$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa File: 023c0147-31da-314e-b950-3ddf9ade51ea.roa (raw, json) Hash identifier: 4peEUMRFS3L+HraZjkBjNQaXwYlz6ZeJPNWYGWDwPIk= Subject key identifier: 52:74:BC:AF:18:82:E3:D8:46:FD:C4:D2:E4:9F:3A:69:7B:08:80:44 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584ECBD1BE7E7578CFCF26DCC640 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 398493 IP address blocks: 69.176.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:be:7e:75:78:cf:cf:26:dc:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=52f0321c-490b-4e9d-9dca-00329ce1a59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:82:da:a4:96:68:5f:58:5c:f5:47:94:c5: 73:94:42:76:ac:01:4a:c9:ba:56:a6:c2:f9:5d:14: 2a:7f:65:5a:b1:ff:c1:80:a7:88:d2:05:f7:12:90: 4c:f0:a9:7e:15:4c:23:b9:31:1b:16:9f:00:be:f6: 83:54:a1:96:5a:d5:ce:5a:69:aa:ef:45:e9:8e:d6: 4a:0f:68:cf:96:26:ac:b0:03:d7:7e:36:1c:06:48: af:9a:e0:60:5d:d6:43:b6:ec:01:ae:91:19:71:5b: 70:fd:9a:69:37:67:db:89:27:d5:f6:e2:89:51:26: de:35:7b:13:8c:58:d1:72:1a:8d:d6:50:60:b6:e4: 44:c2:65:99:db:11:67:5e:f5:76:6c:4d:12:5b:1f: 62:5b:63:ff:e7:65:9f:74:80:58:56:3a:b6:37:cf: ab:d4:50:ab:fd:db:f5:58:31:60:68:3b:a2:a1:c2: 77:61:10:70:23:2e:2e:d4:6c:df:6e:2e:e8:8a:8c: 6f:e6:38:50:5d:c3:b1:d6:32:66:1f:82:04:54:2a: 0c:b4:6d:2c:43:c0:c6:34:ce:80:d3:4f:f8:35:34: f0:26:bd:75:0f:f1:6c:a4:95:90:5d:6f:d1:77:68: 00:79:15:28:17:96:50:a3:be:d5:a9:26:71:f8:eb: 9d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:BC:AF:18:82:E3:D8:46:FD:C4:D2:E4:9F:3A:69:7B:08:80:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:db:23:4b:5b:27:87:18:3f:19:cf:c1:a0:4f:af:0c:c1:7c: 70:0b:0c:36:34:04:ae:7c:33:00:bb:3d:93:3b:7f:58:cf:19: 91:c8:ae:8b:18:40:be:50:04:ee:0a:2c:ae:cd:ca:04:4b:19: 12:1f:e0:79:87:ca:a6:19:b8:c4:f6:2a:da:a3:3a:6c:fa:cc: 75:24:33:e6:8c:91:19:82:a1:37:5d:6f:41:da:53:f2:12:57: 0a:bf:c6:21:fb:c7:b4:20:ae:7c:fd:f6:a1:c8:3e:97:ec:e9: 08:10:65:00:84:60:60:19:ad:04:67:17:61:b0:08:9f:c8:b8: 46:ce:c6:15:47:0a:9b:e2:fd:a2:2f:52:74:fe:f8:74:75:9a: 87:19:e5:65:d7:75:fa:19:d1:34:41:16:0d:8e:c2:0b:01:05: 1f:8e:a1:fb:71:59:54:97:3a:f1:1b:bb:0c:b3:4f:a8:5f:bc: 1f:b0:bb:a5:be:88:9a:49:75:fe:f9:b5:e1:c4:1d:12:5b:63: f6:d6:81:89:be:14:06:fa:2b:41:00:e2:06:61:9b:80:ec:f6: 13:d7:e0:48:85:71:47:ea:7f:89:78:c7:77:c6:ee:0c:24:92: 15:ee:03:cf:40:4f:c8:64:07:d4:13:5e:24:f2:0e:01:3a:e7: 1b:8a:9d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0b5+dXjPzybcxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk NTJmMDMyMWMtNDkwYi00ZTlkLTlkY2EtMDAzMjljZTFhNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaiC2qSWaF9YXPVHlMVzlEJ2rAFKybpWpsL5 XRQqf2Vasf/BgKeI0gX3EpBM8Kl+FUwjuTEbFp8AvvaDVKGWWtXOWmmq70XpjtZK D2jPliassAPXfjYcBkivmuBgXdZDtuwBrpEZcVtw/ZppN2fbiSfV9uKJUSbeNXsT jFjRchqN1lBgtuREwmWZ2xFnXvV2bE0SWx9iW2P/52WfdIBYVjq2N8+r1FCr/dv1 WDFgaDuiocJ3YRBwIy4u1Gzfbi7oioxv5jhQXcOx1jJmH4IEVCoMtG0sQ8DGNM6A 00/4NTTwJr11D/FspJWQXW/Rd2gAeRUoF5ZQo77VqSZx+OudbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ0vK8YguPYRv3E0uSfOml7CIBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMDIzYzAxNDctMzFkYS0z MTRlLWI5NTAtM2RkZjlhZGU1MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfbI0tbJ4cYPxnPwaBPrwzBfHALDDY0BK58MwC7PZM7f1jPGZHIrosY QL5QBO4KLK7NygRLGRIf4HmHyqYZuMT2KtqjOmz6zHUkM+aMkRmCoTddb0HaU/IS Vwq/xiH7x7Qgrnz99qHIPpfs6QgQZQCEYGAZrQRnF2GwCJ/IuEbOxhVHCpvi/aIv UnT++HR1mocZ5WXXdfoZ0TRBFg2OwgsBBR+OoftxWVSXOvEbuwyzT6hfvB+wu6W+ iJpJdf75teHEHRJbY/bWgYm+FAb6K0EA4gZhm4Ds9hPX4EiFcUfqf4l4x3fG7gwk khXuA89AT8hkB9QTXiTyDgE65xuKnUQ= -----END CERTIFICATE-----Generated at Thu Sep 10 12:37:07 2026 by rpki-client