$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ec8f0ea-266c-3b83-86f6-bff2dc7e5458.roa File: 8ec8f0ea-266c-3b83-86f6-bff2dc7e5458.roa (raw, json) Hash identifier: XJ0S3IACL6T0pRB7w1NPEjtS5aqbHzTbW1yw7U5DrU4= Subject key identifier: CA:16:90:77:4A:82:A3:7B:51:C1:CA:F0:55:62:A0:4D:F1:AF:5B:23 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B4B372E5D3E7929F8F5B91D00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ec8f0ea-266c-3b83-86f6-bff2dc7e5458.roa Signing time: Tue 23 Sep 2025 21:04:31 +0000 ROA not before: Tue 23 Sep 2025 21:04:31 +0000 ROA not after: Mon 22 Dec 2025 22:04:31 +0000 asID: 14315 IP address blocks: 96.43.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:37:2e:5d:3e:79:29:f8:f5:b9:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 23 21:04:31 2025 GMT Not After : Dec 22 22:04:31 2025 GMT Subject: CN=7c5a9b0e-2ac6-4ca5-ab86-700cc8fb7d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:42:cb:73:54:03:12:01:58:2f:30:45:f8: a3:69:25:b3:8c:76:59:71:be:da:0c:8a:a2:89:87: ee:3b:21:0a:c1:c0:74:b6:b9:11:c2:77:2d:fa:35: 20:81:60:6b:0f:64:85:eb:e2:c3:37:1d:27:c4:e5: b1:b6:ca:d0:1b:cf:b7:aa:83:e3:1a:cc:60:43:93: 10:ec:0f:e9:7e:4c:4b:7f:8a:86:99:ea:5d:db:f2: 36:fc:d7:69:b9:06:74:e8:ee:22:ed:87:fa:a0:eb: 64:30:f7:1d:73:73:ad:e8:aa:6d:78:da:40:26:59: ea:dc:83:e5:e3:e5:8b:5b:4a:78:e9:46:24:94:9e: e2:90:e8:e2:3c:25:0e:4c:ff:4d:e7:47:49:94:24: 74:f8:d3:2e:b4:cc:a5:d2:82:9e:79:c0:46:08:79: 6b:56:03:2a:a6:e5:b3:a2:ed:70:1d:a1:db:1c:36: 49:39:11:d5:38:8e:e2:b8:34:61:54:fd:c5:be:61: b3:4e:8e:3e:5c:27:57:44:5b:70:5e:7e:83:e5:d0: 83:3f:d4:68:e8:fb:87:40:c7:80:fe:b9:0d:db:1d: ef:94:2e:1d:aa:05:4f:65:ce:d6:bb:fb:3f:ae:88: 74:35:6e:13:13:3e:90:c5:03:1c:e7:ca:e1:23:25: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:90:77:4A:82:A3:7B:51:C1:CA:F0:55:62:A0:4D:F1:AF:5B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/8ec8f0ea-266c-3b83-86f6-bff2dc7e5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:16:ae:74:71:7e:f6:9c:42:ae:5d:fc:5c:b9:60:1c:30: e2:5e:b6:cd:dd:0c:d5:f2:f8:99:2c:b9:15:e3:f6:5c:63:60: 37:1d:5f:77:da:35:b8:35:6d:47:b8:af:d2:f6:2e:71:ef:ea: a7:7f:62:bc:fb:0d:fe:d9:3f:22:83:f9:51:19:67:28:75:8a: 97:e7:30:ab:f1:a8:e4:b6:8c:3b:1f:0d:09:48:4b:a1:2d:b3: e7:9c:43:dc:c8:97:4b:96:67:6b:dc:3c:e5:d7:60:5a:74:f7: 2d:4e:36:33:3c:58:f9:7f:8c:86:ab:79:aa:d7:57:7e:a0:14: b7:ab:e0:55:ec:53:6d:e0:af:bf:dd:28:ff:56:98:ac:02:13: d3:c5:ef:ea:ed:b6:8d:ff:5f:42:1a:98:6f:bd:25:4f:73:f7: bb:79:55:19:c6:79:e8:41:f3:8a:4f:5d:bf:60:69:a6:fd:b5: 65:e9:74:f6:25:31:1a:60:e2:29:3a:b1:a2:21:43:d4:0e:34: ed:eb:bb:67:bb:73:7b:b1:4c:41:55:ef:99:5b:4d:02:80:95: 1c:9d:4c:06:a9:09:9b:4a:d7:8e:21:16:b4:12:68:fa:ad:fc: 57:db:97:a2:77:8f:9f:bc:e4:2c:00:d6:87:7a:c7:1f:fe:22: e0:c6:dd:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLNy5dPnkp+PW5HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDkyMzIxMDQzMVoXDTI1MTIyMjIyMDQzMVowLzEtMCsGA1UEAxMk N2M1YTliMGUtMmFjNi00Y2E1LWFiODYtNzAwY2M4ZmI3ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva1Cy3NUAxIBWC8wRfijaSWzjHZZcb7aDIqi iYfuOyEKwcB0trkRwnct+jUggWBrD2SF6+LDNx0nxOWxtsrQG8+3qoPjGsxgQ5MQ 7A/pfkxLf4qGmepd2/I2/NdpuQZ06O4i7Yf6oOtkMPcdc3Ot6KpteNpAJlnq3IPl 4+WLW0p46UYklJ7ikOjiPCUOTP9N50dJlCR0+NMutMyl0oKeecBGCHlrVgMqpuWz ou1wHaHbHDZJORHVOI7iuDRhVP3FvmGzTo4+XCdXRFtwXn6D5dCDP9Ro6PuHQMeA /rkN2x3vlC4dqgVPZc7Wu/s/roh0NW4TEz6QxQMc58rhIyWpOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoWkHdKgqN7UcHK8FVioE3xr1sjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOGVjOGYwZWEtMjY2Yy0z YjgzLTg2ZjYtYmZmMmRjN2U1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqcFq50cX72nEKuXfxcuWAcMOJets3dDNXy+JksuRXj9lxjYDcdX3fa Nbg1bUe4r9L2LnHv6qd/Yrz7Df7ZPyKD+VEZZyh1ipfnMKvxqOS2jDsfDQlIS6Et s+ecQ9zIl0uWZ2vcPOXXYFp09y1ONjM8WPl/jIarearXV36gFLer4FXsU23gr7/d KP9WmKwCE9PF7+rtto3/X0IamG+9JU9z97t5VRnGeehB84pPXb9gaab9tWXpdPYl MRpg4ik6saIhQ9QONO3ru2e7c3uxTEFV75lbTQKAlRydTAapCZtK144hFrQSaPqt /Ffbl6J3j5+85CwA1od6xx/+IuDG3YQ= -----END CERTIFICATE-----Generated at Sun Oct 19 20:04:19 2025 by rpki-client