$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa File: cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa (raw, json) Hash identifier: JLCGeWJkKwRVnr3m1sTcVb7SF2Uy63ubQMnCZ8v/Xvk= Subject key identifier: E9:42:9B:62:A8:8F:61:D6:7F:BC:9C:2D:50:29:81:1E:DB:43:9C:24 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F4977567F265267FF23DD5980 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211373 IP address blocks: 96.43.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:56:7f:26:52:67:ff:23:dd:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e9f39764-d8ce-4407-94bd-1190115a39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:23:74:3c:ef:b4:7d:ba:46:af:fd:72:06: c7:10:f2:e1:0d:5b:af:66:00:a2:e8:9d:67:e6:aa: 05:9a:98:9f:fa:00:23:d8:68:7a:96:8d:2f:c8:4b: d2:c3:c8:84:0b:e7:06:b1:c7:a6:a4:3f:5e:d2:ac: 74:82:57:d6:67:ee:f9:b9:88:8c:c2:f1:6d:e3:24: 30:4d:50:f9:fa:01:0e:ff:51:ad:df:a2:57:5b:c9: ee:d7:47:3e:11:57:21:7e:d6:8d:f9:df:32:ae:a0: f8:ea:7d:8d:24:4e:76:29:e8:92:4c:6c:d4:c2:d9: 51:87:7c:6f:d5:9a:1a:e2:cc:fa:04:80:62:d5:26: 0b:b0:b2:13:88:52:fb:f6:dd:c5:43:b0:2d:64:92: 29:01:2e:fb:e3:39:1f:ad:91:56:29:28:db:31:f0: fd:cf:25:00:18:45:97:f4:14:a5:19:df:98:27:fb: 36:a5:34:a6:dc:81:80:b3:6f:35:d6:5b:fc:39:c4: 03:d2:66:5f:ea:a7:7a:6b:ed:65:88:a5:80:e6:99: d0:46:dc:c3:46:2d:5f:c9:9a:05:73:cf:86:dc:aa: 7a:40:ce:78:ad:4c:9c:1b:6a:4b:e4:57:8a:de:92: 45:97:90:e6:49:74:e0:6f:a6:5b:4c:e9:9a:16:8b: 91:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:42:9B:62:A8:8F:61:D6:7F:BC:9C:2D:50:29:81:1E:DB:43:9C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:16:1e:bc:b5:05:3f:8d:c5:fe:9d:5a:c0:f1:30:3c:db:41: 7c:42:d9:5e:27:ca:59:13:8e:46:e5:43:dd:c9:d7:44:6a:8b: 5d:1d:a8:c4:d5:93:4e:f5:c0:fa:f7:cf:1a:4c:3d:b3:bf:b3: c0:92:6c:5c:f6:a9:1a:96:23:da:41:07:a5:78:7e:71:75:43: bc:fa:03:6d:53:5c:1c:88:0e:bf:35:d8:b1:44:ac:02:cd:80: 7d:7f:fa:96:05:44:18:7f:7f:04:a3:bb:c2:e7:7b:7c:f1:c3: 5b:ff:a8:73:93:3a:41:1d:af:8b:ff:57:b9:8f:1f:88:74:28: 2b:63:91:c7:75:d3:55:d4:f0:16:ee:6a:f2:43:db:52:39:bc: c5:75:c8:ef:e3:63:a7:6f:aa:39:39:a2:44:6c:e2:bc:66:31: 90:74:37:f5:fd:d1:03:00:3d:51:22:cb:f3:bc:7b:10:fe:44: 38:ee:d6:ae:61:bf:9b:e3:1c:ca:9d:4d:92:f5:de:35:99:8f: ce:56:9d:2c:af:9b:ca:e4:9f:be:12:c1:cb:af:09:a8:25:f7: e0:93:59:d2:e8:15:ec:2a:a3:57:38:a8:41:ad:d9:8e:e5:18: 2b:74:5f:bd:03:00:f7:1b:4f:27:27:9a:ea:2c:22:d3:d8:74: 30:73:20:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1Z/JlJn/yPdWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTlmMzk3NjQtZDhjZS00NDA3LTk0YmQtMTE5MDExNWEzOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokwjdDzvtH26Rq/9cgbHEPLhDVuvZgCi6J1n 5qoFmpif+gAj2Gh6lo0vyEvSw8iEC+cGscempD9e0qx0glfWZ+75uYiMwvFt4yQw TVD5+gEO/1Gt36JXW8nu10c+EVchftaN+d8yrqD46n2NJE52KeiSTGzUwtlRh3xv 1Zoa4sz6BIBi1SYLsLITiFL79t3FQ7AtZJIpAS774zkfrZFWKSjbMfD9zyUAGEWX 9BSlGd+YJ/s2pTSm3IGAs2811lv8OcQD0mZf6qd6a+1liKWA5pnQRtzDRi1fyZoF c8+G3Kp6QM54rUycG2pL5FeK3pJFl5DmSXTgb6ZbTOmaFouR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlCm2Koj2HWf7ycLVApgR7bQ5wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2FkNzcwZmYtOGJhMC0z OTg2LThjM2ItMWUxMzUzZTBkYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQWHry1BT+Nxf6dWsDxMDzbQXxC2V4nylkTjkblQ93J10Rqi10dqMTV k071wPr3zxpMPbO/s8CSbFz2qRqWI9pBB6V4fnF1Q7z6A21TXByIDr812LFErALN gH1/+pYFRBh/fwSju8Lne3zxw1v/qHOTOkEdr4v/V7mPH4h0KCtjkcd101XU8Bbu avJD21I5vMV1yO/jY6dvqjk5okRs4rxmMZB0N/X90QMAPVEiy/O8exD+RDju1q5h v5vjHMqdTZL13jWZj85WnSyvm8rkn74SwcuvCagl9+CTWdLoFewqo1c4qEGt2Y7l GCt0X70DAPcbTycnmuosItPYdDBzIGY= -----END CERTIFICATE-----Generated at Sun Oct 4 07:50:15 2026 by rpki-client