$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa File: 3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa (raw, json) Hash identifier: 6X/v/3/LOh4aUaIqzkGimwrHxAp2g/Mtj5Pfab0wQVo= Subject key identifier: 44:19:C0:27:0E:B8:C6:24:EE:93:22:A3:49:21:81:36:D2:C6:8C:D8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584E885A4264AC3E164D85A0DA80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 29802 IP address blocks: 96.43.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:42:64:ac:3e:16:4d:85:a0:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=d54aa1e9-8d9f-4058-b62c-720f82dc0a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:51:f6:11:49:d4:4b:72:94:22:e8:20:60: f3:f4:d5:fd:5c:46:53:e2:4a:b4:e3:1c:0c:4f:93: 9f:22:13:18:c2:a8:0c:2f:d6:71:27:54:a0:80:68: 5d:a9:30:5f:d1:ee:c7:be:8b:a4:ca:42:25:6b:f7: 77:03:b1:8d:bc:db:c1:7f:9a:02:1a:21:16:57:d1: c5:eb:79:5e:ce:53:90:91:1d:e6:ef:50:2f:8f:79: fe:68:c2:0d:7f:a5:0c:8f:1b:9e:e6:15:ec:1c:5b: fc:a2:fb:bd:ee:55:6b:db:27:bc:82:56:16:b5:27: 3d:33:27:60:8e:4e:53:f9:6b:64:98:67:4b:07:6e: 24:04:91:a2:62:3d:59:53:be:42:51:73:25:f1:85: 7e:be:58:79:e2:b8:1e:ba:8a:37:da:9d:90:18:05: 12:c8:42:be:44:81:27:2b:b2:c8:12:bb:17:2a:d9: 06:4e:41:89:f3:04:6f:3d:a7:86:29:57:1b:22:53: d6:ca:87:c4:b9:1f:51:6d:1f:2e:b2:a2:ec:19:2c: d4:41:0e:fd:2f:44:0f:cb:2c:e9:8e:e2:c1:8f:9c: 25:3c:f2:ff:8d:3e:d1:86:91:ea:7b:d2:3f:d6:5b: fc:89:b0:10:d7:f1:7d:79:32:9a:c9:8b:09:58:2c: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:C0:27:0E:B8:C6:24:EE:93:22:A3:49:21:81:36:D2:C6:8C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:00:60:b3:c5:e2:20:3d:7d:ce:89:d3:30:48:ec:d8:e2:42: bd:9e:6c:35:48:b8:c0:af:c1:89:9d:0b:43:a9:6f:8b:69:28: 73:fc:1c:60:81:07:44:c6:79:d8:c7:42:56:63:d5:d7:06:1e: 5b:5a:1a:49:e5:e7:5c:e4:60:d4:28:5a:a2:3d:18:bf:be:7c: 5f:1a:cd:83:9c:a0:77:1a:f0:85:71:04:e0:05:12:fb:4f:de: 3e:73:a2:50:8b:83:41:4b:89:4e:f3:f3:2b:4a:fd:05:bf:80: 9e:e0:51:59:c8:80:37:ee:f9:58:50:1b:f9:a7:01:8d:34:9e: f7:6a:de:6a:10:38:da:13:26:31:f6:db:48:97:f2:ec:0e:29: a3:4d:0e:88:9d:80:04:73:c5:25:9d:54:5f:7f:7e:2f:83:45: 40:9e:87:e4:b9:44:6f:5f:18:a9:d0:26:44:4b:de:92:c5:23: 44:b1:c8:33:82:e0:0a:fe:c9:7a:2d:44:76:6d:3b:89:62:c6: bf:ce:33:ac:18:3d:05:90:d4:89:01:71:39:27:bc:37:41:b1: ac:0a:0f:ff:ca:86:bd:78:76:a7:33:d9:c7:13:f1:92:6a:99: ce:48:64:90:dd:9e:e9:89:11:c2:ea:ed:95:69:b2:1c:ed:d7: b1:b9:d4:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkJkrD4WTYWg2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk ZDU0YWExZTktOGQ5Zi00MDU4LWI2MmMtNzIwZjgyZGMwYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgBR9hFJ1EtylCLoIGDz9NX9XEZT4kq04xwM T5OfIhMYwqgML9ZxJ1SggGhdqTBf0e7HvoukykIla/d3A7GNvNvBf5oCGiEWV9HF 63lezlOQkR3m71Avj3n+aMINf6UMjxue5hXsHFv8ovu97lVr2ye8glYWtSc9Mydg jk5T+WtkmGdLB24kBJGiYj1ZU75CUXMl8YV+vlh54rgeuoo32p2QGAUSyEK+RIEn K7LIErsXKtkGTkGJ8wRvPaeGKVcbIlPWyofEuR9RbR8usqLsGSzUQQ79L0QPyyzp juLBj5wlPPL/jT7RhpHqe9I/1lv8ibAQ1/F9eTKayYsJWCzi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQZwCcOuMYk7pMio0khgTbSxozYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2UzMjljOTMtMzZiMS0z NThkLTgwZDgtNmEzZGNiZDg0NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQAYLPF4iA9fc6J0zBI7NjiQr2ebDVIuMCvwYmdC0Opb4tpKHP8HGCB B0TGedjHQlZj1dcGHltaGknl51zkYNQoWqI9GL++fF8azYOcoHca8IVxBOAFEvtP 3j5zolCLg0FLiU7z8ytK/QW/gJ7gUVnIgDfu+VhQG/mnAY00nvdq3moQONoTJjH2 20iX8uwOKaNNDoidgARzxSWdVF9/fi+DRUCeh+S5RG9fGKnQJkRL3pLFI0SxyDOC 4Ar+yXotRHZtO4lixr/OM6wYPQWQ1IkBcTknvDdBsawKD//Khr14dqcz2ccT8ZJq mc5IZJDdnumJEcLq7ZVpshzt17G51GI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:34 2026 by rpki-client