$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa File: 2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa (raw, json) Hash identifier: buGKURT0+PNP1/v9/pM/+hlKjBg1usHz+b1yDVWuiZ8= Subject key identifier: B9:EA:34:02:F1:E2:8C:AE:3C:CA:2F:75:47:0B:63:59:13:D1:E1:50 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F119CE6F01B62A3F4BD428B00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 62164 IP address blocks: 216.224.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e6:f0:1b:62:a3:f4:bd:42:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d7439ee8-3562-46fb-8906-2790f934ce1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:e7:6c:87:83:88:e0:13:4a:5f:c8:14:63: b0:23:42:30:29:ad:30:45:ce:ee:f5:e6:e7:84:a7: 52:99:74:a4:19:26:50:b8:17:9e:f9:68:6f:c5:83: b9:c4:e9:eb:cd:30:aa:20:b3:6f:88:e4:22:f4:51: 6a:88:48:b2:32:1a:f6:ec:5e:5a:7f:b4:05:e7:bf: 10:d4:69:2c:9c:ca:e6:5c:ca:c9:ce:b4:6c:93:73: 7e:41:2b:be:ec:15:0c:86:49:21:ba:9e:af:da:7a: d4:1a:d2:fc:e7:94:a1:c3:91:79:18:d7:11:e9:db: d0:1c:94:b6:ef:3e:bb:5c:d3:69:60:85:36:00:5e: ab:a5:0a:54:ef:e7:2c:0b:11:83:71:f8:d7:08:0c: 9a:76:c0:8a:40:71:f0:a3:fa:a2:1d:3a:62:07:a4: 65:77:04:75:cc:5e:07:f1:b2:c8:fb:29:11:64:14: 20:f4:f9:43:9c:51:6b:0c:b1:b9:4b:e9:1c:17:12: 42:e6:30:72:f1:ba:42:33:e6:1c:1b:fd:98:b4:69: d1:7b:48:f5:70:26:3f:02:38:41:23:18:aa:23:4c: 20:ec:87:47:6e:d1:40:0d:37:ea:50:03:e2:81:09: 2e:cb:82:c6:0c:24:d0:71:bf:ef:a6:18:c8:3c:29: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:34:02:F1:E2:8C:AE:3C:CA:2F:75:47:0B:63:59:13:D1:E1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2f4e8136-4f8b-3401-9a4b-293d34fe3c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a6:c9:97:83:14:df:5f:df:47:48:6a:1a:d5:d9:bf:71:41: f8:bc:82:0b:90:6a:c3:db:a1:9a:18:e0:97:d5:35:72:cc:0d: 9d:1d:8e:d5:ca:b5:b0:25:c1:ea:a5:4e:da:a9:c3:f4:a8:da: 93:3c:0e:a3:84:d5:88:10:20:7c:91:9b:0d:22:47:ac:19:94: b7:f4:8d:14:d7:29:5c:50:20:e5:39:ac:5f:30:78:08:cc:ef: 02:64:a7:72:ac:84:32:17:87:89:45:8c:be:c0:59:4d:9d:e6: ee:01:6b:d1:ec:80:79:ed:15:b0:07:d4:ce:d4:a8:7d:1b:c0: c9:b6:3b:b5:a8:8f:79:b5:5b:09:47:8e:bc:d2:2e:08:12:e6: e8:dd:52:07:e9:df:f0:cf:bc:91:2e:6b:bb:48:c0:6b:aa:d6: 0d:19:dd:b5:ca:e0:4d:82:28:04:db:7a:06:3f:6c:aa:49:a7: ff:53:0c:12:6d:5a:44:9f:b8:84:0f:d9:9e:f6:6a:52:00:70: 97:51:2d:2f:f9:26:a8:85:67:f8:ec:b1:16:7d:49:f0:0c:e5: 37:12:d6:d7:80:c7:9e:63:f3:5d:dc:5e:13:53:56:e3:91:14: f0:01:2d:fe:a0:39:68:9a:ec:7f:fa:4a:33:32:32:00:fd:2e: 0a:f8:c5:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnObwG2Kj9L1CiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc0MzllZTgtMzU2Mi00NmZiLTg5MDYtMjc5MGY5MzRjZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXnbIeDiOATSl/IFGOwI0IwKa0wRc7u9ebn hKdSmXSkGSZQuBee+WhvxYO5xOnrzTCqILNviOQi9FFqiEiyMhr27F5af7QF578Q 1GksnMrmXMrJzrRsk3N+QSu+7BUMhkkhup6v2nrUGtL855Shw5F5GNcR6dvQHJS2 7z67XNNpYIU2AF6rpQpU7+csCxGDcfjXCAyadsCKQHHwo/qiHTpiB6RldwR1zF4H 8bLI+ykRZBQg9PlDnFFrDLG5S+kcFxJC5jBy8bpCM+YcG/2YtGnRe0j1cCY/AjhB IxiqI0wg7IdHbtFADTfqUAPigQkuy4LGDCTQcb/vphjIPCmxYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnqNALx4oyuPMovdUcLY1kT0eFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmY0ZTgxMzYtNGY4Yi0z NDAxLTlhNGItMjkzZDM0ZmUzYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+myZeDFN9f30dIahrV2b9xQfi8gguQasPboZoY4JfVNXLMDZ0djtXK tbAlweqlTtqpw/So2pM8DqOE1YgQIHyRmw0iR6wZlLf0jRTXKVxQIOU5rF8weAjM 7wJkp3KshDIXh4lFjL7AWU2d5u4Ba9HsgHntFbAH1M7UqH0bwMm2O7Woj3m1WwlH jrzSLggS5ujdUgfp3/DPvJEua7tIwGuq1g0Z3bXK4E2CKATbegY/bKpJp/9TDBJt WkSfuIQP2Z72alIAcJdRLS/5JqiFZ/jssRZ9SfAM5TcS1teAx55j813cXhNTVuOR FPABLf6gOWia7H/6SjMyMgD9Lgr4xTE= -----END CERTIFICATE-----Generated at Sun Sep 13 05:08:42 2026 by rpki-client