$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa File: 12b40f97-543d-3383-8955-a199391a3d00.roa (raw, json) Hash identifier: vNqycPNjSJSAJ6qNiNlfD5vu8dhNhVVJeuZM4tQsI5w= Subject key identifier: 01:F2:23:81:9D:75:6F:B1:3F:72:67:46:57:6A:1F:7A:3B:D4:8F:42 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584ECBD1EB82FB58F50A3D453F00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 979 IP address blocks: 96.43.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:eb:82:fb:58:f5:0a:3d:45:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=f8d95707-c561-4766-9636-062158a8ccf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:2a:3d:79:ab:33:0b:bb:27:6f:a7:08:88: aa:9a:5a:b7:dd:a8:d8:51:f5:bf:2b:30:49:58:02: f6:01:5c:e6:db:1c:fc:6a:4e:84:06:bc:f9:2e:b6: a2:9d:71:7b:65:48:88:97:1e:28:f4:ab:0d:e2:c4: ed:63:5e:78:12:21:36:4e:e1:6d:0e:cf:2d:ae:bc: c1:78:dd:ec:c5:9d:98:f3:79:11:1e:69:f6:2b:25: b8:03:8f:58:98:5e:5f:21:d6:bd:42:42:38:8a:bf: 0b:d5:97:2a:24:14:dc:85:c4:05:ec:cd:bf:8a:2a: 0b:d3:ca:ff:d2:b2:2a:c6:87:dd:df:4f:f4:07:f3: f9:2c:56:99:06:53:06:5c:e0:ac:9d:19:0b:b6:36: 87:63:8c:d0:95:49:f4:d3:b7:a6:dd:88:b1:af:87: 9d:6b:ce:a3:56:f9:2b:10:c6:ce:6c:ed:a7:3a:49: cd:e5:bf:2a:6c:d3:99:37:5a:d4:6a:88:fc:54:3d: a1:8f:03:a5:27:ce:a6:c8:6b:35:63:d3:66:2f:bd: bc:8c:c0:08:74:43:ac:83:3c:7b:38:53:a5:05:14: e1:f7:48:16:cf:0b:06:b7:f5:76:d1:b2:99:d7:a3: 9d:e0:6a:62:44:4e:dd:89:79:a0:af:ff:19:23:f4: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F2:23:81:9D:75:6F:B1:3F:72:67:46:57:6A:1F:7A:3B:D4:8F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/12b40f97-543d-3383-8955-a199391a3d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:53:a0:f0:b1:3f:ee:11:42:b8:57:43:52:3e:95:32:21:5b: f4:7f:1d:d3:90:b6:3a:50:3d:9a:05:34:c7:7b:ee:a9:4f:50: dd:d9:af:3b:2f:21:3a:55:40:e6:15:0a:05:2a:fa:9f:3d:f4: 57:af:fb:88:05:2f:69:a6:0d:31:89:1e:a6:73:34:ee:98:94: e2:73:58:70:b6:4b:56:d1:8b:fd:10:13:7d:fa:f2:fb:26:f6: b6:4a:4c:fc:0b:39:f7:ad:35:11:31:d5:b8:ec:2e:b3:0b:9b: e8:a1:47:19:fa:7b:36:0a:77:68:2d:a9:a6:98:4e:29:c1:7d: 19:97:12:3a:b9:04:11:96:81:ba:78:43:2c:3c:75:62:8e:cb: 42:c6:a3:eb:0a:20:46:56:c2:e5:3a:8a:c0:a4:a0:9d:37:5a: 7c:58:84:53:b9:b2:bd:29:05:bd:34:30:c4:68:10:25:c6:7c: 94:b9:df:ad:26:23:48:48:d6:ba:5a:63:70:12:b6:fb:81:43: 22:e6:31:e4:fd:33:78:02:23:b7:a4:08:0c:6d:31:8e:88:4e: 09:ea:c3:f6:de:f9:22:ec:cb:bc:dc:9c:d4:68:89:84:0e:27: fa:de:0c:a8:2c:6d:83:6a:71:35:a5:0c:c5:f0:3a:f3:7d:04: ca:ad:d8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0euC+1j1Cj1FPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZjhkOTU3MDctYzU2MS00NzY2LTk2MzYtMDYyMTU4YThjY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rAqPXmrMwu7J2+nCIiqmlq33ajYUfW/KzBJ WAL2AVzm2xz8ak6EBrz5LrainXF7ZUiIlx4o9KsN4sTtY154EiE2TuFtDs8trrzB eN3sxZ2Y83kRHmn2KyW4A49YmF5fIda9QkI4ir8L1ZcqJBTchcQF7M2/iioL08r/ 0rIqxofd30/0B/P5LFaZBlMGXOCsnRkLtjaHY4zQlUn007em3Yixr4eda86jVvkr EMbObO2nOknN5b8qbNOZN1rUaoj8VD2hjwOlJ86myGs1Y9NmL728jMAIdEOsgzx7 OFOlBRTh90gWzwsGt/V20bKZ16Od4GpiRE7diXmgr/8ZI/R7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHyI4GddW+xP3JnRldqH3o71I9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTJiNDBmOTctNTQzZC0z MzgzLTg5NTUtYTE5OTM5MWEzZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVToPCxP+4RQrhXQ1I+lTIhW/R/HdOQtjpQPZoFNMd77qlPUN3Zrzsv ITpVQOYVCgUq+p899Fev+4gFL2mmDTGJHqZzNO6YlOJzWHC2S1bRi/0QE3368vsm 9rZKTPwLOfetNREx1bjsLrMLm+ihRxn6ezYKd2gtqaaYTinBfRmXEjq5BBGWgbp4 Qyw8dWKOy0LGo+sKIEZWwuU6isCkoJ03WnxYhFO5sr0pBb00MMRoECXGfJS5360m I0hI1rpaY3AStvuBQyLmMeT9M3gCI7ekCAxtMY6ITgnqw/be+SLsy7zcnNRoiYQO J/reDKgsbYNqcTWlDMXwOvN9BMqt2NY= -----END CERTIFICATE-----Generated at Sat Sep 19 10:05:55 2026 by rpki-client