$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa File: 7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa (raw, json) Hash identifier: B8P6QkZRs9KnEyJIRtovspgvvYB2MWyG+ut9XAWPrlQ= Subject key identifier: B4:37:54:02:7C:94:8F:10:44:D8:A1:06:40:CC:A5:AA:1D:CD:C2:D4 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584DBE6B27A0C9655439B0BD2100 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 266400 IP address blocks: 96.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:27:a0:c9:65:54:39:b0:bd:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=3756e8a2-4eba-4b45-8004-f33bf91c49e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:a9:c0:c4:00:ea:40:c5:52:36:6d:b2:f1: 0e:ef:3d:40:cc:0b:6f:b2:72:4c:0c:68:c9:1e:09: 3b:77:b4:d4:0c:b0:ca:f9:fb:de:7d:c7:5a:b1:14: 73:fa:2b:98:c8:b8:7b:7c:2f:0a:1f:a2:a1:e0:11: 68:e8:a1:f9:3c:7e:29:dc:8e:95:1e:81:37:5c:0f: 6b:3d:38:9c:bb:84:0e:03:8a:1c:88:99:cd:02:cb: ae:ed:22:01:f2:9e:50:14:0e:b3:ed:87:fb:9f:d0: 0c:e0:28:7b:a6:31:8b:34:8e:c2:08:62:fc:12:d1: d3:2a:18:ba:5c:13:86:54:62:10:08:e3:6a:b2:2e: eb:94:a5:70:b5:cb:77:72:3d:49:e8:be:36:bd:a2: e7:fb:3c:47:96:6f:8f:e0:4d:be:52:10:6b:24:c6: 39:3b:b2:6b:3a:62:ca:b2:24:69:9a:ed:7d:b3:65: 02:57:43:a4:bd:fd:ef:21:86:ee:26:19:23:65:9e: 41:63:83:57:ce:64:c5:1f:66:48:da:f5:62:d1:00: d8:cf:d6:3c:f3:a0:b2:a0:c4:ee:5b:d2:7c:2f:a6: af:7e:af:5d:c8:02:93:15:b4:f8:76:30:96:38:c5: 5e:b3:40:09:51:b4:2f:43:69:f1:e2:0a:61:af:a6: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:37:54:02:7C:94:8F:10:44:D8:A1:06:40:CC:A5:AA:1D:CD:C2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3c:9e:35:41:53:9f:c8:66:69:45:ea:c7:30:18:0a:e7:f9: f4:f3:3b:a6:05:5f:1c:03:60:ed:a1:93:0d:4b:03:77:7a:bc: 3d:79:4d:85:c0:f7:34:95:a6:e9:c7:4b:fb:4f:c0:f2:eb:0c: e3:8f:4a:ce:71:1c:da:83:c5:62:f0:4d:c5:b0:a2:da:69:1c: 7a:a1:77:aa:a2:bd:4b:5d:af:52:ea:3e:5e:3d:a7:08:e4:83: 4f:e6:b4:70:e3:40:90:07:d3:9e:b9:ef:39:f2:30:ae:86:1e: fa:76:ef:5e:e9:9e:c1:31:1b:c1:fb:94:9d:05:7b:56:bb:b1: 8e:87:c0:1f:33:8c:41:a1:0b:74:72:d4:fa:01:da:07:bd:21: 04:14:4f:82:fb:9e:86:a8:7e:57:bf:6f:25:de:af:2a:93:06: 14:05:57:0a:2d:31:1d:3e:af:c3:f3:3d:a1:1e:d5:86:ad:b5: 9f:62:04:ac:fc:86:72:63:33:67:22:37:d4:ae:33:29:cd:a0: f1:df:83:c3:86:77:41:7b:13:f1:94:30:18:26:47:25:a5:cb: 77:0a:72:b3:a8:69:7b:ae:b4:b0:61:b6:d9:e6:66:80:17:79: cc:55:b1:75:5d:a6:1c:ad:d1:02:66:1f:df:a5:87:50:ef:5e: af:3a:77:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayegyWVUObC9IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk Mzc1NmU4YTItNGViYS00YjQ1LTgwMDQtZjMzYmY5MWM0OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUWpwMQA6kDFUjZtsvEO7z1AzAtvsnJMDGjJ Hgk7d7TUDLDK+fvefcdasRRz+iuYyLh7fC8KH6Kh4BFo6KH5PH4p3I6VHoE3XA9r PTicu4QOA4ociJnNAsuu7SIB8p5QFA6z7Yf7n9AM4Ch7pjGLNI7CCGL8EtHTKhi6 XBOGVGIQCONqsi7rlKVwtct3cj1J6L42vaLn+zxHlm+P4E2+UhBrJMY5O7JrOmLK siRpmu19s2UCV0Okvf3vIYbuJhkjZZ5BY4NXzmTFH2ZI2vVi0QDYz9Y886CyoMTu W9J8L6avfq9dyAKTFbT4djCWOMVes0AJUbQvQ2nx4gphr6Z1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ3VAJ8lI8QRNihBkDMpaodzcLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2U5NWU3YTMtMDA5Yy0z N2E0LWE3ZWEtZTQ1YWE3YTE2M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM8njVBU5/IZmlF6scwGArn+fTzO6YFXxwDYO2hkw1LA3d6vD15TYXA 9zSVpunHS/tPwPLrDOOPSs5xHNqDxWLwTcWwotppHHqhd6qivUtdr1LqPl49pwjk g0/mtHDjQJAH05657znyMK6GHvp2717pnsExG8H7lJ0Fe1a7sY6HwB8zjEGhC3Ry 1PoB2ge9IQQUT4L7noaofle/byXeryqTBhQFVwotMR0+r8PzPaEe1YattZ9iBKz8 hnJjM2ciN9SuMynNoPHfg8OGd0F7E/GUMBgmRyWly3cKcrOoaXuutLBhttnmZoAX ecxVsXVdphyt0QJmH9+lh1DvXq86dzU= -----END CERTIFICATE-----Generated at Wed May 13 07:18:21 2026 by rpki-client