$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa File: df52c9be-df94-3e2c-a85e-497f38382f3a.roa (raw, json) Hash identifier: BNTKFCJeR019HIzGzkKjTgYn/4Hr7OtM4jUuIsMR8eg= Subject key identifier: AB:BB:9A:92:91:2C:15:EB:75:33:08:2E:8A:34:7E:85:BB:15:BA:A1 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D773A6D4F446287B282DB3460 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 401838 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6d:4f:44:62:87:b2:82:db:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=7bc9931d-b080-40d3-87c5-6ece9e81a471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:44:5c:e2:38:5c:07:99:4f:66:8a:92:07: 76:f9:bf:71:84:1f:ae:f7:03:2d:c5:ff:a5:08:ae: 5b:fd:35:ac:8e:6b:cd:83:08:43:eb:58:0a:5d:5a: 1a:70:05:c1:fb:64:5d:5f:79:b2:84:b9:fa:31:ea: 98:3d:ed:75:77:f9:59:37:89:88:c7:43:02:df:63: 5a:0f:f8:08:25:8e:8d:f1:93:2d:77:b2:12:23:34: 3a:87:46:16:ad:7e:49:9b:7e:c7:bd:c8:eb:9d:78: 90:5e:cb:db:0c:4d:7e:8f:57:47:d1:8b:37:97:1b: 4f:a2:fc:eb:bb:e8:50:a0:4b:47:5c:84:a0:c6:d5: dc:67:89:9a:3c:be:bd:c8:b9:d8:c7:46:38:ef:da: 03:3e:b4:14:64:ed:ac:a6:1d:10:f1:30:aa:ae:a8: da:65:e1:3f:dc:04:cc:00:d8:50:3e:ed:a6:77:53: ee:1d:0f:3e:db:dc:8f:b1:96:b4:c5:54:29:f4:0f: 87:db:91:8f:b0:d6:ef:7e:62:c1:36:19:84:45:a6: e5:61:55:25:5c:8d:cc:60:bd:bd:a3:e6:19:61:a2: 54:78:a8:76:c5:7c:82:f6:2e:a0:8d:ed:3d:d8:83: 00:ab:9c:b8:4b:1c:0f:40:b7:b1:21:24:9a:5f:ce: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BB:9A:92:91:2C:15:EB:75:33:08:2E:8A:34:7E:85:BB:15:BA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7d:a5:44:b8:7b:d1:30:79:f7:9e:7f:5e:a7:63:8d:14:3c: f9:2e:d2:2a:21:2e:b1:ba:68:9b:4b:1b:ee:5b:af:d9:c5:8c: 27:34:f7:e3:65:64:0b:7d:c2:7d:e9:10:e6:57:1a:49:13:e5: 5e:f4:f0:53:b5:ad:e3:a2:ce:33:1c:3a:a9:9e:67:eb:d9:a7: de:db:f8:0a:bd:1b:cf:1c:08:d0:c9:f1:6f:e4:0b:d9:e4:8b: bb:b9:73:e7:d7:e4:3e:e4:78:7e:c1:39:fe:81:31:03:34:7a: 7a:b6:e3:a7:de:f4:fc:a7:1c:1e:d6:b8:76:d2:93:51:11:e0: db:64:b5:a4:db:97:9b:d6:41:bc:d0:54:2d:68:2d:e1:fa:9f: 34:43:d7:b8:a5:9f:06:47:ad:c9:50:54:73:28:31:bc:70:d2: 4e:17:4d:c9:73:e2:5a:4c:66:1a:ed:05:55:d3:89:cc:d3:91: 9b:39:25:b0:76:eb:4c:2b:ee:a9:2a:13:35:25:1e:cc:e2:5e: a0:83:08:5b:02:c5:ad:26:7c:9b:b3:c2:c5:27:a9:37:15:26: ad:2e:17:32:96:21:51:eb:90:25:fe:e9:47:4a:67:f5:77:ef: 54:cf:74:9c:21:7b:0e:c2:dc:2e:24:5b:02:85:68:d0:96:9d: b5:11:45:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Om1PRGKHsoLbNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk N2JjOTkzMWQtYjA4MC00MGQzLTg3YzUtNmVjZTllODFhNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0lEXOI4XAeZT2aKkgd2+b9xhB+u9wMtxf+l CK5b/TWsjmvNgwhD61gKXVoacAXB+2RdX3myhLn6MeqYPe11d/lZN4mIx0MC32Na D/gIJY6N8ZMtd7ISIzQ6h0YWrX5Jm37HvcjrnXiQXsvbDE1+j1dH0Ys3lxtPovzr u+hQoEtHXISgxtXcZ4maPL69yLnYx0Y479oDPrQUZO2sph0Q8TCqrqjaZeE/3ATM ANhQPu2md1PuHQ8+29yPsZa0xVQp9A+H25GPsNbvfmLBNhmERablYVUlXI3MYL29 o+YZYaJUeKh2xXyC9i6gje092IMAq5y4SxwPQLexISSaX85jxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu7mpKRLBXrdTMILoo0foW7FbqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGY1MmM5YmUtZGY5NC0z ZTJjLWE4NWUtNDk3ZjM4MzgyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ9pUS4e9Ewefeef16nY40UPPku0iohLrG6aJtLG+5br9nFjCc09+Nl ZAt9wn3pEOZXGkkT5V708FO1reOizjMcOqmeZ+vZp97b+Aq9G88cCNDJ8W/kC9nk i7u5c+fX5D7keH7BOf6BMQM0enq246fe9PynHB7WuHbSk1ER4NtktaTbl5vWQbzQ VC1oLeH6nzRD17ilnwZHrclQVHMoMbxw0k4XTclz4lpMZhrtBVXTiczTkZs5JbB2 60wr7qkqEzUlHsziXqCDCFsCxa0mfJuzwsUnqTcVJq0uFzKWIVHrkCX+6UdKZ/V3 71TPdJwhew7C3C4kWwKFaNCWnbURRXI= -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:52 2026 by rpki-client