$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/0d0df96f-a3f1-3f04-83c2-dc480f7bbc3c.roa File: 0d0df96f-a3f1-3f04-83c2-dc480f7bbc3c.roa (raw, json) Hash identifier: WbTQN3ZZQQmSLb8ZiPc5jERMzc37axmKd0ml8ykLhBI= Subject key identifier: 73:9F:36:9E:95:AF:8B:91:86:6F:47:1F:B8:81:AE:62:60:BD:9C:CD Certificate issuer: /CN=ffc8f214-096e-4b32-9ae2-3506c0f50e1f Certificate serial: 010D0C9F4328584F9494C375C1AFF7BF56573A80 Authority key identifier: EA:65:F7:AE:A3:81:CF:54:58:50:B0:27:D3:13:8A:E5:FC:58:72:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/0d0df96f-a3f1-3f04-83c2-dc480f7bbc3c.roa Signing time: Wed 21 Oct 2026 22:54:50 +0000 ROA not before: Wed 21 Oct 2026 22:54:50 +0000 ROA not after: Tue 19 Jan 2027 23:54:50 +0000 asID: 27425 IP address blocks: 208.81.240.0/24 maxlen: 24 2605:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:94:c3:75:c1:af:f7:bf:56:57:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffc8f214-096e-4b32-9ae2-3506c0f50e1f Validity Not Before: Oct 21 22:54:50 2026 GMT Not After : Jan 19 23:54:50 2027 GMT Subject: CN=36499c2a-81fd-42a3-b834-835d651ae056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:a8:93:14:2a:12:c6:16:d7:e5:41:a8:d4: c3:bf:80:ca:18:f9:0e:a6:ce:71:b9:4d:92:eb:8e: 9c:b8:84:95:e7:9f:90:0f:08:8d:00:7f:a7:50:aa: 90:b7:b2:cb:36:8b:56:1f:5a:cd:4a:4b:08:63:28: 6f:0e:17:1d:a2:a6:5a:f8:fc:a0:30:4e:78:6a:18: 13:08:b3:38:2e:6b:f2:7f:2f:08:87:37:07:72:11: 19:ed:77:fc:29:e6:48:a3:8b:a4:01:f9:97:43:28: de:44:9a:72:d3:39:88:ce:a0:87:d1:53:90:19:c6: 03:e4:f1:61:34:0b:ab:47:e4:9a:da:c0:99:e9:55: 11:69:da:a4:b7:53:90:88:c8:4b:ae:1b:15:e6:72: 5f:ae:d8:3c:d6:51:53:e8:3b:92:f6:5e:2c:ca:18: 1d:61:fc:43:eb:cf:38:59:6f:87:f7:76:21:46:38: 3e:b5:d6:8c:57:87:9b:ca:6d:5c:b6:a7:fe:a9:98: 70:ac:f5:87:d9:45:78:f9:97:57:f3:47:4e:76:d2: 10:fa:55:81:f4:00:a3:bd:42:7c:37:41:45:9e:4c: 92:8c:a0:57:ac:df:e6:f0:e1:b3:a3:d0:82:37:9a: b8:e2:80:f1:5d:92:b3:4c:8c:29:f6:b3:6c:85:36: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:36:9E:95:AF:8B:91:86:6F:47:1F:B8:81:AE:62:60:BD:9C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/0d0df96f-a3f1-3f04-83c2-dc480f7bbc3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.crl X509v3 Authority Key Identifier: keyid:EA:65:F7:AE:A3:81:CF:54:58:50:B0:27:D3:13:8A:E5:FC:58:72:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ffc8f214-096e-4b32-9ae2-3506c0f50e1f.cer sbgp-ipAddrBlock: critical IPv4: 208.81.240.0/24 IPv6: 2605:4d40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ef:9e:7c:c5:f3:86:0f:1c:8d:74:e2:e2:58:b1:dc:53:17: