$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa File: 2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa (raw, json) Hash identifier: tNgwE3QRDZCWFCK5/zWpLZAEzCp4vWCPEBCklF/dl/Y= Subject key identifier: B6:31:38:B9:9F:D5:3E:F1:24:4E:C8:6C:B6:68:EB:AC:8C:7F:37:0C Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F5E62D0353E32AE0E6DA62860 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 54252 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d0:35:3e:32:ae:0e:6d:a6:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=a8b8c4bb-b430-40eb-a8b8-22a188974e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d8:6c:68:62:03:19:ae:17:c2:41:0e:b0:26: b2:07:53:43:8e:cc:94:4c:c6:ed:c2:cf:6a:37:68: 89:f6:cb:87:86:20:f4:9b:ea:d0:28:4b:84:ad:96: ad:6c:ed:8e:9b:8b:d9:64:f0:06:7f:c7:1b:71:2b: 78:a0:c9:72:fb:7f:ad:ba:a0:50:e9:5d:1f:14:1b: ea:11:9b:5a:c6:93:ef:f5:be:4d:db:3d:92:77:15: e6:96:ea:c7:3d:01:b5:b4:14:fa:b8:5b:ea:f9:2e: 09:7e:05:1d:fa:f2:5f:3e:cc:3a:75:90:90:a9:92: 22:e2:16:64:49:55:8a:37:89:b1:d8:c3:bd:74:d2: 1d:1a:26:4a:1e:b1:6c:b4:4f:35:db:f7:78:cd:9a: fc:04:6f:30:3a:59:c4:f3:80:b2:66:c5:5c:ae:0a: 9d:d5:5e:0c:13:8f:2f:bf:89:28:33:66:a6:44:83: 4d:85:49:ef:2c:5b:c2:3c:d4:bf:b3:d1:81:30:8d: 1f:15:4f:28:66:d6:f4:65:cf:ca:96:20:2b:b1:0e: 6b:3b:c9:52:b5:95:ea:38:38:0b:55:5d:48:b2:d8: fe:46:f8:9f:9d:0e:81:c7:e6:b2:b9:c3:cf:57:11: 84:a6:3d:7a:07:d3:a0:34:f5:94:50:ff:1c:41:5f: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:31:38:B9:9F:D5:3E:F1:24:4E:C8:6C:B6:68:EB:AC:8C:7F:37:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:32:86:1e:c6:8d:54:6f:cf:1c:c9:c2:17:d0:67:fd:7d:f4: 79:c5:a8:da:6f:72:ce:1d:97:58:87:ce:98:f4:44:ab:ea:10: f3:4b:f7:91:f7:79:cf:1f:01:da:eb:ea:8b:94:61:5d:2c:12: 78:a3:37:d4:5f:fa:a0:48:fa:99:fd:64:5b:0c:95:23:61:12: 5f:84:07:6d:1b:dd:fc:25:db:48:07:49:21:28:ef:e5:59:98: ae:81:46:98:88:0e:c4:46:a9:f2:c5:9f:b1:0b:00:dc:e3:9c: 52:27:cf:af:23:b2:18:a5:0a:32:dd:6c:9e:4c:e1:3c:4b:95: 2a:7a:3f:89:94:88:68:71:97:5c:c7:8a:d7:26:fe:b3:33:8f: 6a:d1:d8:5d:4c:4d:2f:5b:09:f0:88:fc:cc:24:2d:1e:ad:4c: eb:ad:8b:c2:2f:ed:5b:80:0c:1a:30:13:ff:7b:f0:1d:ba:5f: 71:7a:29:a4:7f:d4:31:a3:f1:41:38:6c:db:a6:2d:45:8a:31: 08:91:ad:63:d3:fa:fb:a3:37:38:5a:0f:04:71:d7:8e:87:cc: d4:82:df:1b:b4:69:d5:e9:e6:5b:c9:1c:5d:4e:4a:68:40:5e: 12:bb:51:d3:8f:08:83:8c:42:1b:84:ce:03:01:83:6a:29:fd: 74:e8:d0:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtA1PjKuDm2mKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YThiOGM0YmItYjQzMC00MGViLWE4YjgtMjJhMTg4OTc0ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhsaGIDGa4XwkEOsCayB1NDjsyUTMbtws9q N2iJ9suHhiD0m+rQKEuErZatbO2Om4vZZPAGf8cbcSt4oMly+3+tuqBQ6V0fFBvq EZtaxpPv9b5N2z2SdxXmlurHPQG1tBT6uFvq+S4JfgUd+vJfPsw6dZCQqZIi4hZk SVWKN4mx2MO9dNIdGiZKHrFstE812/d4zZr8BG8wOlnE84CyZsVcrgqd1V4ME48v v4koM2amRINNhUnvLFvCPNS/s9GBMI0fFU8oZtb0Zc/KliArsQ5rO8lStZXqODgL VV1Istj+RvifnQ6Bx+ayucPPVxGEpj16B9OgNPWUUP8cQV+WlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYxOLmf1T7xJE7IbLZo66yMfzcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmI4YmEyZDAtMzM1MC0z NGMzLWE0YWUtZGVkM2YwNmFjZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYyhh7GjVRvzxzJwhfQZ/199HnFqNpvcs4dl1iHzpj0RKvqEPNL95H3 ec8fAdrr6ouUYV0sEnijN9Rf+qBI+pn9ZFsMlSNhEl+EB20b3fwl20gHSSEo7+VZ mK6BRpiIDsRGqfLFn7ELANzjnFInz68jshilCjLdbJ5M4TxLlSp6P4mUiGhxl1zH itcm/rMzj2rR2F1MTS9bCfCI/MwkLR6tTOuti8Iv7VuADBowE/978B26X3F6KaR/ 1DGj8UE4bNumLUWKMQiRrWPT+vujNzhaDwRx146HzNSC3xu0adXp5lvJHF1OSmhA XhK7UdOPCIOMQhuEzgMBg2op/XTo0C4= -----END CERTIFICATE-----Generated at Mon Oct 12 12:35:08 2026 by rpki-client