$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa File: 1092ed51-9f14-3ebb-8463-c759a5546a52.roa (raw, json) Hash identifier: udMuF02raqtMvkDf0+DGXv4idJGVGGx7pwP7X1WqIYQ= Subject key identifier: 45:05:A8:3B:8F:D0:D5:06:24:97:4D:44:B5:70:E4:A5:59:DE:33:45 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F3A17D9DD438F852C3F1BB600 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 20648 IP address blocks: 96.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d9:dd:43:8f:85:2c:3f:1b:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=f5fc6588-844b-456e-a08a-ef096f118870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:ff:d9:9a:30:44:be:5c:c5:68:17:b5:87: e1:93:28:55:f1:eb:8f:08:49:2a:12:ce:c9:55:d9: 12:21:1a:cf:05:55:b5:e8:1e:cc:2a:da:0c:4d:66: 8a:09:bd:dd:d0:cc:19:99:49:19:53:84:66:92:8e: c7:c7:8c:02:30:05:98:98:6d:33:84:84:49:d5:c6: 57:37:98:2a:dd:ed:40:3b:b2:82:fb:a8:5d:e3:b7: ae:57:92:7a:51:18:9f:15:db:0b:57:7e:a2:c5:50: 0f:47:d7:f3:f8:4d:1e:a2:45:58:60:93:a0:f4:a5: 56:33:45:d6:ff:f4:09:fd:6b:a2:1d:2c:49:4f:4d: 76:bc:5b:ef:10:6b:c8:14:bf:86:35:88:07:d4:47: 0b:3b:c2:b8:9b:ef:ee:a2:2e:fe:70:d5:d9:39:3a: 1b:09:61:ae:e6:95:4b:a3:bd:82:2e:a0:d7:49:7f: 32:a0:f3:81:3a:70:ef:e5:99:a9:cf:3c:42:7e:fe: 17:11:50:46:91:45:48:26:aa:a5:85:cd:e6:5a:8f: 5d:22:cf:fe:54:bd:36:73:c2:24:08:60:fa:d7:d5: a5:ef:a2:27:86:8a:9f:c5:13:7d:da:82:01:54:4b: cf:28:a7:35:d2:7d:84:c7:0e:de:22:15:ca:77:ab: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:A8:3B:8F:D0:D5:06:24:97:4D:44:B5:70:E4:A5:59:DE:33:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:9c:b4:50:38:f1:7f:ea:ef:1b:75:de:bd:d5:e4:ab:ca: c0:95:4e:4f:1b:05:30:09:7c:ca:a3:2f:99:0d:b9:dd:61:68: 68:37:91:0d:42:09:f7:a9:fd:3d:bb:7a:04:4e:ef:40:6c:84: 2a:e8:fa:1c:b0:e5:35:16:f2:8d:3b:95:e0:66:24:55:57:3c: 48:38:bc:8b:ff:f6:79:79:35:8e:03:22:87:c3:77:94:68:a0: 4e:bb:8b:5e:87:4b:50:57:70:43:88:f9:d3:53:a5:92:de:fd: cb:5e:dd:41:1d:f1:2d:20:c7:3d:af:c5:23:47:23:08:f8:fd: 84:56:a0:d9:ee:77:df:6c:9b:ca:93:06:90:3a:5b:22:c6:82: ad:ed:d2:1a:ea:59:b7:86:b7:7c:2e:f6:11:ff:17:1d:ae:c2: 24:dd:a6:77:f2:1c:85:58:62:7d:08:f9:df:2e:63:0c:97:8d: bc:c1:90:af:ca:28:65:d3:a8:d8:ac:42:e6:f4:29:a5:4c:02: 34:b2:d0:1d:d0:99:9e:df:0d:74:8f:75:c2:20:da:5d:9e:5d: 84:5a:91:16:b1:83:88:3f:8c:87:0c:97:b2:3f:b1:7d:57:31: f4:4e:fd:05:af:e3:dd:12:c3:f4:73:b3:8b:f3:57:cc:8f:55: be:2f:33:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9ndQ4+FLD8btgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZjVmYzY1ODgtODQ0Yi00NTZlLWEwOGEtZWYwOTZmMTE4ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnb/2ZowRL5cxWgXtYfhkyhV8euPCEkqEs7J VdkSIRrPBVW16B7MKtoMTWaKCb3d0MwZmUkZU4Rmko7Hx4wCMAWYmG0zhIRJ1cZX N5gq3e1AO7KC+6hd47euV5J6URifFdsLV36ixVAPR9fz+E0eokVYYJOg9KVWM0XW //QJ/WuiHSxJT012vFvvEGvIFL+GNYgH1EcLO8K4m+/uoi7+cNXZOTobCWGu5pVL o72CLqDXSX8yoPOBOnDv5ZmpzzxCfv4XEVBGkUVIJqqlhc3mWo9dIs/+VL02c8Ik CGD619Wl76InhoqfxRN92oIBVEvPKKc10n2Exw7eIhXKd6tuSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUFqDuP0NUGJJdNRLVw5KVZ3jNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTA5MmVkNTEtOWYxNC0z ZWJiLTg0NjMtYzc1OWE1NTQ2YTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJvnLRQOPF/6u8bdd691eSrysCVTk8bBTAJfMqjL5kNud1haGg3kQ1C Cfep/T27egRO70BshCro+hyw5TUW8o07leBmJFVXPEg4vIv/9nl5NY4DIofDd5Ro oE67i16HS1BXcEOI+dNTpZLe/cte3UEd8S0gxz2vxSNHIwj4/YRWoNnud99sm8qT BpA6WyLGgq3t0hrqWbeGt3wu9hH/Fx2uwiTdpnfyHIVYYn0I+d8uYwyXjbzBkK/K KGXTqNisQub0KaVMAjSy0B3QmZ7fDXSPdcIg2l2eXYRakRaxg4g/jIcMl7I/sX1X MfRO/QWv490Sw/Rzs4vzV8yPVb4vM6A= -----END CERTIFICATE-----Generated at Tue Sep 29 13:49:32 2026 by rpki-client