$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ef8cfbb9-f9cd-3aa9-a003-773842e24f43.roa File: ef8cfbb9-f9cd-3aa9-a003-773842e24f43.roa (raw, json) Hash identifier: 6q1o5cjBXVNpedAX913Waozay6Nyo42LStbsrBSaeug= Subject key identifier: 61:71:0C:84:33:26:21:A6:78:85:8B:96:64:25:A1:5C:41:4D:E8:62 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F2EBBCEFB0D35AC2492330900 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ef8cfbb9-f9cd-3aa9-a003-773842e24f43.roa Signing time: Tue 15 Sep 2026 11:21:03 +0000 ROA not before: Tue 15 Sep 2026 11:21:03 +0000 ROA not after: Mon 14 Dec 2026 12:21:03 +0000 asID: 401362 IP address blocks: 96.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:bb:ce:fb:0d:35:ac:24:92:33:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 15 11:21:03 2026 GMT Not After : Dec 14 12:21:03 2026 GMT Subject: CN=70191715-d95e-4ea5-8ab7-ce9d9c66e268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:98:c7:98:fc:24:ed:f0:71:89:9e:4a:0c: ec:4f:8b:2e:26:2f:d0:6e:41:e3:42:6d:e1:e5:94: 23:cc:f9:62:85:c3:15:42:23:c0:16:97:ae:5b:e9: 1a:41:d2:d8:4b:e6:69:98:73:78:70:b0:f4:a4:bc: 28:89:70:dc:b2:3e:21:fc:87:97:5d:da:d6:d8:9d: 04:75:08:9a:9e:7f:a5:77:4d:16:e8:52:30:bc:2a: 63:8f:a1:6c:84:93:bf:11:b2:d0:aa:fd:c6:7b:9c: 79:a5:c2:6c:0f:dc:24:5d:78:38:85:c7:7f:f8:b8: cd:01:9f:1d:5c:d3:a8:72:4b:5d:54:6b:17:e7:5e: ec:f1:43:d3:4f:8d:05:80:70:00:66:11:c6:3d:ef: b2:43:7a:4c:64:55:5c:9c:53:cc:68:ea:28:32:49: 53:86:4b:90:c9:91:9e:0b:5e:db:f8:cc:cb:56:af: bc:7a:43:74:06:c5:e5:b7:28:30:01:b7:b6:07:9f: f7:c7:94:8e:a4:3e:81:cd:61:ec:10:2e:52:8a:ed: dd:eb:c6:50:09:07:76:0c:f4:8b:eb:3e:16:42:95: 88:27:4f:e1:f5:90:c3:f8:79:ae:6e:43:ec:2b:1e: 95:28:23:60:4e:7b:56:6b:55:9e:c8:53:8e:a5:79: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:71:0C:84:33:26:21:A6:78:85:8B:96:64:25:A1:5C:41:4D:E8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ef8cfbb9-f9cd-3aa9-a003-773842e24f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:44:e3:4d:46:4d:03:1a:7e:8c:42:1c:8f:00:e9:73:f6:56: 1f:6f:7b:6b:d1:a8:4c:5d:be:2f:68:de:03:45:0b:d0:5d:a3: 2b:52:24:d1:bf:47:d4:f4:4e:16:29:d5:1d:57:2e:70:65:0b: f1:a6:0f:1d:c7:4d:2e:55:1e:4a:10:c4:ea:07:3a:83:ca:5c: 57:7d:95:2e:76:bc:15:a4:86:b0:9b:83:10:50:89:79:d8:e7: d6:f7:69:a5:89:46:9e:69:db:f1:53:ce:a4:f4:83:51:d6:4f: 20:9a:90:c1:b1:5a:44:11:5a:9c:54:9c:6a:e8:63:6d:3c:3a: db:60:f5:b8:06:f4:be:db:4b:c8:22:bf:a0:68:10:42:4a:6b: ff:75:84:67:18:48:e9:ec:8a:33:54:62:5f:c0:01:0e:fc:25: 48:d7:29:19:01:19:83:2a:ae:d3:d7:2b:05:4d:b4:48:d0:cf: d8:c3:44:0c:f1:13:95:3b:ba:f4:36:7f:1c:76:fc:38:01:d2: 4e:16:f2:0f:ca:21:0a:4c:8f:83:a7:f8:68:a8:55:38:a3:07: 61:52:c1:71:9b:0f:bb:a7:e1:b8:83:c4:11:e4:b2:e4:25:58: d2:f6:bf:0b:28:e4:9d:a5:5a:fd:2b:e6:10:98:1f:43:e1:21: cf:bd:08:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8uu877DTWsJJIzCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkxNTExMjEwM1oXDTI2MTIxNDEyMjEwM1owLzEtMCsGA1UEAxMk NzAxOTE3MTUtZDk1ZS00ZWE1LThhYjctY2U5ZDljNjZlMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCqYx5j8JO3wcYmeSgzsT4suJi/QbkHjQm3h 5ZQjzPlihcMVQiPAFpeuW+kaQdLYS+ZpmHN4cLD0pLwoiXDcsj4h/IeXXdrW2J0E dQiann+ld00W6FIwvCpjj6FshJO/EbLQqv3Ge5x5pcJsD9wkXXg4hcd/+LjNAZ8d XNOocktdVGsX517s8UPTT40FgHAAZhHGPe+yQ3pMZFVcnFPMaOooMklThkuQyZGe C17b+MzLVq+8ekN0BsXltygwAbe2B5/3x5SOpD6BzWHsEC5Siu3d68ZQCQd2DPSL 6z4WQpWIJ0/h9ZDD+HmubkPsKx6VKCNgTntWa1WeyFOOpXn35wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFxDIQzJiGmeIWLlmQloVxBTehiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZWY4Y2ZiYjktZjljZC0z YWE5LWEwMDMtNzczODQyZTI0ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJE401GTQMafoxCHI8A6XP2Vh9ve2vRqExdvi9o3gNFC9BdoytSJNG/ R9T0ThYp1R1XLnBlC/GmDx3HTS5VHkoQxOoHOoPKXFd9lS52vBWkhrCbgxBQiXnY 59b3aaWJRp5p2/FTzqT0g1HWTyCakMGxWkQRWpxUnGroY208Ottg9bgG9L7bS8gi v6BoEEJKa/91hGcYSOnsijNUYl/AAQ78JUjXKRkBGYMqrtPXKwVNtEjQz9jDRAzx E5U7uvQ2fxx2/DgB0k4W8g/KIQpMj4On+GioVTijB2FSwXGbD7un4biDxBHksuQl WNL2vwso5J2lWv0r5hCYH0PhIc+9CPE= -----END CERTIFICATE-----Generated at Mon Sep 21 11:49:18 2026 by rpki-client