$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa File: 66899e9a-d444-371f-9310-09bd1e3fb623.roa (raw, json) Hash identifier: k5YUscAWU6qobMVS1IzDtFi4q47X1OHqpfAmpdqP12M= Subject key identifier: 21:94:1F:C2:49:F3:3C:4A:84:4C:5D:A6:D4:19:70:DF:19:E3:51:48 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F49743DC33B14B2F961B47530 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 96.43.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3d:c3:3b:14:b2:f9:61:b4:75:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=196f41b8-e3f8-4158-af0e-d01f87c4311d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:7f:31:77:7e:ca:bf:82:24:75:ee:78:33: e1:d0:7e:0a:56:60:e7:ab:c1:18:0f:4f:05:a5:be: 0f:39:06:d9:4a:00:cc:86:6b:07:2b:55:6e:59:7d: f0:af:4d:9d:01:33:4d:b6:1f:4a:d6:15:9d:c1:eb: 0d:3a:6b:40:01:24:4b:12:7e:a4:3f:b0:9c:ef:27: c9:17:94:4b:2e:e0:53:8b:b5:ce:c3:9b:13:95:74: 97:e3:8e:f5:04:5f:60:27:49:cb:40:55:46:22:79: f0:e1:aa:9e:82:96:f6:06:fa:9d:3b:8f:30:74:69: 08:01:8a:82:d6:c0:65:22:d3:ea:e9:66:42:25:ce: 3e:91:57:41:6f:19:e2:0a:25:c7:87:86:88:41:fd: be:14:61:bd:f9:d9:f5:d2:a0:ac:e0:ac:e5:5d:c9: a4:f7:e9:40:a1:6e:1f:c1:22:25:2b:fd:12:e3:5e: d1:b0:e1:91:40:b7:56:5e:08:4f:d6:d9:37:53:8d: 10:a3:ea:1e:68:10:54:7d:90:b5:ed:a8:fd:89:2b: c1:84:b1:e0:8a:e8:9f:ed:66:a7:4f:8c:fe:fe:e6: df:3e:be:55:bf:5c:3b:f9:e7:3c:40:ff:07:cb:0a: 7f:33:3f:13:41:32:6d:1d:80:08:39:e9:2b:31:cd: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:1F:C2:49:F3:3C:4A:84:4C:5D:A6:D4:19:70:DF:19:E3:51:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/66899e9a-d444-371f-9310-09bd1e3fb623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a6:64:b7:57:9a:2c:35:05:88:56:e9:92:f9:f6:db:a1:6d: db:e0:21:e1:16:86:1a:90:97:d8:91:e3:4b:b9:44:ac:ba:93: 1e:77:c8:84:dc:69:2c:6c:32:b7:a1:3f:4e:b8:ae:b9:58:dd: 66:72:37:f0:67:0b:97:f3:8f:39:8a:f5:47:e0:8e:aa:61:27: ac:42:dc:36:fd:cb:81:fb:19:7a:03:8d:6f:8e:8e:05:75:57: 01:20:ce:af:dd:e4:e7:c9:8f:c2:03:f6:25:4a:98:43:6b:da: fb:08:b0:32:6c:f6:3c:9e:c7:8e:a8:9f:4b:98:91:67:79:2b: 4d:43:04:5a:13:36:19:12:ca:a7:31:0b:e2:40:62:5a:c8:2d: 87:74:b9:c7:67:42:10:7e:3d:2f:2a:04:63:c2:c7:d2:00:91: 52:35:05:69:f8:b1:89:f9:72:94:1d:6b:56:62:43:bf:cf:ca: ba:13:5f:02:39:a9:21:e5:97:11:6e:cd:29:a8:c8:b0:1e:76: 87:43:8b:69:0c:8c:1a:86:ff:c0:f8:b7:74:d4:09:c1:09:ac: 22:0e:44:ac:83:05:e2:59:df:32:df:71:af:10:72:44:b6:6d: c7:50:35:31:fe:24:ce:72:bb:65:c9:98:a1:d0:30:09:cd:01: 92:82:fb:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdD3DOxSy+WG0dTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTk2ZjQxYjgtZTNmOC00MTU4LWFmMGUtZDAxZjg3YzQzMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZN/MXd+yr+CJHXueDPh0H4KVmDnq8EYD08F pb4POQbZSgDMhmsHK1VuWX3wr02dATNNth9K1hWdwesNOmtAASRLEn6kP7Cc7yfJ F5RLLuBTi7XOw5sTlXSX4471BF9gJ0nLQFVGInnw4aqegpb2BvqdO48wdGkIAYqC 1sBlItPq6WZCJc4+kVdBbxniCiXHh4aIQf2+FGG9+dn10qCs4KzlXcmk9+lAoW4f wSIlK/0S417RsOGRQLdWXghP1tk3U40Qo+oeaBBUfZC17aj9iSvBhLHgiuif7Wan T4z+/ubfPr5Vv1w7+ec8QP8Hywp/Mz8TQTJtHYAIOekrMc07VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGUH8JJ8zxKhExdptQZcN8Z41FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNjY4OTllOWEtZDQ0NC0z NzFmLTkzMTAtMDliZDFlM2ZiNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESmZLdXmiw1BYhW6ZL59tuhbdvgIeEWhhqQl9iR40u5RKy6kx53yITc aSxsMrehP064rrlY3WZyN/BnC5fzjzmK9UfgjqphJ6xC3Db9y4H7GXoDjW+OjgV1 VwEgzq/d5OfJj8ID9iVKmENr2vsIsDJs9jyex46on0uYkWd5K01DBFoTNhkSyqcx C+JAYlrILYd0ucdnQhB+PS8qBGPCx9IAkVI1BWn4sYn5cpQda1ZiQ7/PyroTXwI5 qSHllxFuzSmoyLAedodDi2kMjBqG/8D4t3TUCcEJrCIORKyDBeJZ3zLfca8QckS2 bcdQNTH+JM5yu2XJmKHQMAnNAZKC+xY= -----END CERTIFICATE-----Generated at Sun Sep 27 05:55:52 2026 by rpki-client