$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa File: 3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa (raw, json) Hash identifier: Clvf1zkRxPRdWSKh5OErXghaHOlCMg4H5tf1XmGJtdI= Subject key identifier: DD:9C:01:89:F9:93:C5:A4:E9:FD:2D:F1:39:8C:66:25:8E:CF:BE:FA Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584DA8159600805697E8705BF1C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 29802 IP address blocks: 96.43.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:96:00:80:56:97:e8:70:5b:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=dc4e19aa-46b7-4162-90c1-c91f5849be0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:ce:36:b3:77:a6:9a:ef:1e:17:81:2d:ca: 2f:80:a2:b8:8d:27:89:65:05:0b:7e:5b:bb:12:48: 61:39:9e:1c:b1:30:74:e2:27:d5:38:44:f8:11:4b: 16:4f:1e:c8:5e:0b:df:e1:0c:eb:ce:22:86:72:2a: d1:f0:13:f2:11:9a:55:d4:55:af:ac:01:41:1e:86: fa:8b:f9:eb:ae:ff:07:05:31:4b:7e:58:d5:bf:f0: 69:63:38:0f:65:df:34:1c:75:ef:de:11:3a:a4:ae: db:be:08:da:6a:70:1a:e0:ea:e2:8c:8f:97:94:3a: 3e:64:7b:f8:5f:1b:b9:b9:1a:c6:ba:23:0d:b3:3f: d5:a9:d9:33:9a:20:31:64:20:1c:16:9e:69:12:35: ee:db:5c:93:ae:81:47:cd:90:c0:ff:2f:dd:9e:ea: ab:8a:e9:b8:72:9b:8d:b9:ff:5e:8f:9c:23:0d:8a: 2b:f7:83:f0:20:79:1b:da:b2:2c:ef:fa:73:78:0b: 5d:11:2d:5d:a0:9d:26:34:04:ce:1a:23:46:92:14: 9e:44:d8:56:6c:be:30:32:45:ec:10:1b:69:4e:84: a9:0a:55:ed:08:7d:55:a6:51:c5:c3:b1:d5:64:81: d6:22:f5:e3:8a:6a:4b:1e:6e:cc:0a:be:83:4a:39: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:01:89:F9:93:C5:A4:E9:FD:2D:F1:39:8C:66:25:8E:CF:BE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3e329c93-36b1-358d-80d8-6a3dcbd8470b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:80:e7:83:69:7a:b3:5a:cc:07:55:56:71:05:11:3c:9e:5b: 42:39:f5:cb:08:3b:62:03:e6:ac:b4:8a:1e:1e:30:d8:d8:c4: b0:20:0b:c7:2c:2b:ba:b6:bd:98:0b:75:ef:d1:00:0f:97:3e: 95:00:db:15:62:bf:c2:13:a7:6d:29:24:99:19:f4:a4:4b:2a: f3:27:9f:4b:0d:21:c3:ab:8d:51:fa:35:3a:34:28:d6:ed:94: f6:ff:ae:82:3f:8f:45:ee:f5:c2:61:a3:65:f2:ed:b3:f1:75: 03:a3:f3:7d:9b:71:da:9c:a9:52:d3:1c:79:3e:32:7f:b3:d4: 28:b7:01:2d:55:94:13:2a:79:ce:d8:50:34:88:b4:35:9c:2e: be:7f:53:f2:ac:3c:5c:f8:52:c5:b3:fa:bc:04:25:d8:54:34: 11:24:59:31:ee:a0:c2:06:22:c5:c8:26:73:7a:5b:62:60:5e: ee:47:3f:1c:87:b2:46:72:03:3d:2c:9b:f7:2e:21:32:89:41: 71:3a:e5:d3:52:5b:d4:52:4e:39:da:99:80:cc:2a:9a:0f:36: 0e:8c:26:10:fc:4c:a1:66:66:32:d1:ae:67:a0:4e:16:86:07: db:21:22:be:b0:47:be:0e:ec:61:91:99:dd:9e:1a:b2:aa:71: a3:90:67:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFZYAgFaX6HBb8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZGM0ZTE5YWEtNDZiNy00MTYyLTkwYzEtYzkxZjU4NDliZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfzONrN3pprvHheBLcovgKK4jSeJZQULflu7 EkhhOZ4csTB04ifVOET4EUsWTx7IXgvf4QzrziKGcirR8BPyEZpV1FWvrAFBHob6 i/nrrv8HBTFLfljVv/BpYzgPZd80HHXv3hE6pK7bvgjaanAa4OrijI+XlDo+ZHv4 Xxu5uRrGuiMNsz/VqdkzmiAxZCAcFp5pEjXu21yTroFHzZDA/y/dnuqrium4cpuN uf9ej5wjDYor94PwIHkb2rIs7/pzeAtdES1doJ0mNATOGiNGkhSeRNhWbL4wMkXs EBtpToSpClXtCH1VplHFw7HVZIHWIvXjimpLHm7MCr6DSjkc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2cAYn5k8Wk6f0t8TmMZiWOz776MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2UzMjljOTMtMzZiMS0z NThkLTgwZDgtNmEzZGNiZDg0NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaA54NperNazAdVVnEFETyeW0I59csIO2ID5qy0ih4eMNjYxLAgC8cs K7q2vZgLde/RAA+XPpUA2xViv8ITp20pJJkZ9KRLKvMnn0sNIcOrjVH6NTo0KNbt lPb/roI/j0Xu9cJho2Xy7bPxdQOj832bcdqcqVLTHHk+Mn+z1Ci3AS1VlBMqec7Y UDSItDWcLr5/U/KsPFz4UsWz+rwEJdhUNBEkWTHuoMIGIsXIJnN6W2JgXu5HPxyH skZyAz0sm/cuITKJQXE65dNSW9RSTjnamYDMKpoPNg6MJhD8TKFmZjLRrmegThaG B9shIr6wR74O7GGRmd2eGrKqcaOQZ2o= -----END CERTIFICATE-----Generated at Wed May 13 09:36:12 2026 by rpki-client