$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa File: dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa (raw, json) Hash identifier: 9MrHeApbz0d1orMFUe6eJ3m6qMEdxbUzoHmwri33jgk= Subject key identifier: 31:20:C4:AF:E6:39:7A:B4:52:FC:27:E0:E6:8D:00:09:D4:73:22:71 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B6797E993A8710CFD5A81FF80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 13335 IP address blocks: 96.43.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e9:93:a8:71:0c:fd:5a:81:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=519c2139-4d06-4dfe-92ed-47a569f60888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:22:f7:27:5f:e2:37:2a:22:25:20:8f:b4: a6:eb:e1:92:39:41:e8:64:28:0f:72:65:2a:56:78: 3b:4b:c7:13:c1:ba:c4:c5:9b:2a:25:b6:66:bd:2a: 93:cd:aa:97:ee:da:fe:ec:88:c2:07:c2:e0:e1:f9: cd:30:e0:35:28:70:1a:c4:65:9e:96:81:42:b0:07: a1:7a:ee:e7:a4:f2:ff:77:74:be:5b:81:05:42:07: a6:51:41:4e:bb:7f:2d:b6:24:68:09:73:1e:c3:71: c5:8a:64:8c:cb:ad:4b:43:3e:7c:5e:42:ce:3b:86: 42:19:cd:09:4c:f8:cd:61:7e:4c:67:67:5f:03:04: ae:53:7c:10:a7:21:51:ae:3a:7e:4a:8a:38:c2:17: 81:5e:ad:0d:52:10:9d:31:f9:48:25:aa:21:44:af: 0c:86:06:db:46:3f:81:53:d9:ec:fc:4f:ac:4c:fd: d3:66:f9:9e:82:a4:59:1b:be:be:4f:63:83:f8:2b: 2a:87:c4:aa:44:3c:57:b2:a5:dd:a4:d2:94:c1:0d: b3:ef:fc:a8:93:14:0f:a3:b9:05:0a:2a:42:28:40: 02:16:18:d6:67:cb:74:43:1d:9c:f4:85:00:ce:a8: b5:3b:e2:05:08:f1:48:75:19:01:d6:63:6a:47:dd: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:20:C4:AF:E6:39:7A:B4:52:FC:27:E0:E6:8D:00:09:D4:73:22:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:65:75:b2:fb:1e:71:d7:5f:ad:41:20:93:93:30:7a:5a: 64:c9:ae:28:85:03:ee:16:d1:ef:11:44:20:67:57:54:2d:dd: f3:c6:4a:27:9d:f4:d9:66:61:49:39:5e:f1:3a:d5:2f:6d:0c: 74:8b:66:27:6b:8f:98:ec:9c:2e:f0:ec:3b:1d:ac:b3:4e:94: 83:f2:c5:c2:2b:ea:ca:79:22:f8:cc:ba:17:44:e6:4e:06:d5: 31:2f:63:88:e8:b9:98:6b:74:ac:6e:74:cf:7e:7f:cc:69:09: eb:cf:1e:d1:14:e6:7b:6a:4d:27:e1:44:9b:0c:ac:78:4b:38: ca:6b:41:c3:6f:f1:5e:6a:4d:b8:29:1f:f9:41:67:fc:c8:ea: 7d:b4:af:42:5d:06:86:29:3d:52:56:ff:9f:8c:55:5a:f9:89: b2:fe:57:ff:1a:44:8e:77:a6:de:b6:55:19:73:68:59:7c:56: 84:e8:20:dd:d4:28:87:78:28:6b:55:d2:31:d9:be:8a:c0:b8: 7a:0c:6c:a9:af:2c:0b:18:ac:18:6c:1f:90:64:38:07:5b:45: 51:07:ea:53:94:b9:e8:7e:c4:b1:92:49:78:92:c4:63:86:90: 7b:5a:78:1b:97:d9:1c:03:4d:bf:d6:71:bb:f7:ac:98:e9:69: a1:61:7d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+mTqHEM/VqB/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTE5YzIxMzktNGQwNi00ZGZlLTkyZWQtNDdhNTY5ZjYwODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/Ei9ydf4jcqIiUgj7Sm6+GSOUHoZCgPcmUq Vng7S8cTwbrExZsqJbZmvSqTzaqX7tr+7IjCB8Lg4fnNMOA1KHAaxGWeloFCsAeh eu7npPL/d3S+W4EFQgemUUFOu38ttiRoCXMew3HFimSMy61LQz58XkLOO4ZCGc0J TPjNYX5MZ2dfAwSuU3wQpyFRrjp+Soo4wheBXq0NUhCdMflIJaohRK8MhgbbRj+B U9ns/E+sTP3TZvmegqRZG76+T2OD+Csqh8SqRDxXsqXdpNKUwQ2z7/yokxQPo7kF CipCKEACFhjWZ8t0Qx2c9IUAzqi1O+IFCPFIdRkB1mNqR93ZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEgxK/mOXq0Uvwn4OaNAAnUcyJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGMwNjUzZmItNmVlZS0z MjU2LWJjZjAtNTljNjNkZTcyZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2CZXWy+x5x11+tQSCTkzB6WmTJriiFA+4W0e8RRCBnV1Qt3fPGSied 9NlmYUk5XvE61S9tDHSLZidrj5jsnC7w7DsdrLNOlIPyxcIr6sp5IvjMuhdE5k4G 1TEvY4jouZhrdKxudM9+f8xpCevPHtEU5ntqTSfhRJsMrHhLOMprQcNv8V5qTbgp H/lBZ/zI6n20r0JdBoYpPVJW/5+MVVr5ibL+V/8aRI53pt62VRlzaFl8VoToIN3U KId4KGtV0jHZvorAuHoMbKmvLAsYrBhsH5BkOAdbRVEH6lOUueh+xLGSSXiSxGOG kHtaeBuX2RwDTb/Wcbv3rJjpaaFhfdc= -----END CERTIFICATE-----Generated at Sun Oct 19 22:26:01 2025 by rpki-client