$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa File: f488b8e8-1a05-3b30-a1e8-a94d36368834.roa (raw, json) Hash identifier: nwFp+8rSS7l/4iKqUevleh5avZw/VRxYzhCSXn+UQik= Subject key identifier: 14:F4:E0:E2:BF:53:19:A3:47:CB:E8:D7:60:7B:72:54:7F:98:10:EE Certificate issuer: /CN=ff6d340c-0c98-4887-a683-1948f4be64f7 Certificate serial: 010D0C9F4328584D95282F0C72CF32A12A9ADD80 Authority key identifier: 68:34:CC:1F:63:E1:06:1A:62:42:77:42:D4:F9:78:4B:35:BA:79:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa Signing time: Tue 21 Apr 2026 18:17:59 +0000 ROA not before: Tue 21 Apr 2026 18:17:59 +0000 ROA not after: Mon 20 Jul 2026 18:17:59 +0000 asID: 402421 IP address blocks: 69.48.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:28:2f:0c:72:cf:32:a1:2a:9a:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6d340c-0c98-4887-a683-1948f4be64f7 Validity Not Before: Apr 21 18:17:59 2026 GMT Not After : Jul 20 18:17:59 2026 GMT Subject: CN=becfd55e-972f-4347-8704-de2ddd9713b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:a1:94:36:23:22:33:3a:9d:b5:32:a8:1f: 3b:b8:d3:d2:d1:c8:91:c0:c7:27:e1:33:76:02:76: cb:64:47:30:30:88:80:56:16:98:e1:9d:6a:db:56: c7:71:58:3f:b0:2c:c2:11:b7:06:de:d5:2e:7a:70: ab:91:dd:f3:35:f5:49:a5:c0:53:dd:1d:01:73:19: 68:b0:13:22:2c:83:82:17:92:b5:1d:98:9a:70:03: 54:dd:f2:2d:d7:f4:8e:fe:ef:9f:fc:e9:2b:35:81: cb:d5:99:99:97:e2:67:e2:f1:fc:5c:36:63:7f:3b: 32:38:b4:c9:95:b7:f1:b1:2d:82:8d:ee:00:ed:dd: c4:46:5c:36:5a:c5:b4:4f:1d:95:61:af:8b:1b:3f: 25:d7:36:e1:f6:84:29:ff:96:ab:12:fa:71:25:15: 0f:c8:28:49:0d:2f:67:22:41:fa:26:2c:8d:82:e7: 62:5a:0a:80:cb:04:04:1c:98:4c:8a:b9:7e:69:c4: a2:60:a3:8b:72:44:23:e6:49:f5:24:62:ef:51:58: 50:3d:00:55:49:59:c7:98:44:79:78:4d:f6:82:ce: e6:81:92:c3:6f:17:29:53:1e:59:68:27:f5:4e:68: f3:2e:f8:53:55:3e:e8:44:b0:17:c7:0d:0b:65:6a: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:E0:E2:BF:53:19:A3:47:CB:E8:D7:60:7B:72:54:7F:98:10:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.crl X509v3 Authority Key Identifier: keyid:68:34:CC:1F:63:E1:06:1A:62:42:77:42:D4:F9:78:4B:35:BA:79:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer sbgp-ipAddrBlock: critical IPv4: 69.48.