$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa File: dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa (raw, json) Hash identifier: VksCHH+61N8AoxFxn23+dsQaP68w0rNEZR326PBemSI= Subject key identifier: D9:B8:A1:55:97:4F:73:FE:DB:A5:94:53:63:8F:5A:75:0E:93:5D:D7 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F4C3DE087E180C1EB210F8980 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 13335 IP address blocks: 96.43.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:87:e1:80:c1:eb:21:0f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=52409a26-6245-4dfd-8a23-7c40feac6dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:23:55:01:4b:35:5f:76:6a:22:6c:55:62: 73:70:bd:9a:21:e7:d5:cd:fe:55:93:65:36:72:14: 25:96:b6:16:d7:18:c6:eb:87:11:4b:59:66:d0:29: 70:bf:7a:92:b1:1c:8d:f6:35:58:a6:b4:f1:20:0d: a0:4d:73:7c:c8:62:a2:e6:25:af:e4:57:7d:4f:0b: e6:83:bf:80:49:76:0d:55:4d:65:d5:02:d8:30:9f: 58:cd:26:55:aa:a3:d9:cf:e4:90:c8:27:e0:2f:64: e3:f8:0a:f0:8b:5b:02:e4:22:32:84:6a:e0:0b:92: cd:da:da:c4:10:e3:e5:ef:76:08:b2:93:cc:66:a4: 42:c9:7b:09:ea:59:90:09:61:f3:b2:07:5b:e2:f5: 32:b4:a4:26:48:ba:f5:8e:b2:4b:f7:9b:71:31:ea: 16:ec:d9:01:4f:28:e5:80:d2:e3:26:db:b8:6e:a2: 7a:db:9d:00:86:cd:95:eb:5a:d0:42:a6:26:fc:66: 8c:52:91:74:9b:d0:11:a3:b8:5f:80:13:9d:8d:cc: 4d:14:b1:13:84:f0:e8:fe:ed:5f:e2:b3:1b:bb:98: 83:71:bc:fd:66:64:e2:17:c1:1a:0f:d9:5c:cd:56: a9:3e:a6:12:ff:43:35:6e:3b:95:cb:3b:4d:86:40: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:A1:55:97:4F:73:FE:DB:A5:94:53:63:8F:5A:75:0E:93:5D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2d:53:c2:8d:0e:4f:d7:f5:b9:8d:38:ce:0e:9b:8b:c3:35: d6:e6:70:04:a9:68:d8:96:8f:0e:19:ec:ea:a7:e2:65:92:f1: 52:c4:b8:1e:23:08:68:b2:63:8f:34:1f:29:25:15:96:2b:8d: d8:e1:4c:b1:9d:70:4f:05:29:17:8c:e6:f5:8f:7e:32:b3:f6: a0:03:b8:9e:59:f8:1d:c6:9c:44:4c:04:ba:30:42:c4:cb:e6: 47:44:69:13:d2:2a:09:1e:44:a4:18:df:78:b2:9e:b1:73:24: 35:28:00:ed:78:83:9f:25:3c:aa:79:7b:09:cd:9a:29:2b:75: d8:00:3c:99:77:ed:b8:be:b5:ac:77:34:25:3d:60:b5:a0:68: 07:f7:0c:cb:17:72:e0:c7:1e:a2:28:ce:c8:74:30:b5:01:02: e9:0f:e5:b6:64:e1:bc:e9:fe:8e:10:09:9d:f4:ff:7d:6c:5c: 8f:b6:57:83:79:d3:8d:4e:e7:e4:a9:38:04:a5:7b:3c:67:dc: fe:3a:2d:bd:97:5f:d1:90:6a:3c:6b:77:dd:12:d7:6f:4c:17: 8d:e8:9a:09:e7:87:6f:95:41:e0:ff:a2:a9:9e:88:2a:5f:b7: 9f:34:2d:4f:cd:5f:be:af:2f:82:f2:fc:52:ff:3d:c6:5b:03: 77:a6:d9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeCH4YDB6yEPiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTI0MDlhMjYtNjI0NS00ZGZkLThhMjMtN2M0MGZlYWM2ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurwjVQFLNV92aiJsVWJzcL2aIefVzf5Vk2U2 chQllrYW1xjG64cRS1lm0Clwv3qSsRyN9jVYprTxIA2gTXN8yGKi5iWv5Fd9Twvm g7+ASXYNVU1l1QLYMJ9YzSZVqqPZz+SQyCfgL2Tj+Arwi1sC5CIyhGrgC5LN2trE EOPl73YIspPMZqRCyXsJ6lmQCWHzsgdb4vUytKQmSLr1jrJL95txMeoW7NkBTyjl gNLjJtu4bqJ6250Ahs2V61rQQqYm/GaMUpF0m9ARo7hfgBOdjcxNFLEThPDo/u1f 4rMbu5iDcbz9ZmTiF8EaD9lczVapPqYS/0M1bjuVyztNhkAIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm4oVWXT3P+26WUU2OPWnUOk13XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGMwNjUzZmItNmVlZS0z MjU2LWJjZjAtNTljNjNkZTcyZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8tU8KNDk/X9bmNOM4Om4vDNdbmcASpaNiWjw4Z7Oqn4mWS8VLEuB4j CGiyY480HyklFZYrjdjhTLGdcE8FKReM5vWPfjKz9qADuJ5Z+B3GnERMBLowQsTL 5kdEaRPSKgkeRKQY33iynrFzJDUoAO14g58lPKp5ewnNmikrddgAPJl37bi+tax3 NCU9YLWgaAf3DMsXcuDHHqIozsh0MLUBAukP5bZk4bzp/o4QCZ30/31sXI+2V4N5 041O5+SpOASlezxn3P46Lb2XX9GQajxrd90S129MF43omgnnh2+VQeD/oqmeiCpf t580LU/NX76vL4Ly/FL/PcZbA3em2dU= -----END CERTIFICATE-----Generated at Sun Sep 27 06:45:46 2026 by rpki-client