$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa File: 2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa (raw, json) Hash identifier: GwowcudtpmRPDIHMlusSwQXCtYv6MtG+9eOP38YsSHA= Subject key identifier: A4:B6:88:38:33:A8:4C:53:E0:BF:14:D0:6D:67:4A:45:24:B7:68:1C Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B9AD0DB46ABD2C4EDF67DDA80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa Signing time: Wed 22 Oct 2025 09:23:00 +0000 ROA not before: Wed 22 Oct 2025 09:23:00 +0000 ROA not after: Tue 20 Jan 2026 10:23:00 +0000 asID: 834 IP address blocks: 216.83.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:d0:db:46:ab:d2:c4:ed:f6:7d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 22 09:23:00 2025 GMT Not After : Jan 20 10:23:00 2026 GMT Subject: CN=501c94ce-daab-4c64-990b-677f6ecf3691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:30:ff:55:8b:20:70:9c:7e:17:e6:a0:b1: 1d:11:11:ed:88:e3:6a:ff:cb:00:72:9f:e5:8f:e6: ef:8b:6d:a1:cd:81:e2:8a:40:30:57:29:70:2d:f4: 9e:eb:f0:6f:40:0e:48:21:ea:77:40:df:b3:d4:1a: 9f:c3:a6:f4:21:08:0b:1c:2e:b8:23:9b:42:be:3b: cb:1c:4d:b8:f0:5c:70:a2:47:14:96:ff:87:0d:5f: 00:0b:03:76:0b:f2:e1:bd:6a:f3:be:02:67:36:18: 57:ae:de:18:40:e7:b7:2d:65:88:f7:90:20:34:bc: 4f:8e:67:d9:de:99:d4:5e:c6:55:4b:1a:f1:0c:a7: 00:47:35:6b:93:ff:d4:10:d4:3f:19:db:0c:ce:17: 9f:62:63:a8:71:34:ff:dc:9d:78:da:38:7e:3c:03: f8:99:0f:be:0f:37:f2:17:f4:92:05:3e:6b:fb:7a: 91:61:24:68:b8:08:52:da:f0:ec:60:2a:04:07:53: 96:55:c9:57:d2:4b:9f:41:c1:e7:e0:8f:81:d2:fb: 46:9d:1d:01:cf:62:11:87:65:e9:91:66:fa:1f:44: e3:39:71:d6:bd:ca:d6:0d:19:b4:d4:54:55:3b:f7: 27:72:14:e2:46:0b:18:d1:bf:04:04:f6:7f:44:7a: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B6:88:38:33:A8:4C:53:E0:BF:14:D0:6D:67:4A:45:24:B7:68:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2d239cc3-e7f0-3053-8955-3e8f4ef71d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f9:47:78:f4:62:6c:6b:7e:a5:19:93:f2:2b:7b:cd:fe:2a: 61:25:68:e9:67:66:72:52:93:88:4a:3f:27:ba:da:17:0e:f1: 68:05:bd:c6:6c:b0:d4:56:4a:6d:87:09:7a:7a:3f:65:bd:15: ef:46:70:d1:81:cc:07:9c:e6:f6:9d:76:bb:c8:eb:75:b5:38: f8:45:19:1a:cb:c6:64:8a:f6:44:99:51:19:ea:e5:99:41:9d: 3d:a1:47:60:b8:4f:57:13:8b:70:66:c9:86:69:ca:87:e6:2b: 99:ac:c0:0a:4b:81:db:79:85:61:85:b1:6d:be:a4:82:5a:bc: e9:0d:54:c4:01:5a:cc:ff:fe:82:d8:4b:c7:bc:bd:37:a3:a9: 7f:04:e7:84:e6:d8:41:7a:57:ba:48:02:ea:47:ce:63:ff:61: 48:85:82:64:bf:8b:4f:4d:25:45:ff:dc:86:c4:27:f2:bf:7e: 26:d2:c1:06:25:d9:17:40:8c:b1:e9:b1:4e:c6:20:d1:16:64: 5f:85:c5:f0:22:10:22:98:44:16:37:89:48:aa:4b:70:25:a9: 87:64:9e:4a:b0:d1:8b:f5:d6:49:19:cc:31:c0:7d:3a:0f:34: 5b:85:ae:e1:84:14:2e:e5:0d:fa:20:b8:ec:80:51:79:df:2a: 7d:1d:b8:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEua0NtGq9LE7fZ92oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAyMjA5MjMwMFoXDTI2MDEyMDEwMjMwMFowLzEtMCsGA1UEAxMk NTAxYzk0Y2UtZGFhYi00YzY0LTk5MGItNjc3ZjZlY2YzNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiusw/1WLIHCcfhfmoLEdERHtiONq/8sAcp/l j+bvi22hzYHiikAwVylwLfSe6/BvQA5IIep3QN+z1Bqfw6b0IQgLHC64I5tCvjvL HE248FxwokcUlv+HDV8ACwN2C/LhvWrzvgJnNhhXrt4YQOe3LWWI95AgNLxPjmfZ 3pnUXsZVSxrxDKcARzVrk//UENQ/GdsMzhefYmOocTT/3J142jh+PAP4mQ++Dzfy F/SSBT5r+3qRYSRouAhS2vDsYCoEB1OWVclX0kufQcHn4I+B0vtGnR0Bz2IRh2Xp kWb6H0TjOXHWvcrWDRm01FRVO/cnchTiRgsY0b8EBPZ/RHpjvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS2iDgzqExT4L8U0G1nSkUkt2gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmQyMzljYzMtZTdmMC0z MDUzLTg5NTUtM2U4ZjRlZjcxZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH5R3j0YmxrfqUZk/Ire83+KmElaOlnZnJSk4hKPye62hcO8WgFvcZs sNRWSm2HCXp6P2W9Fe9GcNGBzAec5vaddrvI63W1OPhFGRrLxmSK9kSZURnq5ZlB nT2hR2C4T1cTi3BmyYZpyofmK5mswApLgdt5hWGFsW2+pIJavOkNVMQBWsz//oLY S8e8vTejqX8E54Tm2EF6V7pIAupHzmP/YUiFgmS/i09NJUX/3IbEJ/K/fibSwQYl 2RdAjLHpsU7GINEWZF+FxfAiECKYRBY3iUiqS3AlqYdknkqw0Yv11kkZzDHAfToP NFuFruGEFC7lDfoguOyAUXnfKn0duDc= -----END CERTIFICATE-----Generated at Fri Oct 31 05:31:41 2025 by rpki-client