$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa File: bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa (raw, json) Hash identifier: txmBkJ3iHXdWrnn7cgwUfyzjuLQh+7mohMq1cEoAOag= Subject key identifier: 52:B5:1A:70:AE:1E:88:43:CD:D0:AC:D1:B9:60:92:B9:39:BC:2D:26 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584FAB288A748B91A5EB2943F880 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 397423 IP address blocks: 96.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:8a:74:8b:91:a5:eb:29:43:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=1c766202-72cf-4452-a337-18bbcb09ae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:4f:29:4b:30:ec:c7:e3:af:1e:d0:bb:e2: 2c:c9:70:40:3f:17:e7:f1:1a:d9:f7:bd:2d:76:2d: c0:49:96:61:9a:75:bd:55:12:6c:ec:af:c6:5b:ee: c1:57:7e:80:57:4e:f2:f4:e9:d3:43:dd:e1:07:42: e9:e4:9a:33:d2:7b:1f:bc:76:62:77:44:82:aa:ff: 4a:e4:5c:26:9d:eb:50:52:95:69:1b:49:ed:96:8c: 5b:ad:c4:06:3f:38:32:a1:37:ab:93:92:64:c0:16: eb:42:83:02:fb:c4:aa:5a:9f:00:03:db:93:87:91: d1:78:b0:53:23:c8:36:98:37:e5:c7:60:c7:e6:07: a7:9c:0c:3a:03:70:54:c5:ee:6e:64:4a:d3:80:1f: c9:85:e2:7b:62:69:61:2a:a4:29:8d:2f:64:0d:fc: d7:65:78:50:4a:a4:25:8e:f5:13:cc:e7:1d:bf:c8: 63:50:b0:ba:b9:34:e1:9c:b3:5b:f5:2d:92:bf:90: 9e:77:4c:4d:47:d9:02:65:91:86:1d:09:a5:69:eb: df:9c:db:b9:5b:5e:59:13:05:b9:c8:53:9c:bc:1a: 2b:d8:90:42:89:88:b9:3a:e0:c9:22:bd:ab:d6:24: 49:36:6e:99:b4:bd:94:ed:32:6d:f7:58:9c:26:ca: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B5:1A:70:AE:1E:88:43:CD:D0:AC:D1:B9:60:92:B9:39:BC:2D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:14:9d:93:79:81:5c:d4:19:f6:b0:4c:f8:b8:9e:e6:b5:37: 69:67:aa:51:57:ea:f9:8d:ef:1b:7c:ef:2f:e1:42:fe:a1:a4: 7c:07:00:77:75:b3:2b:c1:87:33:29:e8:37:08:e3:6f:6f:cb: ce:14:d7:0d:6c:79:4d:97:63:87:fd:8f:99:ad:d9:2b:dd:a1: f1:3d:77:f9:49:12:aa:b9:84:ee:1a:eb:b5:c4:50:51:fc:c2: 03:52:9e:7e:94:52:17:85:14:95:95:62:6e:ba:c4:ea:12:18: 3e:0d:3a:ea:e2:48:7a:9a:ae:13:78:a2:06:22:e2:f0:2f:58: 66:10:3e:6a:8f:49:a4:6e:82:59:40:c4:df:4f:2b:c6:93:63: c3:8b:05:9c:84:f6:d8:92:56:0b:2c:30:df:2c:ad:06:4c:c6: 68:4f:18:0c:de:74:6f:61:23:76:48:d3:49:70:f5:44:51:e6: e7:a8:b2:85:a2:35:70:8a:80:26:fb:73:85:ef:94:57:3d:bc: 77:b2:ea:01:0d:19:96:d4:b0:4c:50:0c:a9:52:a3:d0:48:b6: 4d:ae:1d:18:1f:51:5b:28:c9:73:11:64:f0:42:c1:e4:44:77: 7a:ed:2b:cd:8b:2e:60:a1:af:80:40:ec:dc:1d:c7:d1:2f:df: d4:82:02:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKIp0i5Gl6ylD+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk MWM3NjYyMDItNzJjZi00NDUyLWEzMzctMThiYmNiMDlhZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQhPKUsw7Mfjrx7Qu+IsyXBAPxfn8RrZ970t di3ASZZhmnW9VRJs7K/GW+7BV36AV07y9OnTQ93hB0Lp5Joz0nsfvHZid0SCqv9K 5FwmnetQUpVpG0ntloxbrcQGPzgyoTerk5JkwBbrQoMC+8SqWp8AA9uTh5HReLBT I8g2mDflx2DH5gennAw6A3BUxe5uZErTgB/JheJ7YmlhKqQpjS9kDfzXZXhQSqQl jvUTzOcdv8hjULC6uTThnLNb9S2Sv5Ced0xNR9kCZZGGHQmlaevfnNu5W15ZEwW5 yFOcvBor2JBCiYi5OuDJIr2r1iRJNm6ZtL2U7TJt91icJsqP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK1GnCuHohDzdCs0blgkrk5vC0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYmY3YjRmYjctODllNC0z YzQ1LTgxM2UtZTZjOGVhNWMzMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkUnZN5gVzUGfawTPi4nua1N2lnqlFX6vmN7xt87y/hQv6hpHwHAHd1 syvBhzMp6DcI429vy84U1w1seU2XY4f9j5mt2SvdofE9d/lJEqq5hO4a67XEUFH8 wgNSnn6UUheFFJWVYm66xOoSGD4NOuriSHqarhN4ogYi4vAvWGYQPmqPSaRugllA xN9PK8aTY8OLBZyE9tiSVgssMN8srQZMxmhPGAzedG9hI3ZI00lw9URR5ueosoWi NXCKgCb7c4XvlFc9vHey6gENGZbUsExQDKlSo9BItk2uHRgfUVsoyXMRZPBCweRE d3rtK82LLmChr4BA7Nwdx9Ev39SCAsE= -----END CERTIFICATE-----Generated at Sun Nov 15 14:02:59 2026 by rpki-client