$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa File: df52c9be-df94-3e2c-a85e-497f38382f3a.roa (raw, json) Hash identifier: 4OwNjTVzw2skgWnjWUXm/tqMaxPVy+GhtU8T8Fb+R2Q= Subject key identifier: 83:B2:18:3F:C5:99:50:03:A6:66:78:F8:41:C8:3C:F9:D8:75:0D:67 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BB727BB454CD5FE4D6A090DC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 401838 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:bb:45:4c:d5:fe:4d:6a:09:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=2cbb224b-633e-4b94-8eac-2bedf8ec53c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:56:2a:c4:b5:6a:ce:3b:79:7e:a0:e5:6d: db:51:66:56:84:54:e3:c7:64:69:eb:9c:bd:83:6d: 45:fd:4c:d9:48:1d:61:c6:c8:76:a5:fc:26:ff:e9: c9:3d:41:53:8e:95:3e:9a:7c:df:84:40:aa:31:5a: 53:d9:fd:3f:6f:0e:a7:c7:25:4e:d7:61:73:78:55: 07:6e:34:61:d7:80:3d:eb:d4:cf:12:3c:45:65:45: f2:4c:53:00:d1:2b:42:7f:d9:fb:0c:73:71:bb:22: 48:13:cd:fe:cc:2c:05:e0:10:81:a4:9f:af:fc:92: 60:f6:02:3b:42:aa:94:fe:d7:3c:2b:e8:2c:2c:3e: 3d:be:56:f7:99:c2:ee:46:55:5d:72:e4:5b:bd:09: 60:6d:9e:c5:de:fc:1e:3f:b4:3e:f7:72:1d:e0:de: cc:f1:8d:ee:74:a0:20:51:cf:ad:80:8e:f2:ea:48: 78:e2:25:ce:cb:05:a2:ae:b9:b9:81:36:ee:d8:f8: 06:67:58:40:11:ee:54:8c:aa:20:47:d7:46:38:9c: 44:35:f1:ef:8f:6c:73:6f:28:ae:41:31:74:5b:60: 7a:2f:4d:1e:be:c7:27:6b:35:b2:a5:f7:b4:29:34: 8d:7b:ab:b9:10:92:91:31:b7:5c:ca:bc:9b:a7:fe: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B2:18:3F:C5:99:50:03:A6:66:78:F8:41:C8:3C:F9:D8:75:0D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:17:6a:34:12:95:23:64:a8:bb:f0:b6:e1:37:c9:73:6f:97: e0:26:0e:cd:af:38:33:a8:08:5f:ab:e3:36:66:4f:a5:f0:14: 5d:89:70:cf:cc:51:12:8f:18:84:b9:9b:97:ee:f3:d6:5a:50: 4b:e2:f3:33:62:5f:78:ef:5d:64:82:f0:6f:68:01:45:62:fc: de:e9:28:b4:c0:8f:55:34:e2:fa:5a:f0:f6:6c:96:08:e9:c5: 30:7c:ca:96:74:b9:83:2b:62:2a:7d:90:2f:e6:9d:0b:d1:47: a2:ae:6c:05:1e:0c:0b:80:89:08:64:69:e3:a8:24:16:b1:56: 37:1f:66:0c:42:01:eb:8e:26:7f:66:3b:7e:b0:22:d9:b4:b5: a1:d6:4d:01:1a:fd:f3:84:15:9d:7b:e5:6f:67:d3:84:79:82: 66:8e:d7:70:00:0c:ad:7f:27:a0:88:28:bb:3c:a0:b6:67:b0: 25:ee:81:14:d0:0f:cd:9b:89:62:94:d0:48:b8:5b:77:de:b3: 74:f1:d1:d0:46:6a:16:29:b4:60:2b:91:76:b3:d2:86:ec:5d: 13:aa:a5:ac:b9:17:bf:8e:79:4d:46:de:82:39:08:31:84:bc: e8:82:9e:a8:ef:a4:e8:09:27:6e:c7:ce:e9:1a:24:a8:ab:a7: 22:d1:3c:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7tFTNX+TWoJDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk MmNiYjIyNGItNjMzZS00Yjk0LThlYWMtMmJlZGY4ZWM1M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx89WKsS1as47eX6g5W3bUWZWhFTjx2Rp65y9 g21F/UzZSB1hxsh2pfwm/+nJPUFTjpU+mnzfhECqMVpT2f0/bw6nxyVO12FzeFUH bjRh14A969TPEjxFZUXyTFMA0StCf9n7DHNxuyJIE83+zCwF4BCBpJ+v/JJg9gI7 QqqU/tc8K+gsLD49vlb3mcLuRlVdcuRbvQlgbZ7F3vweP7Q+93Id4N7M8Y3udKAg Uc+tgI7y6kh44iXOywWirrm5gTbu2PgGZ1hAEe5UjKogR9dGOJxENfHvj2xzbyiu QTF0W2B6L00evscnazWypfe0KTSNe6u5EJKRMbdcyrybp/6iXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOyGD/FmVADpmZ4+EHIPPnYdQ1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGY1MmM5YmUtZGY5NC0z ZTJjLWE4NWUtNDk3ZjM4MzgyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwXajQSlSNkqLvwtuE3yXNvl+AmDs2vODOoCF+r4zZmT6XwFF2JcM/M URKPGIS5m5fu89ZaUEvi8zNiX3jvXWSC8G9oAUVi/N7pKLTAj1U04vpa8PZslgjp xTB8ypZ0uYMrYip9kC/mnQvRR6KubAUeDAuAiQhkaeOoJBaxVjcfZgxCAeuOJn9m O36wItm0taHWTQEa/fOEFZ175W9n04R5gmaO13AADK1/J6CIKLs8oLZnsCXugRTQ D82biWKU0Ei4W3fes3Tx0dBGahYptGArkXaz0obsXROqpay5F7+OeU1G3oI5CDGE vOiCnqjvpOgJJ27HzukaJKirpyLRPM4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:05 2025 by rpki-client