$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa File: df52c9be-df94-3e2c-a85e-497f38382f3a.roa (raw, json) Hash identifier: P26I2PrvWzgN3J3tiIpYTMFk7BZVMv7hMv3ABAiDovg= Subject key identifier: C4:EE:5C:D9:E1:40:FF:FF:E7:4F:EC:90:4D:1D:BD:59:47:E8:99:BB Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F9BCDF1846BA5D4B42A12F180 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 401838 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:f1:84:6b:a5:d4:b4:2a:12:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=020d89bc-fc71-4b82-8814-899fdc779856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:84:e6:6a:6d:7b:91:7f:79:1c:55:74:c6: 91:4d:95:c5:06:12:38:96:59:a0:e0:87:cd:35:93: 38:7b:81:b5:3b:f5:56:c6:c5:9e:2c:eb:2b:f6:8c: 1f:1a:fb:98:11:e2:c7:8b:a4:79:85:f3:f9:64:be: 6f:c5:75:fd:a5:a6:a2:24:bc:c4:ff:2a:23:78:88: 13:56:73:a9:db:51:6f:e4:0c:e6:a4:1d:cc:6f:4e: 9c:50:33:bb:ae:e5:10:ab:80:08:70:db:ef:06:33: b9:59:88:f2:27:1a:d7:67:95:9c:e7:04:ef:d3:bc: 52:aa:c4:60:eb:96:ea:dd:09:82:60:1b:96:ea:d7: 9b:88:17:ff:d9:f0:8c:1a:33:b8:9a:30:94:27:9a: 54:dc:bf:f1:db:2b:41:6c:a8:65:37:67:f0:59:7e: f1:c1:e7:6a:f7:e8:0b:af:a7:b2:45:73:62:ea:e5: 26:0b:fa:82:62:c8:4d:ec:1a:f5:89:c0:e1:91:d8: fb:fe:2a:d9:f7:80:a7:ea:15:d4:21:7c:a1:17:43: c0:54:52:03:23:da:15:9a:89:2f:f5:af:15:65:c5: 3c:ef:1b:04:8f:70:f2:56:9e:3a:c2:80:91:02:03: 6c:5e:e6:95:28:f1:e9:7f:8d:3b:5f:70:b2:42:44: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:5C:D9:E1:40:FF:FF:E7:4F:EC:90:4D:1D:BD:59:47:E8:99:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1b:cb:43:11:05:f4:56:1c:8b:a2:be:fa:af:1e:2d:71:9d: 2d:31:e8:af:be:cf:9b:91:2a:02:40:64:d4:46:a2:f3:bb:a0: 76:dd:22:ee:be:57:70:ad:6a:ab:f9:8f:2a:83:57:b9:3b:db: 13:e4:30:ae:77:8c:d1:d1:70:ba:1a:26:87:bb:05:ec:6d:54: e5:9a:dd:38:6c:93:59:a1:7c:16:d2:99:e1:90:b1:4f:3e:c0: c5:28:b1:90:c2:21:4c:fe:bc:e3:8a:d0:88:15:96:2e:ac:6e: de:38:16:89:5f:2a:40:0e:f5:26:e9:f4:b8:ed:4e:95:58:53: 62:cf:26:0e:ae:fb:b6:c9:94:ef:80:e6:83:f4:0c:6b:c2:05: 1f:33:e8:c7:c7:23:e9:6a:f5:80:38:cc:e5:b3:e7:63:1e:bc: c3:31:f2:de:1a:df:77:06:97:7d:9a:f3:7f:e0:a8:b4:9c:5e: 67:28:2f:40:8d:33:1d:97:2f:62:ab:33:52:83:7b:46:68:09: 13:a4:a8:89:d4:05:91:a0:c2:ae:47:21:76:a2:af:2b:2f:8b: 01:d8:77:7c:70:98:33:47:55:85:79:73:f7:df:f2:52:fa:18: fd:b2:d4:97:fa:0e:6b:5f:16:85:5a:d6:f8:2b:14:e1:32:01: a9:6e:b3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzfGEa6XUtCoS8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MDIwZDg5YmMtZmM3MS00YjgyLTg4MTQtODk5ZmRjNzc5ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnqE5mpte5F/eRxVdMaRTZXFBhI4llmg4IfN NZM4e4G1O/VWxsWeLOsr9owfGvuYEeLHi6R5hfP5ZL5vxXX9paaiJLzE/yojeIgT VnOp21Fv5AzmpB3Mb06cUDO7ruUQq4AIcNvvBjO5WYjyJxrXZ5Wc5wTv07xSqsRg 65bq3QmCYBuW6tebiBf/2fCMGjO4mjCUJ5pU3L/x2ytBbKhlN2fwWX7xwedq9+gL r6eyRXNi6uUmC/qCYshN7Br1icDhkdj7/irZ94Cn6hXUIXyhF0PAVFIDI9oVmokv 9a8VZcU87xsEj3DyVp46woCRAgNsXuaVKPHpf407X3CyQkSBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTuXNnhQP//50/skE0dvVlH6Jm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGY1MmM5YmUtZGY5NC0z ZTJjLWE4NWUtNDk3ZjM4MzgyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQby0MRBfRWHIuivvqvHi1xnS0x6K++z5uRKgJAZNRGovO7oHbdIu6+ V3Ctaqv5jyqDV7k72xPkMK53jNHRcLoaJoe7BextVOWa3Thsk1mhfBbSmeGQsU8+ wMUosZDCIUz+vOOK0IgVli6sbt44FolfKkAO9Sbp9LjtTpVYU2LPJg6u+7bJlO+A 5oP0DGvCBR8z6MfHI+lq9YA4zOWz52MevMMx8t4a33cGl32a83/gqLScXmcoL0CN Mx2XL2KrM1KDe0ZoCROkqInUBZGgwq5HIXairysviwHYd3xwmDNHVYV5c/ff8lL6 GP2y1Jf6DmtfFoVa1vgrFOEyAalus7w= -----END CERTIFICATE-----Generated at Tue Oct 27 22:39:02 2026 by rpki-client