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:02:17:35:f1:ec:3a:97:55:a1:43:73:57:6f:d2:b2:6f:d6: 0d:1f:bc:29:72:7b:95:4a:4b:92:bb:bc:ae:5c:76:f4:99:2f: b8:80:20:ab:b5:32:2f:3f:a6:c9:be:b1:e5:65:b8:72:39:69: 94:40:4f:31:39:7b:55:20:5c:f1:60:e6:77:d4:91:56:52:5b: 43:2b:58:74:b5:11:8c:99:9b:ec:70:70:fc:b7:5d:16:e9:34: ca:05:13:b3:c2:30:87:e5:c4:61:fd:aa:00:31:14:c6:ac:b9: 5f:60:d6:4a:cf:65:56:dc:53:3b:69:67:f6:bc:04:63:4e:52: da:02:b0:df:74:41:7a:a1:f0:f4:0c:84:e0:57:fc:df:a1:74: 44:f5:a1:1a:f4:93:83:35:56:de:21:84:cf:33:ec:b9:46:aa: 68:4c:42:7e:76:dc:41:31:09:31:c6:75:5d:e3:84:9f:26:5f: 5e:40:10:97:d5:4f:41:91:cc:a9:ee:86:b2:da:a2:22:61:a9: 56:49:5c:33:68:d8:cb:34:ab:3d:6b:5a:a0:71:bd:1f:cd:63: 0a:16:04:1d:35:db:ba:52:35:39:b8:86:0b:ef:4c:d5:b5:66: 9e:e2:4c:ac:c8:c5:3f:ff:f7:60:d9:a8:92:53:06:f6:6f:36: 37:1c:b9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2VKC8Mcs8yoSqa3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2ZDM0MGMtMGM5OC00ODg3LWE2ODMtMTk0OGY0YmU2 NGY3MB4XDTI2MDQyMTE4MTc1OVoXDTI2MDcyMDE4MTc1OVowLzEtMCsGA1UEAxMk YmVjZmQ1NWUtOTcyZi00MzQ3LTg3MDQtZGUyZGRkOTcxM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGGhlDYjIjM6nbUyqB87uNPS0ciRwMcn4TN2 AnbLZEcwMIiAVhaY4Z1q21bHcVg/sCzCEbcG3tUuenCrkd3zNfVJpcBT3R0Bcxlo sBMiLIOCF5K1HZiacANU3fIt1/SO/u+f/OkrNYHL1ZmZl+Jn4vH8XDZjfzsyOLTJ lbfxsS2Cje4A7d3ERlw2WsW0Tx2VYa+LGz8l1zbh9oQp/5arEvpxJRUPyChJDS9n IkH6JiyNgudiWgqAywQEHJhMirl+acSiYKOLckQj5kn1JGLvUVhQPQBVSVnHmER5 eE32gs7mgZLDbxcpUx5ZaCf1TmjzLvhTVT7oRLAXxw0LZWoCtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT04OK/UxmjR8vo12B7clR/mBDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mZjZk MzQwYy0wYzk4LTQ4ODctYTY4My0xOTQ4ZjRiZTY0ZjcvZjQ4OGI4ZTgtMWEwNS0z YjMwLWExZTgtYTk0ZDM2MzY4ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZmY2ZDM0MGMtMGM5OC00ODg3LWE2 ODMtMTk0OGY0YmU2NGY3L2ZmNmQzNDBjLTBjOTgtNDg4Ny1hNjgzLTE5NDhmNGJl NjRmNy5jcmwwHwYDVR0jBBgwFoAUaDTMH2PhBhpiQndC1Pl4SzW6edQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mZjZkMzQwYy0wYzk4LTQ4ODctYTY4My0xOTQ4 ZjRiZTY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRTDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKACFzXx7DqXVaFDc1dv0rJv1g0fvClye5VKS5K7vK5cdvSZL7iAIKu1 Mi8/psm+seVluHI5aZRATzE5e1UgXPFg5nfUkVZSW0MrWHS1EYyZm+xwcPy3XRbp NMoFE7PCMIflxGH9qgAxFMasuV9g1krPZVbcUztpZ/a8BGNOUtoCsN90QXqh8PQM hOBX/N+hdET1oRr0k4M1Vt4hhM8z7LlGqmhMQn523EExCTHGdV3jhJ8mX15AEJfV T0GRzKnuhrLaoiJhqVZJXDNo2Ms0qz1rWqBxvR/NYwoWBB0127pSNTm4hgvvTNW1 Zp7iTKzIxT//92DZqJJTBvZvNjccucU= -----END CERTIFICATE-----Generated at Wed Apr 22 07:04:11 2026 by rpki-client