$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa File: 78b57014-1aa5-3718-9292-533882360efc.roa (raw, json) Hash identifier: qlMvF2cxfLkjc+kWm0AK37/daKTm8kiYbMkWRj6hQ/s= Subject key identifier: 3D:2E:8A:DF:F8:8A:05:A5:90:AD:25:8E:70:CE:3B:8A:0E:3A:B7:FF Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AF487F7E4ED4DBCC6348DE400 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa Signing time: Sat 23 Aug 2025 19:51:58 +0000 ROA not before: Sat 23 Aug 2025 19:51:58 +0000 ROA not after: Fri 21 Nov 2025 20:51:58 +0000 asID: 23470 IP address blocks: 96.43.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:87:f7:e4:ed:4d:bc:c6:34:8d:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 23 19:51:58 2025 GMT Not After : Nov 21 20:51:58 2025 GMT Subject: CN=c87d9527-e7ef-43aa-bcb6-71585b017b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:4b:63:53:e8:e9:ac:5b:e4:05:14:9b:88: 53:27:ef:64:35:80:70:10:d9:c2:96:a2:59:84:f6: 60:8c:e3:21:d5:8b:46:ac:02:b9:47:6e:a4:25:5b: 34:57:16:1d:7d:4f:ec:9e:15:2c:1e:1b:06:da:3e: c5:2c:a0:93:81:ab:4b:ba:9b:51:ff:0b:ee:e8:9a: db:4a:ca:4d:ed:f4:79:af:53:63:38:ae:68:df:5a: c0:13:5d:fb:3b:6e:4c:d5:08:09:00:6a:fd:33:95: 1b:c7:7d:a0:ee:52:5c:45:c5:93:b7:4b:34:71:bd: 53:a8:38:17:cc:30:f1:e1:30:d8:cb:14:cc:7d:75: 2a:6d:2b:73:96:92:9f:6d:8d:48:fd:a7:12:90:a4: ee:e3:16:93:a6:61:97:95:16:2b:65:dc:58:5a:01: 5f:20:29:39:c8:82:09:1a:71:d0:b9:bc:ed:16:49: b5:d9:be:e0:cc:3e:44:f5:26:bd:d1:03:56:64:f3: be:83:be:a4:73:e1:62:b6:a6:8b:45:af:81:4f:83: b5:86:f4:7a:39:a6:3d:3f:3b:4e:f2:2d:c9:05:41: 54:e8:60:ac:6e:5d:6a:99:9e:e1:04:c9:ba:e9:b4: aa:2a:bb:a8:28:9c:a9:f5:bc:01:1c:30:66:d9:da: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:8A:DF:F8:8A:05:A5:90:AD:25:8E:70:CE:3B:8A:0E:3A:B7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:62:d6:cf:00:dc:b6:19:58:ea:9b:53:98:08:ae:d2:99:99: de:31:ad:44:2f:7b:1c:46:cc:b3:b3:59:13:ff:c0:0e:86:0a: b2:c7:da:0d:69:ce:55:14:d1:53:84:3d:ee:7e:4a:45:6e:a7: af:d8:d4:e5:9e:56:71:68:86:fb:f4:89:91:50:47:a4:af:5a: a2:cb:cb:2d:6e:c5:5d:2f:b3:cc:4f:5e:71:da:37:ef:2f:b0: 33:95:7a:f4:c9:69:dd:35:04:ee:0c:1b:6a:11:67:10:f5:32: ff:55:59:e4:b4:64:70:14:c1:0f:8a:f6:91:cc:f3:0c:bf:11: a5:64:36:64:51:d9:6a:b1:5c:15:0a:cf:b7:ac:72:3e:b3:38: 1f:7b:49:d5:1c:b6:42:c8:c0:0c:3d:c5:2a:30:e7:63:81:cd: 64:2a:c7:2c:91:65:bd:3d:c5:fb:65:43:4c:6a:1f:2d:c9:6b: 37:f6:13:86:ca:b3:7d:b1:6e:ce:b6:51:d6:0b:7b:46:14:16: 45:89:a8:2d:2c:d5:6d:a0:7b:f9:b3:97:b0:27:fa:36:2e:7e: 04:ff:45:b2:68:b8:64:98:b1:64:cc:cd:e7:a9:58:6b:f3:4a: 45:ba:b2:5f:ba:a1:cd:66:b6:7d:20:1f:53:35:ad:fa:4e:53: 70:a3:5a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr0h/fk7U28xjSN5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDgyMzE5NTE1OFoXDTI1MTEyMTIwNTE1OFowLzEtMCsGA1UEAxMk Yzg3ZDk1MjctZTdlZi00M2FhLWJjYjYtNzE1ODViMDE3YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnJLY1Po6axb5AUUm4hTJ+9kNYBwENnClqJZ hPZgjOMh1YtGrAK5R26kJVs0VxYdfU/snhUsHhsG2j7FLKCTgatLuptR/wvu6Jrb SspN7fR5r1NjOK5o31rAE137O25M1QgJAGr9M5Ubx32g7lJcRcWTt0s0cb1TqDgX zDDx4TDYyxTMfXUqbStzlpKfbY1I/acSkKTu4xaTpmGXlRYrZdxYWgFfICk5yIIJ GnHQubztFkm12b7gzD5E9Sa90QNWZPO+g76kc+FitqaLRa+BT4O1hvR6OaY9PztO 8i3JBUFU6GCsbl1qmZ7hBMm66bSqKruoKJyp9bwBHDBm2dpCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0uit/4igWlkK0ljnDOO4oOOrf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzhiNTcwMTQtMWFhNS0z NzE4LTkyOTItNTMzODgyMzYwZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVi1s8A3LYZWOqbU5gIrtKZmd4xrUQvexxGzLOzWRP/wA6GCrLH2g1p zlUU0VOEPe5+SkVup6/Y1OWeVnFohvv0iZFQR6SvWqLLyy1uxV0vs8xPXnHaN+8v sDOVevTJad01BO4MG2oRZxD1Mv9VWeS0ZHAUwQ+K9pHM8wy/EaVkNmRR2WqxXBUK z7escj6zOB97SdUctkLIwAw9xSow52OBzWQqxyyRZb09xftlQ0xqHy3Jazf2E4bK s32xbs62UdYLe0YUFkWJqC0s1W2ge/mzl7An+jYufgT/RbJouGSYsWTMzeepWGvz SkW6sl+6oc1mtn0gH1M1rfpOU3CjWsM= -----END CERTIFICATE-----Generated at Sat Sep 6 07:09:21 2025 by rpki-client