$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/288127f3-4f5f-3814-8718-ab54736ce8ec.roa File: 288127f3-4f5f-3814-8718-ab54736ce8ec.roa (raw, json) Hash identifier: TDKjUlFGqd9mr8g6cRhzHbVWGzAFnstZhdMbPQCUPr4= Subject key identifier: 2D:19:02:E7:EE:78:B4:8A:62:33:37:D7:B4:DC:D6:EA:E6:41:51:1F Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584E6A740005C7C534941F113B80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/288127f3-4f5f-3814-8718-ab54736ce8ec.roa Signing time: Tue 07 Jul 2026 03:57:55 +0000 ROA not before: Tue 07 Jul 2026 03:57:55 +0000 ROA not after: Mon 05 Oct 2026 03:57:55 +0000 asID: 834 IP address blocks: 216.224.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6a:74:00:05:c7:c5:34:94:1f:11:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 7 03:57:55 2026 GMT Not After : Oct 5 03:57:55 2026 GMT Subject: CN=8ee160f5-9423-441b-8dce-43c6e2730af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:3d:29:a1:d0:84:28:c5:5a:6a:83:6e:a2: 8d:d3:1f:94:dd:a6:d6:56:39:6d:34:52:3a:92:27: 53:b6:88:95:bf:f3:97:63:bd:94:b3:ab:f7:a9:b4: 45:21:fd:9c:96:8c:e3:1a:f7:30:4b:fd:dc:ed:52: fd:9b:a9:39:de:f9:4d:90:8d:9c:5d:78:67:36:ad: f8:ca:c0:9f:d2:70:ab:6a:d0:b5:3f:c0:46:40:05: 5f:3c:ff:3b:ef:8d:a4:60:d0:6e:72:24:19:8d:d5: aa:02:f9:7e:16:51:20:13:27:5e:d8:1b:0d:52:72: d4:9d:c6:a5:ab:5d:3f:9a:62:e0:77:bf:da:b9:db: 45:fb:d1:fe:50:68:f7:b4:da:04:ec:03:e7:45:9b: 3c:48:2d:cc:f5:38:4b:0e:21:4f:84:1d:08:93:88: 84:65:49:d0:f2:3f:24:7c:a6:73:45:10:e7:2e:40: f0:e3:0e:2e:5d:4d:30:88:d0:f5:c5:37:e9:2a:78: 73:d4:73:2a:41:ea:21:c8:98:90:d4:fc:c2:f9:a9: 14:7e:72:9c:40:00:92:53:25:e0:0e:ac:c9:79:47: bd:0b:cf:4a:0f:14:de:15:f8:10:98:0b:7d:3e:b6: e5:59:f5:a1:af:d1:a1:21:52:b0:18:f4:3d:34:dd: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:02:E7:EE:78:B4:8A:62:33:37:D7:B4:DC:D6:EA:E6:41:51:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/288127f3-4f5f-3814-8718-ab54736ce8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:de:76:96:e0:1a:1b:4a:2c:4c:c2:26:e0:2e:9e:88:f9:f0: cb:f7:0b:9d:96:0c:24:1a:e0:53:bd:16:f0:89:e9:ad:a9:f8: 02:15:74:5c:39:f2:66:b7:21:99:0b:e4:60:74:af:a2:2c:0e: 4a:a9:ec:cf:5f:28:84:cd:67:5f:0d:48:94:51:f5:cf:20:b4: e2:07:a8:85:ff:11:c4:45:2a:02:e9:2a:51:81:9d:b4:bd:28: 06:08:c9:ac:e7:db:4a:a4:06:4d:33:36:89:7d:c1:27:e9:b3: e1:df:0c:66:43:6f:bb:6a:cb:85:af:a4:07:4d:48:e9:00:cf: db:2b:f3:3c:cb:a1:de:63:03:25:83:da:5a:92:1e:86:f5:49: ea:4d:7c:13:86:49:04:c3:a0:d5:35:78:45:76:5f:4f:e0:fa: df:60:97:95:ba:b0:fa:1f:b9:e5:9c:fb:26:b9:f9:2e:08:11: ca:b8:39:35:21:f8:a2:be:3b:41:9b:c7:98:6c:1d:9f:d3:c9: bf:fd:c8:a8:44:e8:58:c3:80:0b:ec:8a:67:49:7f:f0:2c:cd: 68:5e:bb:77:29:a6:e2:48:fd:af:a9:d4:76:ea:94:96:00:80: b3:c3:46:c4:3e:92:32:be:9c:e6:0d:ec:7f:6d:8b:32:f7:cb: a9:41:f3:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5qdAAFx8U0lB8RO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDcwNzAzNTc1NVoXDTI2MTAwNTAzNTc1NVowLzEtMCsGA1UEAxMk OGVlMTYwZjUtOTQyMy00NDFiLThkY2UtNDNjNmUyNzMwYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAY9KaHQhCjFWmqDbqKN0x+U3abWVjltNFI6 kidTtoiVv/OXY72Us6v3qbRFIf2clozjGvcwS/3c7VL9m6k53vlNkI2cXXhnNq34 ysCf0nCratC1P8BGQAVfPP87742kYNBuciQZjdWqAvl+FlEgEyde2BsNUnLUncal q10/mmLgd7/audtF+9H+UGj3tNoE7APnRZs8SC3M9ThLDiFPhB0Ik4iEZUnQ8j8k fKZzRRDnLkDw4w4uXU0wiND1xTfpKnhz1HMqQeohyJiQ1PzC+akUfnKcQACSUyXg DqzJeUe9C89KDxTeFfgQmAt9PrblWfWhr9GhIVKwGPQ9NN2+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0ZAufueLSKYjM317Tc1urmQVEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMjg4MTI3ZjMtNGY1Zi0z ODE0LTg3MTgtYWI1NDczNmNlOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHedpbgGhtKLEzCJuAunoj58Mv3C52WDCQa4FO9FvCJ6a2p+AIVdFw5 8ma3IZkL5GB0r6IsDkqp7M9fKITNZ18NSJRR9c8gtOIHqIX/EcRFKgLpKlGBnbS9 KAYIyazn20qkBk0zNol9wSfps+HfDGZDb7tqy4WvpAdNSOkAz9sr8zzLod5jAyWD 2lqSHob1SepNfBOGSQTDoNU1eEV2X0/g+t9gl5W6sPofueWc+ya5+S4IEcq4OTUh +KK+O0Gbx5hsHZ/Tyb/9yKhE6FjDgAvsimdJf/AszWheu3cppuJI/a+p1HbqlJYA gLPDRsQ+kjK+nOYN7H9tizL3y6lB8yg= -----END CERTIFICATE-----Generated at Mon Jul 20 23:53:44 2026 by rpki-client