$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d2f3fe2a-f5c1-366e-8a3e-342a1690bff9.roa File: d2f3fe2a-f5c1-366e-8a3e-342a1690bff9.roa (raw, json) Hash identifier: uQ381YZv/NIKcSOKdkYBgUJtEJ5pe9HU4k2Kd6wIA5U= Subject key identifier: BD:E7:1A:FC:0B:C9:27:8D:B0:16:1D:3B:7A:0E:4A:F1:00:15:88:FD Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F2D87AFED3B1155DDE1828100 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d2f3fe2a-f5c1-366e-8a3e-342a1690bff9.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 5511 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:af:ed:3b:11:55:dd:e1:82:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=08b0ea59-8d99-4a66-a1ac-6f8da89a97db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:85:4f:44:98:85:bf:1f:be:5f:88:6f:41: 14:cf:c6:c6:b6:ee:dd:b3:19:9a:ca:bc:68:d8:5e: be:99:63:24:a3:68:48:ab:a9:23:94:ad:c0:48:df: f0:e1:59:cd:af:48:fd:48:76:84:78:3b:a2:f3:c2: c1:a3:28:e4:4f:d3:62:1d:39:bf:fe:c4:b9:46:93: a7:5a:ff:24:69:95:fc:f8:05:a1:f7:28:89:88:cd: ec:84:14:84:72:a4:c2:47:31:20:bd:5a:72:aa:16: 02:05:3b:cf:2d:e6:6b:59:a5:41:97:dc:47:a6:01: 42:6d:ef:33:35:2c:5e:99:0c:a6:17:05:22:09:d7: 65:8d:57:4e:bb:ea:f3:d3:1c:ee:2c:c5:80:b7:40: f2:8c:06:91:ee:18:5b:33:0a:ed:1d:07:bd:45:89: 4b:7a:bd:67:99:60:4c:43:eb:1c:45:25:82:b3:d8: 53:c5:6e:4a:e9:f3:c4:95:1f:62:37:9e:dd:14:f2: 8a:07:b0:af:68:24:09:c0:49:ad:b5:3b:5e:c8:21: 4f:0f:46:fb:4b:df:25:77:80:07:8f:b7:45:24:5e: 28:a7:37:4b:66:12:d5:91:fb:1f:96:2c:8d:10:20: 85:f5:ad:1b:3b:97:da:54:25:eb:41:39:bc:3f:c2: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E7:1A:FC:0B:C9:27:8D:B0:16:1D:3B:7A:0E:4A:F1:00:15:88:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/d2f3fe2a-f5c1-366e-8a3e-342a1690bff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:47:47:53:78:0c:c1:63:b9:15:c3:ac:01:6d:11:1c:ba:83: 02:ad:f1:0a:b8:40:60:90:96:a9:3d:27:6a:5c:b2:13:1c:7f: d5:e6:f2:75:4d:db:08:37:88:5b:dd:f1:50:49:eb:08:ca:8c: 58:99:af:64:d0:05:55:c4:07:94:0d:5e:9e:31:af:5d:17:69: 20:47:18:72:ae:49:aa:7b:7e:93:85:1a:f1:88:5b:eb:53:ad: bb:1e:ae:ed:86:64:82:eb:97:ee:99:a0:85:ec:71:0e:ce:8b: 4e:df:cc:34:62:42:56:b4:a8:9c:47:e7:55:33:93:6b:b8:b5: b2:18:86:f1:77:65:8a:69:0b:67:e4:82:df:40:65:d1:e5:5c: fc:67:6e:5b:a0:ee:05:06:f2:a4:2c:5c:94:f4:62:9d:40:5d: 6e:90:1b:fd:46:7f:b1:18:4d:06:ea:f7:5f:fe:a2:e9:ce:19: 3f:65:77:c2:0e:04:21:02:86:5a:06:09:f9:36:75:60:ab:03: b7:9b:a7:74:2f:9e:7e:93:66:00:0b:24:07:8c:b5:21:48:31: 00:29:4e:c2:ca:11:71:d6:d1:75:18:02:06:f1:e2:63:3b:d1: 98:2f:c2:ac:20:e5:87:b0:d4:d4:ce:30:3c:39:d8:b7:67:6e: 05:1b:1e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th6/tOxFV3eGCgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhiMGVhNTktOGQ5OS00YTY2LWExYWMtNmY4ZGE4OWE5N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhueFT0SYhb8fvl+Ib0EUz8bGtu7dsxmayrxo 2F6+mWMko2hIq6kjlK3ASN/w4VnNr0j9SHaEeDui88LBoyjkT9NiHTm//sS5RpOn Wv8kaZX8+AWh9yiJiM3shBSEcqTCRzEgvVpyqhYCBTvPLeZrWaVBl9xHpgFCbe8z NSxemQymFwUiCddljVdOu+rz0xzuLMWAt0DyjAaR7hhbMwrtHQe9RYlLer1nmWBM Q+scRSWCs9hTxW5K6fPElR9iN57dFPKKB7CvaCQJwEmttTteyCFPD0b7S98ld4AH j7dFJF4opzdLZhLVkfsfliyNECCF9a0bO5faVCXrQTm8P8Iq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3nGvwLySeNsBYdO3oOSvEAFYj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZDJmM2ZlMmEtZjVjMS0z NjZlLThhM2UtMzQyYTE2OTBiZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRHR1N4DMFjuRXDrAFtERy6gwKt8Qq4QGCQlqk9J2pcshMcf9Xm8nVN 2wg3iFvd8VBJ6wjKjFiZr2TQBVXEB5QNXp4xr10XaSBHGHKuSap7fpOFGvGIW+tT rbseru2GZILrl+6ZoIXscQ7Oi07fzDRiQla0qJxH51Uzk2u4tbIYhvF3ZYppC2fk gt9AZdHlXPxnblug7gUG8qQsXJT0Yp1AXW6QG/1Gf7EYTQbq91/+ounOGT9ld8IO BCEChloGCfk2dWCrA7ebp3Qvnn6TZgALJAeMtSFIMQApTsLKEXHW0XUYAgbx4mM7 0Zgvwqwg5Yew1NTOMDw52LdnbgUbHnQ= -----END CERTIFICATE-----Generated at Sun Sep 20 21:42:29 2026 by rpki-client