a2:39:8e:2b:8d:1c:0a:3a:cb:d2:50:96:54:04:72:a4:72:10: a9:36:0c:6e:13:09:d4:8a:18:c2:12:45:66:51:47:c8:8b:19: 3b:e4:16:31:32:e6:f4:cc:f9:8b:02:f5:3d:02:21:af:fc:40: 80:00:a6:20:1d:fc:ad:57:00:9b:89:ff:69:de:fb:8d:f9:25: 87:3e:1b:fd:f4:93:9b:ae:d3:6a:b1:32:6a:51:d0:e6:1b:87: 39:17:27:eb:a2:11:02:40:89:d8:f6:1d:9a:e0:8b:fc:27:40: 61:7d:b1:9d:39:f7:b3:3a:bd:d4:38:79:1d:7e:a7:be:0e:ea: 3f:a1:b6:51:82:c7:b9:ad:fa:67:4f:16:1b:3f:af:26:13:33: 1d:ec:da:5d:d3:8b:25:29:0a:af:62:4e:a5:1a:e5:74:8f:29: 29:58:31:c7:d2:2b:cc:ea:75:8b:f8:28:4e:eb:8c:bc:77:24: 9d:b2:dd:69:f1:f8:d3:bd:34:e7:4b:65:f4:5e:95:53:14:c9: a9:ef:02:72:84:a4:41:ac:ec:30:44:1f:23:41:70:3c:1e:1b: aa:95:d5:5c:7b:4c:a1:1e:7d:e9:6a:f5:dc:2f:4e:d2:ba:1c: 47:05:16:79 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE+UlMN1wa/3v1ZXOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjOGYyMTQtMDk2ZS00YjMyLTlhZTItMzUwNmMwZjUw ZTFmMB4XDTI2MTAyMTIyNTQ1MFoXDTI3MDExOTIzNTQ1MFowLzEtMCsGA1UEAxMk MzY0OTljMmEtODFmZC00MmEzLWI4MzQtODM1ZDY1MWFlMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WqokxQqEsYW1+VBqNTDv4DKGPkOps5xuU2S 646cuISV55+QDwiNAH+nUKqQt7LLNotWH1rNSksIYyhvDhcdoqZa+PygME54ahgT CLM4Lmvyfy8IhzcHchEZ7Xf8KeZIo4ukAfmXQyjeRJpy0zmIzqCH0VOQGcYD5PFh NAurR+Sa2sCZ6VURadqkt1OQiMhLrhsV5nJfrtg81lFT6DuS9l4syhgdYfxD6884 WW+H93YhRjg+tdaMV4ebym1ctqf+qZhwrPWH2UV4+ZdX80dOdtIQ+lWB9ACjvUJ8 N0FFnkySjKBXrN/m8OGzo9CCN5q44oDxXZKzTIwp9rNshTZalQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHOfNp6Vr4uRhm9HH7iBrmJgvZzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9mZmM4 ZjIxNC0wOTZlLTRiMzItOWFlMi0zNTA2YzBmNTBlMWYvMGQwZGY5NmYtYTNmMS0z ZjA0LTgzYzItZGM0ODBmN2JiYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZmZjOGYyMTQtMDk2ZS00YjMyLTlh ZTItMzUwNmMwZjUwZTFmL2ZmYzhmMjE0LTA5NmUtNGIzMi05YWUyLTM1MDZjMGY1 MGUxZi5jcmwwHwYDVR0jBBgwFoAU6mX3rqOBz1RYULAn0xOK5fxYclQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9mZmM4ZjIxNC0wOTZlLTRiMzItOWFlMi0zNTA2 YzBmNTBlMWYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0FHwMA8E AgACMAkDBwAmBU1AAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHe+efMXzhg8cjXTi4lix3FMXojmOK40c CjrL0lCWVARypHIQqTYMbhMJ1IoYwhJFZlFHyIsZO+QWMTLm9Mz5iwL1PQIhr/xA gACmIB38rVcAm4n/ad77jfklhz4b/fSTm67TarEyalHQ5huHORcn66IRAkCJ2PYd muCL/CdAYX2xnTn3szq91Dh5HX6nvg7qP6G2UYLHua36Z08WGz+vJhMzHezaXdOL JSkKr2JOpRrldI8pKVgxx9IrzOp1i/goTuuMvHcknbLdafH4070050tl9F6VUxTJ qe8CcoSkQazsMEQfI0FwPB4bqpXVXHtMoR596Wr13C9O0rocRwUWeQ== -----END CERTIFICATE-----Generated at Wed Oct 28 06:14:53 2026 by rpki-client