$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa File: bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa (raw, json) Hash identifier: qX6qIkCHglw3ClFy5SIJJvNa6fPcatY6wRUwHfKTi4k= Subject key identifier: 7A:1B:7E:1E:74:19:6A:64:78:F3:92:24:82:19:5E:5F:C5:F2:5F:F3 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F0903BC8D6006068BC9F76900 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa Signing time: Tue 01 Sep 2026 23:05:15 +0000 ROA not before: Tue 01 Sep 2026 23:05:15 +0000 ROA not after: Tue 01 Dec 2026 00:05:15 +0000 asID: 397423 IP address blocks: 96.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:03:bc:8d:60:06:06:8b:c9:f7:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 1 23:05:15 2026 GMT Not After : Dec 1 00:05:15 2026 GMT Subject: CN=5073cc28-1e6c-410c-952e-be087d7cc25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b8:49:4f:76:c9:df:fe:9b:1c:b4:4f:b2:92: 51:e7:4c:ab:9b:eb:52:ab:40:ab:43:a8:f4:93:9a: fe:37:e1:44:03:23:42:c3:76:b7:8b:42:52:70:6e: 80:83:cb:cd:c4:d3:4a:8a:fd:97:bb:09:e3:e2:e0: 88:87:59:d2:59:06:fa:b1:81:f2:05:45:7b:8a:ac: d2:cb:54:ec:4b:c8:35:c3:31:82:78:2f:d0:55:24: bd:ce:cd:22:62:18:6f:06:59:63:f1:35:55:b4:4c: 7a:53:d8:cb:f9:9b:08:61:71:fa:6e:54:a7:c5:ec: 43:2e:0d:de:71:3b:d1:7f:a6:e7:0d:c9:e9:a4:6d: 5b:cf:9a:53:98:e9:d2:74:51:5f:42:c6:b7:08:eb: 01:f6:43:a4:fc:f0:eb:aa:19:44:3b:86:d9:89:b1: 4e:94:44:17:01:6a:f6:6a:10:ea:6d:3b:1d:ee:4e: f7:cc:da:98:1e:d7:e3:02:6c:2b:06:08:f1:fd:b9: 15:b5:8b:af:7f:73:75:dd:b8:a0:ca:72:02:a0:df: d0:c1:23:a5:33:90:fb:d8:2f:ad:b1:09:f6:b3:e3: 93:56:b7:72:80:b9:8c:08:a2:96:42:4e:7d:73:55: 64:21:4c:db:fd:47:52:0a:cf:93:77:bd:b9:8d:16: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1B:7E:1E:74:19:6A:64:78:F3:92:24:82:19:5E:5F:C5:F2:5F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/bf7b4fb7-89e4-3c45-813e-e6c8ea5c32ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:be:e6:bc:4a:c6:b8:25:00:2f:63:bb:89:c6:e3:a4:a3:c4: 89:83:06:e8:75:76:8a:34:d7:5e:9f:af:1d:30:34:17:07:98: 97:3b:3d:ec:a5:b7:72:9c:7d:c5:20:e7:d6:d7:11:99:45:5e: 53:84:e2:dd:ef:da:b5:1c:5a:56:6e:c5:9e:c9:15:71:c7:1b: ff:a0:af:86:c0:0d:71:49:f3:d9:ff:21:d8:30:98:1e:da:76: f8:df:85:7c:e8:68:14:32:4e:83:91:81:70:d0:35:d8:40:58: bb:b9:47:c9:bc:2c:ce:7d:98:99:b6:56:be:02:0e:29:dc:7d: 93:1b:85:9d:2f:50:ee:17:1c:b8:53:36:c2:3d:6f:1f:f9:53: 22:5e:1a:65:92:88:b2:2a:76:d3:b0:68:17:69:04:43:9f:b7: 73:1f:bb:e8:9e:ee:37:2e:83:3e:df:92:51:aa:47:86:54:05: de:25:24:e8:b3:13:db:d9:af:ea:83:c2:ef:87:e9:59:86:ff: 23:c3:66:c0:82:ea:a7:5b:02:00:6f:1d:87:5f:ed:f3:41:99: 19:74:38:9d:7f:9f:bf:23:62:ba:b1:b3:92:50:a9:78:50:50: f1:d1:93:5e:aa:66:24:2d:03:83:90:2d:43:5f:d2:75:fd:44: 29:3a:ba:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JA7yNYAYGi8n3aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkwMTIzMDUxNVoXDTI2MTIwMTAwMDUxNVowLzEtMCsGA1UEAxMk NTA3M2NjMjgtMWU2Yy00MTBjLTk1MmUtYmUwODdkN2NjMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrhJT3bJ3/6bHLRPspJR50yrm+tSq0CrQ6j0 k5r+N+FEAyNCw3a3i0JScG6Ag8vNxNNKiv2Xuwnj4uCIh1nSWQb6sYHyBUV7iqzS y1TsS8g1wzGCeC/QVSS9zs0iYhhvBllj8TVVtEx6U9jL+ZsIYXH6blSnxexDLg3e cTvRf6bnDcnppG1bz5pTmOnSdFFfQsa3COsB9kOk/PDrqhlEO4bZibFOlEQXAWr2 ahDqbTsd7k73zNqYHtfjAmwrBgjx/bkVtYuvf3N13bigynICoN/QwSOlM5D72C+t sQn2s+OTVrdygLmMCKKWQk59c1VkIUzb/UdSCs+Td725jRZVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHobfh50GWpkePOSJIIZXl/F8l/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYmY3YjRmYjctODllNC0z YzQ1LTgxM2UtZTZjOGVhNWMzMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW+5rxKxrglAC9ju4nG46SjxImDBuh1doo0116frx0wNBcHmJc7Peyl t3KcfcUg59bXEZlFXlOE4t3v2rUcWlZuxZ7JFXHHG/+gr4bADXFJ89n/IdgwmB7a dvjfhXzoaBQyToORgXDQNdhAWLu5R8m8LM59mJm2Vr4CDincfZMbhZ0vUO4XHLhT NsI9bx/5UyJeGmWSiLIqdtOwaBdpBEOft3Mfu+ie7jcugz7fklGqR4ZUBd4lJOiz E9vZr+qDwu+H6VmG/yPDZsCC6qdbAgBvHYdf7fNBmRl0OJ1/n78jYrqxs5JQqXhQ UPHRk16qZiQtA4OQLUNf0nX9RCk6urk= -----END CERTIFICATE-----Generated at Thu Sep 3 20:27:14 2026 by rpki-client