$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa File: df52c9be-df94-3e2c-a85e-497f38382f3a.roa (raw, json) Hash identifier: DYNmZEOHQlaO/xxCrCvtq0cbml5GwJ8cdpG7EaS+YKI= Subject key identifier: 4D:6B:FD:C4:31:6A:BD:8C:47:5F:66:C9:C2:59:E6:65:F4:82:9C:DD Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584EF9E20F8A979FBF2565AF0F80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 401838 IP address blocks: 96.43.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0f:8a:97:9f:bf:25:65:af:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=f5e20d34-3baf-4bb4-81ff-1b707fbd2323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:87:77:5a:98:0f:ec:29:37:11:38:3f:66: 07:eb:58:7e:c0:58:7a:9d:33:f4:af:c7:f0:62:90: 78:c4:be:90:4b:c2:a8:df:65:fa:6c:47:07:35:62: 57:03:22:0a:ec:23:64:b9:f6:c8:f2:90:52:50:69: 72:6d:f3:4c:dc:e4:59:98:97:6a:ab:b0:36:f1:45: d0:32:b5:96:ba:0c:58:15:89:bf:3b:02:f5:35:e6: b7:6c:5a:04:a0:3a:9b:da:a7:42:84:bb:b1:3c:93: 41:47:0c:83:da:01:b4:01:35:a5:32:42:73:a9:d1: 2d:e2:cd:4d:26:86:67:69:d4:e7:a0:e2:4a:a2:13: e1:0a:21:31:63:c8:b5:bc:cd:a8:36:70:7a:5c:ee: 1b:22:b9:bd:1f:70:a8:cd:55:e0:7b:0b:b8:43:c3: ce:e4:20:06:e2:00:fa:0a:d6:ce:0c:36:39:35:bf: b9:5b:26:27:dc:af:17:72:67:ec:62:c1:a8:67:41: b3:96:b2:99:7c:06:34:45:d6:ef:dd:fa:34:77:6b: 26:92:9c:7a:a0:d5:91:da:f0:ea:8c:8d:4c:fb:bf: a8:37:1e:28:3d:04:9c:3b:36:8d:e5:f5:c4:39:86: f9:90:48:8d:a6:7f:34:9c:d1:2a:4f:85:98:09:30: 55:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:FD:C4:31:6A:BD:8C:47:5F:66:C9:C2:59:E6:65:F4:82:9C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/df52c9be-df94-3e2c-a85e-497f38382f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d4:1c:cf:cf:a4:bc:89:ca:26:2d:c6:7a:55:94:63:d3:4a: 24:6a:4b:02:59:ab:66:79:88:c5:61:49:fe:1d:e5:ef:90:ce: 58:38:4b:2a:2c:e4:37:e5:cc:85:4b:b9:3b:cc:c1:be:72:17: 48:d8:c0:a6:f3:f7:08:9d:da:c6:f5:b1:1c:47:27:b4:99:bd: 06:ef:6c:6d:d4:c7:08:7d:32:41:38:d1:3e:16:1c:ff:33:d2: 0e:2d:69:ac:16:ad:e5:1c:c9:14:ad:28:39:dc:b9:ac:33:42: 59:64:cf:50:32:b9:56:4d:3d:2b:2b:84:5f:45:3a:cd:ae:57: 67:3e:c3:99:16:28:5e:02:f1:e7:ee:53:ca:e2:bf:15:cb:b0: 48:22:bf:ad:42:1b:7e:2a:c6:7c:d3:90:f5:09:6c:88:f4:15: ab:73:8c:62:ad:1e:1c:4a:04:a0:6c:5c:05:3d:0c:74:b3:30: e5:cf:4b:e9:35:85:80:58:f3:51:e2:8c:4a:2e:95:6c:e6:cf: 2a:97:74:04:34:1d:be:4c:9e:b5:b6:ac:33:63:b0:45:aa:e4: f3:85:97:fe:0d:6e:7b:9a:24:a4:5d:9d:4a:7d:8a:33:22:66: 52:d4:ec:f3:87:d3:1c:36:2b:ae:aa:fd:ec:40:72:d8:9b:3b: 99:eb:da:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754g+Kl5+/JWWvD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjVlMjBkMzQtM2JhZi00YmI0LTgxZmYtMWI3MDdmYmQyMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwmHd1qYD+wpNxE4P2YH61h+wFh6nTP0r8fw YpB4xL6QS8Ko32X6bEcHNWJXAyIK7CNkufbI8pBSUGlybfNM3ORZmJdqq7A28UXQ MrWWugxYFYm/OwL1Nea3bFoEoDqb2qdChLuxPJNBRwyD2gG0ATWlMkJzqdEt4s1N JoZnadTnoOJKohPhCiExY8i1vM2oNnB6XO4bIrm9H3CozVXgewu4Q8PO5CAG4gD6 CtbODDY5Nb+5WyYn3K8XcmfsYsGoZ0GzlrKZfAY0Rdbv3fo0d2smkpx6oNWR2vDq jI1M+7+oNx4oPQScOzaN5fXEOYb5kEiNpn80nNEqT4WYCTBVtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1r/cQxar2MR19mycJZ5mX0gpzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGY1MmM5YmUtZGY5NC0z ZTJjLWE4NWUtNDk3ZjM4MzgyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzUHM/PpLyJyiYtxnpVlGPTSiRqSwJZq2Z5iMVhSf4d5e+Qzlg4Syos 5DflzIVLuTvMwb5yF0jYwKbz9wid2sb1sRxHJ7SZvQbvbG3Uxwh9MkE40T4WHP8z 0g4taawWreUcyRStKDncuawzQllkz1AyuVZNPSsrhF9FOs2uV2c+w5kWKF4C8efu U8rivxXLsEgiv61CG34qxnzTkPUJbIj0FatzjGKtHhxKBKBsXAU9DHSzMOXPS+k1 hYBY81HijEoulWzmzyqXdAQ0Hb5MnrW2rDNjsEWq5POFl/4NbnuaJKRdnUp9ijMi ZlLU7POH0xw2K66q/exActibO5nr2j0= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:04 2026 by rpki-client