlNTExZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JeIQxEVgGtfyuXquhgUxvUxWzQ48i09fqUz eTpByiaTeFNgXMlv2BHwzhy+oGgU2XHUCb4mYfJoBnh929CQbuA2xJR7pHLZhlWr ltL740On8Y/gS1YP0GGBPT3C+2gtUcBe6I9+vk4/938XVMQQK/OOuvoJEi3hzAN6 mz0eo0zjcNMaVobG43nIJB+yO20KChFrq9ocui57pS/NRfeNX5N0mXfYykiA1E12 8Hm4VJ9PoITHep8v7GZcmvCRFwv76+6l4V6Yvqqec88ajfYnpa20h6iaOcqthDGA Vll9mHtluLf+WzBgs2T3PnM5gf7vt0J+8sejGUBHk1vCCVDUlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCl8WykUOldVsVkrx5kj0t/lNhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2U5NWU3YTMtMDA5Yy0z N2E0LWE3ZWEtZTQ1YWE3YTE2M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZzSkNURsCfYx44YpYSPPRQRjSxXSLUkzvjuRV1jtCXcAmgv0hcBtVf zUHlr2pJMRlVxdjELAQgF925srWxkJoVTrVExpeFkBv7nsGutzsBkeV8b3BRfk3Z l+GOAGtsyv9fMyCCgzCUIaOR4si+gwm5F75YNTFXNXHUobhKfn9iAAiQgn7wcROX 5cL/3ua1FSFsQNr0Ggdd+1rfKXeGsN51xKYOFsW++trFnKh6QhdW93iTYBKPInQP 5d7nxzcJeRqRPb5auwLXhyVRVEiy0nWZuj2xc1cZpx6RBG9x8NUa7QIkxQBqEUQD r5UcdqF3LdXLNQK1aJsAnv/NKyddLi8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:41 2025 by rpki-client