$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa File: 2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa (raw, json) Hash identifier: ZU2YRc3sCe/tzm93fevBTSqbevfGJ38GeLF3i0Yu5mc= Subject key identifier: AA:81:41:00:E0:1C:A5:FD:50:AF:CC:3C:6A:AD:1E:D7:A1:32:D7:11 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D5B4FA3EEF18CADE0A1D1C900 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 834 IP address blocks: 216.83.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a3:ee:f1:8c:ad:e0:a1:d1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=42c11f0c-34a1-4940-9862-f231e50a81d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:d1:e0:9c:fe:7c:ff:12:5f:8b:be:8b:86: 82:d8:44:c3:f0:8e:78:c5:be:2a:f6:8d:10:2d:ce: 46:e3:82:9c:87:b0:e9:5f:c7:ec:d6:34:14:92:5c: bc:f8:83:62:b1:fd:e3:f4:e0:e8:fa:3e:a3:bc:33: af:27:9a:4e:bd:89:0b:00:d2:55:3c:b7:9b:16:6c: 1a:fe:90:64:6c:87:e2:a2:49:87:af:84:c4:cc:90: 2d:60:0f:e3:aa:00:04:dd:00:18:b1:b4:c9:33:ce: fd:9c:e2:bb:4a:ef:01:5c:84:a7:3f:d9:a7:45:52: 20:37:00:df:c1:05:2c:68:e9:36:90:eb:62:f8:82: 3e:e3:84:26:f2:57:82:fa:7e:32:1b:94:51:92:d2: 56:54:b0:f9:2d:df:55:77:78:d5:56:ec:a7:12:8c: 6d:4d:6a:4f:b1:b6:13:38:60:8c:b2:73:56:8f:37: a7:97:a1:cd:dd:cb:49:d1:ee:b6:21:bb:d5:95:b0: c2:12:be:76:15:ba:b8:01:cc:20:13:f6:87:00:e0: 0d:54:66:34:59:6a:df:ae:3a:78:9a:52:84:98:35: 6e:a7:f9:46:21:d8:db:77:b6:c2:d3:9a:51:7c:df: 15:9c:f8:15:d1:59:0b:a0:a3:ef:78:4b:4d:e2:73: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:41:00:E0:1C:A5:FD:50:AF:CC:3C:6A:AD:1E:D7:A1:32:D7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9d:29:2a:c2:98:33:ed:ca:e6:4a:43:88:9a:cb:93:c6:4e: 20:3c:02:64:84:ff:0d:4b:55:00:25:df:59:29:f9:88:01:fd: d1:29:2c:7a:13:3d:6e:98:e4:3e:73:79:15:82:13:6d:cb:df: c0:e3:eb:99:56:9e:b6:3c:86:1a:7a:47:66:00:03:e6:35:e1: d2:37:80:52:2b:ce:0b:80:f3:c8:70:ab:86:5d:7c:53:91:09: 75:36:84:d0:0d:60:f3:9b:1f:13:6f:8a:d3:58:3a:e5:33:98: 43:d8:9c:0c:dc:b2:64:ed:4b:23:28:5e:1c:c8:d9:0b:3a:89: 30:6c:94:37:34:e2:37:d1:93:ac:c2:01:1c:96:20:fd:6c:62: 5d:85:0a:a7:b4:dc:22:bd:82:65:ba:89:7d:02:f7:fa:1a:29: 6c:a7:57:d5:72:d7:dd:8f:29:27:1e:5d:65:87:ce:22:a0:5c: c9:f7:4c:41:e6:f0:7a:55:44:90:cf:c9:1a:36:5d:6e:8b:8c: 3f:8f:71:5e:86:f6:7a:9c:b5:8c:9f:8e:d4:ad:80:6a:1a:cf: 3e:a1:c3:a8:7e:15:d3:6d:dc:93:53:d9:e4:2f:68:11:10:a6: a2:d5:8b:ae:bd:f6:50:fa:cd:c0:82:4f:38:2d:c1:39:ed:71: 12:83:f7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6Pu8Yyt4KHRyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDJjMTFmMGMtMzRhMS00OTQwLTk4NjItZjIzMWU1MGE4MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrR4Jz+fP8SX4u+i4aC2ETD8I54xb4q9o0Q Lc5G44Kch7DpX8fs1jQUkly8+INisf3j9ODo+j6jvDOvJ5pOvYkLANJVPLebFmwa /pBkbIfiokmHr4TEzJAtYA/jqgAE3QAYsbTJM879nOK7Su8BXISnP9mnRVIgNwDf wQUsaOk2kOti+II+44Qm8leC+n4yG5RRktJWVLD5Ld9Vd3jVVuynEoxtTWpPsbYT OGCMsnNWjzenl6HN3ctJ0e62IbvVlbDCEr52Fbq4AcwgE/aHAOANVGY0WWrfrjp4 mlKEmDVup/lGIdjbd7bC05pRfN8VnPgV0VkLoKPveEtN4nMc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqBQQDgHKX9UK/MPGqtHtehMtcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmQyMzljYzMtZTdmMC0z MDUzLTg5NTUtM2U4ZjRlZjcxZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWdKSrCmDPtyuZKQ4iay5PGTiA8AmSE/w1LVQAl31kp+YgB/dEpLHoT PW6Y5D5zeRWCE23L38Dj65lWnrY8hhp6R2YAA+Y14dI3gFIrzguA88hwq4ZdfFOR CXU2hNANYPObHxNvitNYOuUzmEPYnAzcsmTtSyMoXhzI2Qs6iTBslDc04jfRk6zC ARyWIP1sYl2FCqe03CK9gmW6iX0C9/oaKWynV9Vy192PKSceXWWHziKgXMn3TEHm 8HpVRJDPyRo2XW6LjD+PcV6G9nqctYyfjtStgGoazz6hw6h+FdNt3JNT2eQvaBEQ pqLVi6699lD6zcCCTzgtwTntcRKD95Q= -----END CERTIFICATE-----Generated at Wed Apr 15 20:28:49 2026 by rpki-client