$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b20382fa-e852-3052-9995-a6a9c6c78d44.roa File: b20382fa-e852-3052-9995-a6a9c6c78d44.roa (raw, json) Hash identifier: ayKoMT7d+qlcDQJJQtEVuROiKU5r4kAf3Zg/3HbxHqk= Subject key identifier: 33:35:4C:67:69:46:59:43:06:47:0F:D5:4B:CB:AE:2E:B8:B7:4E:13 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F316CC706E5429B7B025CA8C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b20382fa-e852-3052-9995-a6a9c6c78d44.roa Signing time: Wed 16 Sep 2026 10:29:14 +0000 ROA not before: Wed 16 Sep 2026 10:29:14 +0000 ROA not after: Tue 15 Dec 2026 11:29:14 +0000 asID: 204765 IP address blocks: 96.43.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:6c:c7:06:e5:42:9b:7b:02:5c:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 16 10:29:14 2026 GMT Not After : Dec 15 11:29:14 2026 GMT Subject: CN=6f52c16d-92c6-4b7a-94cb-bca03e002ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:dc:1a:45:ed:d6:51:c8:4d:ff:9a:7d:7e: 35:97:bf:0f:bb:ac:69:91:ce:54:bf:b5:71:b9:8a: d4:41:9b:38:f1:05:14:46:54:6e:c3:eb:d2:8c:61: 47:20:ce:0c:fd:f3:5c:af:38:a6:eb:26:da:94:10: 22:b1:1d:38:d0:03:c4:ef:c6:f0:48:c7:c3:2b:c7: fd:18:23:4c:21:0d:2b:bf:d6:d4:d9:35:9a:c5:34: 93:9c:c1:da:96:8a:93:9e:6e:0f:e9:29:7b:b5:20: 96:e7:c9:fc:59:1f:e1:2b:64:27:10:1d:f2:67:09: 55:d3:21:ab:c8:2e:6a:92:05:40:10:a8:40:93:ff: 2d:d3:94:72:36:52:b0:07:10:14:1b:69:a3:34:38: 20:79:3f:6f:82:7e:f5:b8:65:8f:3f:38:c3:d7:5d: 8e:fe:d7:f5:7c:9f:9c:92:61:0c:9c:e5:94:22:18: 02:a1:34:c9:ad:47:8f:2c:98:89:d8:bc:2d:bb:e4: 25:e8:72:d0:0b:dd:4a:f8:33:65:53:26:a3:16:7b: 4b:48:28:65:34:6b:ce:49:a1:08:cb:88:d0:77:2b: a1:a6:e8:e6:0a:0f:06:ee:52:48:f5:2a:c9:aa:d9: cf:c4:33:51:8e:b7:89:27:64:3c:b7:cd:70:7f:df: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:4C:67:69:46:59:43:06:47:0F:D5:4B:CB:AE:2E:B8:B7:4E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b20382fa-e852-3052-9995-a6a9c6c78d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0a:4d:c9:9c:93:41:50:8d:2a:33:05:f1:07:79:54:4a:b0: 56:57:4d:79:0f:f6:fb:e0:9d:c0:b2:12:9d:1d:c8:6a:be:92: 29:6b:0a:18:c3:73:c6:73:e0:cf:d8:59:f4:7d:d8:fd:76:c6: 01:08:87:6f:62:58:cf:c8:69:fa:ad:b1:52:08:fe:55:9a:78: 16:3e:c9:d6:c2:14:69:1d:ca:a9:cb:f6:a9:07:95:87:a5:7b: c7:1e:5d:9b:e0:c1:7c:fe:e1:9f:92:d2:11:a8:44:ea:b8:24: 01:b6:b8:61:01:fe:2f:43:6a:0d:36:31:55:9f:73:db:22:3c: c1:42:e8:68:5a:bf:46:d1:23:23:72:b1:73:5b:9e:51:67:f2: c5:58:c5:28:0b:d6:66:58:d2:f7:cd:9b:65:79:e8:a5:91:ad: 62:ef:89:a4:73:cc:bc:f8:bf:5e:82:49:6e:83:c2:1b:99:b5: 6c:a5:e8:88:ce:c0:81:c2:96:a1:3b:30:40:67:ca:9f:2c:f0: 7b:b6:d9:7e:12:e4:4b:fc:26:ef:b0:d7:35:a9:2c:15:3c:9b: 3d:c9:14:d7:74:cc:7e:b5:a0:43:dd:07:74:6e:9b:c1:35:c4: 46:b7:92:ef:66:ff:6b:1f:74:91:8f:08:ce:c2:43:bd:c1:32: ab:93:ae:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xbMcG5UKbewJcqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkxNjEwMjkxNFoXDTI2MTIxNTExMjkxNFowLzEtMCsGA1UEAxMk NmY1MmMxNmQtOTJjNi00YjdhLTk0Y2ItYmNhMDNlMDAyYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp3cGkXt1lHITf+afX41l78Pu6xpkc5Uv7Vx uYrUQZs48QUURlRuw+vSjGFHIM4M/fNcrzim6ybalBAisR040APE78bwSMfDK8f9 GCNMIQ0rv9bU2TWaxTSTnMHaloqTnm4P6Sl7tSCW58n8WR/hK2QnEB3yZwlV0yGr yC5qkgVAEKhAk/8t05RyNlKwBxAUG2mjNDggeT9vgn71uGWPPzjD112O/tf1fJ+c kmEMnOWUIhgCoTTJrUePLJiJ2Lwtu+Ql6HLQC91K+DNlUyajFntLSChlNGvOSaEI y4jQdyuhpujmCg8G7lJI9SrJqtnPxDNRjreJJ2Q8t81wf99XNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM1TGdpRllDBkcP1UvLri64t04TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYjIwMzgyZmEtZTg1Mi0z MDUyLTk5OTUtYTZhOWM2Yzc4ZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8KTcmck0FQjSozBfEHeVRKsFZXTXkP9vvgncCyEp0dyGq+kilrChjD c8Zz4M/YWfR92P12xgEIh29iWM/IafqtsVII/lWaeBY+ydbCFGkdyqnL9qkHlYel e8ceXZvgwXz+4Z+S0hGoROq4JAG2uGEB/i9Dag02MVWfc9siPMFC6Ghav0bRIyNy sXNbnlFn8sVYxSgL1mZY0vfNm2V56KWRrWLviaRzzLz4v16CSW6DwhuZtWyl6IjO wIHClqE7MEBnyp8s8Hu22X4S5Ev8Ju+w1zWpLBU8mz3JFNd0zH61oEPdB3Rum8E1 xEa3ku9m/2sfdJGPCM7CQ73BMquTrho= -----END CERTIFICATE-----Generated at Tue Sep 22 22:52:40 2026 by rpki-client