$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa File: 7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa (raw, json) Hash identifier: eBJctAse9CZ5+YVARQteCoQlqR2ujYJUgKA82I1ecTQ= Subject key identifier: 6A:8D:9D:C5:21:C4:7C:35:72:B9:B6:5E:8B:1E:52:5A:44:21:0E:58 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F4112B8D026E90AB6DF5C4F00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 266400 IP address blocks: 96.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b8:d0:26:e9:0a:b6:df:5c:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4aaf0e61-88fe-49b4-92c2-f8e256a6be48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:46:ab:7e:53:2b:1a:da:70:9e:b1:4d:7c: 4c:4b:13:d1:39:62:d7:d5:62:5c:4b:5f:8f:d0:7b: 4b:7a:13:0f:21:6a:09:82:76:cd:07:ab:a7:8c:ef: 4f:f4:f8:ca:d4:35:5b:a1:ea:b0:3e:fd:13:be:20: 3b:6b:ce:dc:e4:3e:51:47:29:ee:bc:3d:3b:a2:a6: 5c:0b:4d:70:c5:27:03:80:88:d4:7f:42:3b:2c:08: 27:d3:00:47:de:ad:04:a9:d5:8a:f0:5d:e8:b4:07: 5f:63:6d:30:18:9d:d3:58:a0:43:db:b5:a1:63:08: 39:82:03:17:d1:15:fd:f5:54:50:97:78:c2:a5:63: 31:65:31:4a:ec:ec:fc:13:a4:1d:ff:1b:bc:92:b3: fc:a1:1e:35:2d:78:19:0b:c3:5a:7e:f5:3a:b1:61: dd:7c:c3:46:1d:e9:89:37:6c:f0:a7:fd:04:66:f1: c1:1c:29:b0:d4:a8:29:06:01:79:11:7a:dd:27:a0: 80:3e:a7:b0:ee:19:26:b5:b7:9c:b8:1f:d9:91:c6: 7b:59:3d:c0:89:4b:11:54:ef:43:de:06:7c:6d:39: 27:19:95:b5:ac:ce:aa:83:91:4b:53:b4:45:0c:28: 2f:22:ab:3b:20:16:19:2b:df:35:75:ce:b5:f1:53: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:9D:C5:21:C4:7C:35:72:B9:B6:5E:8B:1E:52:5A:44:21:0E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a4:74:d1:23:24:ac:04:df:a8:17:2b:d6:5b:89:24:e6:bd: c9:e9:72:55:cc:c6:1a:5b:58:85:41:f8:7e:b6:46:4f:3d:30: 14:80:9b:31:85:95:d1:02:c4:df:87:05:f6:0a:9a:9e:87:03: ee:8d:26:31:c7:57:b6:b7:22:42:28:af:c8:c2:c5:ad:43:fb: 62:8b:1e:93:f7:21:91:35:7f:e3:16:ce:33:10:a1:f9:99:d3: 7f:b7:c0:eb:22:b2:ae:30:07:5c:40:1a:24:f9:1d:1a:18:61: 09:42:6b:23:2e:32:a7:09:31:f7:7c:61:27:cb:c3:9b:88:66: 97:df:7d:0b:97:30:9d:fc:10:fd:50:83:84:01:f0:cd:16:56: b0:4f:5d:8d:91:fe:4c:a5:a7:23:2d:3c:c8:aa:aa:6b:e8:cf: 9e:ff:fe:9e:e3:d1:21:f1:ed:e5:ca:00:29:e4:27:f3:31:e5: 11:f2:26:cd:81:c4:f2:76:22:7f:e2:1b:6d:11:ff:02:60:63: 09:aa:da:07:d6:ab:8a:03:eb:8d:59:03:1f:25:98:be:6b:52: 69:f6:33:66:ae:ba:91:c4:5b:ab:31:f2:d8:11:fe:b4:77:d8: e4:3f:ea:5e:87:21:8e:91:dc:25:da:d7:98:3a:a2:07:b1:3c: 8a:74:4a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErjQJukKtt9cTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGFhZjBlNjEtODhmZS00OWI0LTkyYzItZjhlMjU2YTZiZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIhGq35TKxracJ6xTXxMSxPROWLX1WJcS1+P 0HtLehMPIWoJgnbNB6unjO9P9PjK1DVboeqwPv0TviA7a87c5D5RRynuvD07oqZc C01wxScDgIjUf0I7LAgn0wBH3q0EqdWK8F3otAdfY20wGJ3TWKBD27WhYwg5ggMX 0RX99VRQl3jCpWMxZTFK7Oz8E6Qd/xu8krP8oR41LXgZC8NafvU6sWHdfMNGHemJ N2zwp/0EZvHBHCmw1KgpBgF5EXrdJ6CAPqew7hkmtbecuB/ZkcZ7WT3AiUsRVO9D 3gZ8bTknGZW1rM6qg5FLU7RFDCgvIqs7IBYZK981dc618VMvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqNncUhxHw1crm2XoseUlpEIQ5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2U5NWU3YTMtMDA5Yy0z N2E0LWE3ZWEtZTQ1YWE3YTE2M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICkdNEjJKwE36gXK9ZbiSTmvcnpclXMxhpbWIVB+H62Rk89MBSAmzGF ldECxN+HBfYKmp6HA+6NJjHHV7a3IkIor8jCxa1D+2KLHpP3IZE1f+MWzjMQofmZ 03+3wOsisq4wB1xAGiT5HRoYYQlCayMuMqcJMfd8YSfLw5uIZpfffQuXMJ38EP1Q g4QB8M0WVrBPXY2R/kylpyMtPMiqqmvoz57//p7j0SHx7eXKACnkJ/Mx5RHyJs2B xPJ2In/iG20R/wJgYwmq2gfWq4oD641ZAx8lmL5rUmn2M2auupHEW6sx8tgR/rR3 2OQ/6l6HIY6R3CXa15g6ogexPIp0Svw= -----END CERTIFICATE-----Generated at Wed Sep 23 04:17:48 2026 by rpki-client