$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa File: 0bca3e92-daaf-3256-84aa-2ade85e7a084.roa (raw, json) Hash identifier: ApvlMnxTtaoHnps215H/q9kbqX0pwvvCIQ/qnkWjG60= Subject key identifier: FE:77:32:8D:F5:E8:42:D9:84:07:00:6B:3C:61:35:C2:87:E7:CD:34 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D1F4A8B6AF74D7FD88607BB80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 211440 IP address blocks: 96.43.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:8b:6a:f7:4d:7f:d8:86:07:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=55f4d103-4745-4756-aad6-ad67c2b4f439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:65:de:91:3e:a9:cd:21:26:9c:0e:9e:b8: a1:43:e7:32:e0:5d:90:d1:5a:27:08:a3:b3:cb:ef: b6:26:5f:8a:57:5c:45:e3:85:a0:f8:05:6c:76:82: e0:50:48:f1:30:29:3b:26:11:97:fb:13:4b:76:bf: cd:69:47:5d:dc:f8:b3:19:73:7f:35:4f:2b:4f:26: cd:92:f0:2a:68:fc:f8:5a:96:6c:91:95:27:df:13: d3:12:9d:0e:8d:e7:ac:55:2d:c9:fb:8b:47:bb:3e: e0:93:e9:19:ad:35:ca:19:f6:be:8e:ac:14:5e:3e: 4f:75:69:9e:3e:1f:b2:ce:eb:4a:e8:ff:92:81:e8: 35:b3:d2:53:a2:e4:f0:66:47:43:67:32:dc:b1:b2: 6a:a1:b9:9d:8d:19:ff:06:e2:c7:4d:3b:4b:8b:43: 8f:42:e1:84:20:5f:06:66:ef:bf:24:d8:6b:81:e1: a3:58:2d:f7:82:0d:df:b3:58:2c:b5:1e:f0:63:40: eb:9a:fc:73:0f:b9:23:5f:d3:24:77:86:a9:14:b8: 7a:18:f8:69:a1:c2:f9:8f:81:95:14:86:c1:bf:e9: 34:24:30:bc:e6:7a:5c:8c:4b:25:ee:42:39:45:37: 5e:4a:8a:7c:d6:af:62:51:d8:e5:1e:c9:07:f3:31: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:32:8D:F5:E8:42:D9:84:07:00:6B:3C:61:35:C2:87:E7:CD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ab:6c:e4:65:0d:10:2e:c2:b8:cf:5f:65:65:d1:11:d4:c6: 56:c3:f5:3b:bc:2a:c5:22:55:42:d6:b1:67:4b:89:dd:f0:80: 6a:a5:b0:06:aa:71:98:0b:f8:0d:f9:fc:49:ec:5a:8e:d7:bb: 01:38:7c:70:46:36:ec:3b:c5:c7:1d:c3:89:95:b7:7b:e4:1e: d0:18:55:56:c5:d1:89:b2:d4:a0:6d:cf:36:e0:ff:a8:8d:d8: e9:00:5e:3e:f9:58:b9:00:85:c5:a3:07:90:45:34:a7:25:3c: 55:ca:b4:f7:3b:86:de:60:4b:65:06:be:a4:c7:d2:d8:4c:53: e1:6d:55:57:12:f4:b1:a2:c3:12:0a:d3:a7:d4:3e:24:15:21: fa:90:10:13:19:dc:d6:f2:69:e7:9d:41:79:f1:81:4f:89:ce: 2d:ff:9c:2d:f9:1b:67:27:42:6c:a5:db:91:d7:b2:fe:12:7e: c5:85:a9:fa:f4:cd:86:7c:9f:5e:e9:9a:13:68:b1:9f:23:97: cb:92:68:38:57:0d:ca:ae:5c:d0:0f:c6:3a:fc:f2:0f:dc:1b: 25:b8:83:d1:48:9b:31:f3:59:98:19:43:c6:33:7c:4e:ef:c1: f6:84:1e:61:51:77:28:c3:35:33:e2:3e:ac:88:14:18:cd:8f: 26:00:0c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSotq901/2IYHu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTVmNGQxMDMtNDc0NS00NzU2LWFhZDYtYWQ2N2MyYjRmNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySRl3pE+qc0hJpwOnrihQ+cy4F2Q0VonCKOz y++2Jl+KV1xF44Wg+AVsdoLgUEjxMCk7JhGX+xNLdr/NaUdd3PizGXN/NU8rTybN kvAqaPz4WpZskZUn3xPTEp0OjeesVS3J+4tHuz7gk+kZrTXKGfa+jqwUXj5PdWme Ph+yzutK6P+Sgeg1s9JTouTwZkdDZzLcsbJqobmdjRn/BuLHTTtLi0OPQuGEIF8G Zu+/JNhrgeGjWC33gg3fs1gstR7wY0DrmvxzD7kjX9Mkd4apFLh6GPhpocL5j4GV FIbBv+k0JDC85npcjEsl7kI5RTdeSop81q9iUdjlHskH8zGChwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP53Mo316ELZhAcAazxhNcKH5800MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMGJjYTNlOTItZGFhZi0z MjU2LTg0YWEtMmFkZTg1ZTdhMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAirbORlDRAuwrjPX2Vl0RHUxlbD9Tu8KsUiVULWsWdLid3wgGqlsAaq cZgL+A35/EnsWo7XuwE4fHBGNuw7xccdw4mVt3vkHtAYVVbF0Ymy1KBtzzbg/6iN 2OkAXj75WLkAhcWjB5BFNKclPFXKtPc7ht5gS2UGvqTH0thMU+FtVVcS9LGiwxIK 06fUPiQVIfqQEBMZ3NbyaeedQXnxgU+Jzi3/nC35G2cnQmyl25HXsv4SfsWFqfr0 zYZ8n17pmhNosZ8jl8uSaDhXDcquXNAPxjr88g/cGyW4g9FImzHzWZgZQ8YzfE7v wfaEHmFRdyjDNTPiPqyIFBjNjyYADM8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:43:17 2026 by rpki-client