$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ecea10e3-65d6-3c9b-996e-5ba3ef32be99.roa File: ecea10e3-65d6-3c9b-996e-5ba3ef32be99.roa (raw, json) Hash identifier: +ni1oLwjUUtt4nDb1E9Hj2DAa0qAjMUt1mhgAngXyfQ= Subject key identifier: 3D:DB:5C:F1:19:E4:B3:58:8D:D0:59:5C:E1:3F:06:0E:A1:5E:81:B8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F498A1438665F047ABC5A5F48 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ecea10e3-65d6-3c9b-996e-5ba3ef32be99.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54339 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:14:38:66:5f:04:7a:bc:5a:5f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0316e1d1-ba2b-4079-a7eb-16cf1a5d677d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:49:a1:61:1d:ec:48:27:b4:ab:00:a5:9b:86: 38:09:83:ab:d4:4b:3e:bd:f9:76:28:7a:ef:6f:86: df:05:a3:ad:b0:2b:91:45:9a:9b:95:d8:35:d9:96: 3b:84:4a:01:79:23:31:f0:7a:3d:0f:c2:ac:83:ec: 7c:59:70:1a:9b:c3:1f:37:79:f4:73:fe:cf:22:6e: 8f:ae:24:d5:09:79:96:06:40:cc:d0:5a:ad:52:70: 54:7d:1c:2a:b7:73:4f:b9:ef:5f:9a:b9:c5:3f:ed: f4:a6:2b:5a:eb:0d:5a:98:24:8f:1b:b3:f4:a0:d7: 6b:d6:52:d9:49:55:a2:bf:95:03:18:05:06:97:11: 0d:c5:2b:46:eb:c1:61:cc:3e:5b:f8:86:13:37:09: f2:83:87:e2:df:b9:0c:b7:84:a8:83:45:a9:fa:b4: e3:93:f3:6f:d7:13:4f:3e:19:b2:c5:7d:20:4d:d6: 9e:8e:a9:a7:a5:d2:84:1c:f0:29:1f:75:47:c2:28: b4:50:e7:5c:39:e1:d5:88:be:46:43:08:0f:2b:f3: e3:64:54:5f:cb:7f:e1:9c:06:8b:8b:18:04:89:c7: ba:90:11:d8:ee:18:a1:64:c1:fe:8e:db:8d:db:69: 0d:f4:59:f7:c5:24:01:df:6e:b9:97:74:7d:a3:b9: a1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:5C:F1:19:E4:B3:58:8D:D0:59:5C:E1:3F:06:0E:A1:5E:81:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ecea10e3-65d6-3c9b-996e-5ba3ef32be99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cc:79:4c:9d:cd:95:80:ca:c2:3c:2b:9d:02:06:2c:d3:e6: 23:8d:7a:93:e7:9d:01:a8:fe:e5:32:ad:91:6e:4c:65:35:73: e3:54:b7:53:2c:09:9e:0d:7e:02:c7:04:ba:ac:5c:2f:b7:f2: 4b:49:d6:c5:7b:cb:04:b5:63:15:be:6c:7f:56:d4:20:39:a5: 75:42:ce:28:e0:d9:d0:5f:35:c1:42:9a:4b:63:53:ec:8a:ff: 1a:d5:e9:9d:3f:75:9e:3f:d8:5b:9d:e8:b9:83:7b:fb:ef:0a: 1e:b2:45:c7:77:87:b2:ab:c3:49:15:da:fe:c1:e4:9c:c3:9e: 8d:af:01:aa:f1:98:8f:34:06:21:b8:d6:97:f8:c2:5a:bd:c4: 8e:7c:5a:00:85:8f:d7:ea:c4:7a:d2:0f:6a:b9:51:07:02:96: 8a:70:74:73:12:dd:9a:5d:25:85:cd:b4:82:94:05:6b:31:36: 6a:8d:49:a6:69:a4:e4:32:f6:13:0a:c0:2c:d2:41:8a:a6:06: 27:0f:55:79:de:eb:03:5e:09:4e:49:56:ef:08:20:bd:70:b4: 76:1c:be:fb:f9:41:e2:27:07:d0:79:b7:b2:fc:80:95:7e:a6: 06:b2:ef:72:24:e3:f4:89:25:a6:fe:06:e6:e8:26:9b:42:ff: 53:93:d6:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JihQ4Zl8EerxaX0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDMxNmUxZDEtYmEyYi00MDc5LWE3ZWItMTZjZjFhNWQ2NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUmhYR3sSCe0qwClm4Y4CYOr1Es+vfl2KHrv b4bfBaOtsCuRRZqbldg12ZY7hEoBeSMx8Ho9D8Ksg+x8WXAam8MfN3n0c/7PIm6P riTVCXmWBkDM0FqtUnBUfRwqt3NPue9fmrnFP+30pita6w1amCSPG7P0oNdr1lLZ SVWiv5UDGAUGlxENxStG68FhzD5b+IYTNwnyg4fi37kMt4Sog0Wp+rTjk/Nv1xNP PhmyxX0gTdaejqmnpdKEHPApH3VHwii0UOdcOeHViL5GQwgPK/PjZFRfy3/hnAaL ixgEice6kBHY7hihZMH+jtuN22kN9Fn3xSQB3265l3R9o7mhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3bXPEZ5LNYjdBZXOE/Bg6hXoG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZWNlYTEwZTMtNjVkNi0z YzliLTk5NmUtNWJhM2VmMzJiZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITMeUydzZWAysI8K50CBizT5iONepPnnQGo/uUyrZFuTGU1c+NUt1Ms CZ4NfgLHBLqsXC+38ktJ1sV7ywS1YxW+bH9W1CA5pXVCzijg2dBfNcFCmktjU+yK /xrV6Z0/dZ4/2Fud6LmDe/vvCh6yRcd3h7Krw0kV2v7B5JzDno2vAarxmI80BiG4 1pf4wlq9xI58WgCFj9fqxHrSD2q5UQcClopwdHMS3ZpdJYXNtIKUBWsxNmqNSaZp pOQy9hMKwCzSQYqmBicPVXne6wNeCU5JVu8IIL1wtHYcvvv5QeInB9B5t7L8gJV+ pgay73Ik4/SJJab+BuboJptC/1OT1vE= -----END CERTIFICATE-----Generated at Sun Sep 27 10:32:36 2026 by rpki-client