$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa File: 807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa (raw, json) Hash identifier: tE4wA2ov25iYSTa96NNahtKKrhwoo3waPIJSfVusMW0= Subject key identifier: D9:2E:7D:54:A7:52:EB:33:48:6F:F1:A7:8E:CD:5D:75:56:20:C5:A3 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F5E62AC53E8E6C5C59584A500 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 64267 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ac:53:e8:e6:c5:c5:95:84:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b7899290-ac37-474b-9f60-5dd379d73771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:2f:43:81:bf:67:42:2d:7b:e5:23:6e:22: b7:fe:34:37:97:de:f4:35:39:fb:69:d2:9d:cd:3d: 79:49:7b:eb:18:a8:86:dd:8a:fe:82:ee:23:ea:22: 49:31:6d:80:76:cf:c2:76:af:c3:65:48:01:a2:df: 52:d5:80:3a:fe:48:6c:af:2a:7e:e0:ad:ef:b0:12: cd:c4:8a:74:47:1e:bc:e4:9a:69:49:84:fc:11:ba: fc:c2:95:11:ce:ea:42:43:34:b5:6a:f8:8a:89:ca: df:84:be:a8:b8:c5:04:5b:cd:cd:c7:a4:c4:44:4d: b4:e2:2e:83:67:9c:57:4a:d5:06:ee:2a:ba:3a:62: b3:7a:c2:fd:2d:9c:e7:23:5e:47:f7:63:2c:3e:c3: f6:01:c4:90:9f:bd:8d:31:e3:be:8b:33:0e:e5:00: 29:92:1e:b0:a0:2c:1e:77:ff:05:99:21:9b:45:ca: 29:f9:ff:83:2b:12:9e:bb:69:97:83:c2:fe:9b:f5: 77:ac:12:ae:c6:b4:4c:9f:35:11:dd:ad:6c:8f:79: ba:65:38:52:51:71:e1:6f:2b:a4:45:9b:11:62:35: 26:7f:3b:76:4e:d3:38:88:e6:b6:03:76:09:57:c9: b2:2f:10:46:be:0a:a7:6e:89:2b:74:e4:85:25:19: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:7D:54:A7:52:EB:33:48:6F:F1:A7:8E:CD:5D:75:56:20:C5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ea:0a:e5:96:d9:78:d6:5f:d7:f0:53:ff:9e:b0:e6:56:33: b8:54:61:09:bc:70:ee:47:3d:a2:3a:fe:95:0e:17:8e:c2:50: fa:f9:b5:2a:53:74:64:1d:10:ad:05:8d:05:bd:2d:a8:fd:71: 14:5f:d3:8e:58:c8:a4:bd:fa:29:24:7f:7d:72:81:c7:2c:74: 73:a5:19:70:3d:c8:09:7b:c3:3a:e8:48:b4:9c:f9:db:f3:9f: b0:e2:04:53:2e:36:7c:c0:e6:6d:d2:e2:13:40:2c:b6:0e:8e: d1:78:d0:6e:d3:cf:31:a3:da:f9:f3:fb:aa:36:6a:6e:f3:06: f3:80:c6:59:a7:0a:16:bd:64:a5:f1:1a:a1:5f:f6:4e:80:e8: 52:c6:51:02:90:1c:37:5f:51:40:92:e8:c2:e3:d8:07:55:29: 7f:f4:4f:23:98:c0:03:35:bd:fd:f9:73:17:62:ab:18:43:ae: f8:4a:51:e5:1e:50:98:ec:26:2f:f6:2d:b8:b5:c2:e8:78:6e: 74:56:e2:1c:83:96:57:73:43:11:d1:81:29:2d:4d:cb:8f:c2: ae:44:5a:25:f7:a9:8c:9a:18:14:27:6d:52:46:d1:01:1a:a9: d5:c9:49:fb:37:0a:44:3c:0e:9e:43:ad:23:a3:4d:fe:dc:f9: 57:67:88:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYqxT6ObFxZWEpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk Yjc4OTkyOTAtYWMzNy00NzRiLTlmNjAtNWRkMzc5ZDczNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtIvQ4G/Z0Ite+UjbiK3/jQ3l970NTn7adKd zT15SXvrGKiG3Yr+gu4j6iJJMW2Ads/Cdq/DZUgBot9S1YA6/khsryp+4K3vsBLN xIp0Rx685JppSYT8Ebr8wpURzupCQzS1aviKicrfhL6ouMUEW83Nx6TERE204i6D Z5xXStUG7iq6OmKzesL9LZznI15H92MsPsP2AcSQn72NMeO+izMO5QApkh6woCwe d/8FmSGbRcop+f+DKxKeu2mXg8L+m/V3rBKuxrRMnzUR3a1sj3m6ZThSUXHhbyuk RZsRYjUmfzt2TtM4iOa2A3YJV8myLxBGvgqnbokrdOSFJRm8lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkufVSnUuszSG/xp47NXXVWIMWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvODA3YjJmMGEtMTc0OC0z NGIyLWIxN2QtNjc3MTljYThhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/qCuWW2XjWX9fwU/+esOZWM7hUYQm8cO5HPaI6/pUOF47CUPr5tSpT dGQdEK0FjQW9Laj9cRRf045YyKS9+ikkf31ygccsdHOlGXA9yAl7wzroSLSc+dvz n7DiBFMuNnzA5m3S4hNALLYOjtF40G7TzzGj2vnz+6o2am7zBvOAxlmnCha9ZKXx GqFf9k6A6FLGUQKQHDdfUUCS6MLj2AdVKX/0TyOYwAM1vf35cxdiqxhDrvhKUeUe UJjsJi/2Lbi1wuh4bnRW4hyDlldzQxHRgSktTcuPwq5EWiX3qYyaGBQnbVJG0QEa qdXJSfs3CkQ8Dp5DrSOjTf7c+VdniAE= -----END CERTIFICATE-----Generated at Mon Oct 19 19:49:43 2026 by rpki-client