$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa File: 3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa (raw, json) Hash identifier: nORQUv6JklqIv1bd9i/YwBXmfZAQoLzgS3lZc+Gf7YU= Subject key identifier: 8B:7F:1E:8F:2C:20:48:87:88:32:E9:71:E1:04:43:23:C3:99:35:82 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584EA7885C6D26141B803623F380 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54004 IP address blocks: 216.83.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5c:6d:26:14:1b:80:36:23:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4b368fde-5d54-413f-940d-57b34c43c817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:69:61:2b:8a:22:ac:7d:d3:9e:56:00:8f:63: 06:f0:28:6c:96:15:cf:de:ac:19:a1:03:c6:c8:a3: 6b:fd:20:d9:11:80:f3:c5:01:9e:f6:81:32:80:8b: c1:fe:5b:dc:f3:1e:57:42:7e:7d:1c:96:e0:4b:ec: 0e:62:47:7a:b4:9d:44:bb:1f:4f:47:ea:ea:23:df: e0:44:56:63:a6:a3:a0:9b:c0:78:41:30:91:bb:d3: d6:da:46:a8:e4:9d:db:df:8e:f3:6a:d4:22:50:c4: 3c:47:61:ef:06:17:87:58:b1:49:35:00:8e:15:d7: 0f:e8:7d:17:d4:95:2f:48:ce:4d:fa:2d:83:a5:a6: 70:ac:30:61:93:20:90:6a:fd:37:33:65:55:b0:05: c1:8a:7b:b3:ff:59:ac:7e:68:4b:7c:ba:b0:26:ff: 1b:5d:60:0e:9d:26:95:43:ae:97:2b:a8:36:39:36: 9e:34:f6:eb:26:a6:0f:05:65:ba:8d:d8:49:aa:17: d0:ab:5b:13:08:e2:b9:84:d2:2b:bc:dc:a5:8e:d6: 60:e5:44:96:8f:68:bd:a5:7e:79:f2:49:7a:09:67: 54:a3:cd:a2:ef:e4:5f:2c:da:d8:6b:93:36:c6:1c: 0b:c2:fc:36:09:06:47:ee:e1:89:ee:43:0c:54:dc: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7F:1E:8F:2C:20:48:87:88:32:E9:71:E1:04:43:23:C3:99:35:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:36:cf:eb:6f:0b:85:31:fd:52:de:ca:f7:21:89:f0:6c:ca: 9d:cf:99:1f:0a:5b:f3:32:a0:a0:ca:80:fc:de:97:61:bb:f3: af:6e:55:29:44:c6:c5:d4:d2:af:e1:d7:c4:f4:2a:52:86:51: 22:05:90:dc:84:c0:51:4e:ba:48:47:23:d3:2d:b1:48:e6:71: aa:21:f0:f7:f9:3c:f3:f6:59:fa:e8:d6:f5:e5:f0:53:53:06: 5e:a8:a2:fe:1b:aa:02:54:76:fb:ca:da:a5:c2:4a:11:7d:7d: d5:8a:66:be:bd:ca:10:a4:1a:03:5e:ff:d8:f4:10:84:c3:0b: 71:f9:3c:6c:e4:34:5c:b3:59:cd:7b:71:c5:06:86:0c:aa:04: 12:d3:89:e6:39:de:aa:fc:a4:3d:af:36:3e:71:e2:f4:a2:49: 08:ef:66:cd:22:e9:82:d3:a1:72:9b:bc:9b:32:61:3d:a7:19: fa:72:d2:b1:65:e4:a5:24:de:b2:31:13:86:a1:38:51:b6:92: ff:48:e5:0e:13:5b:5c:a6:c4:02:a2:f4:56:15:49:59:a2:42: e7:eb:2d:f0:c2:b8:7f:72:1f:20:91:77:63:a6:80:0b:1a:dd: 3e:8f:0a:21:57:9b:f6:b7:8d:a9:dc:55:9a:6c:aa:7a:98:b1: 29:80:d8:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFxtJhQbgDYj84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGIzNjhmZGUtNWQ1NC00MTNmLTk0MGQtNTdiMzRjNDNjODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmlhK4oirH3TnlYAj2MG8ChslhXP3qwZoQPG yKNr/SDZEYDzxQGe9oEygIvB/lvc8x5XQn59HJbgS+wOYkd6tJ1Eux9PR+rqI9/g RFZjpqOgm8B4QTCRu9PW2kao5J3b347zatQiUMQ8R2HvBheHWLFJNQCOFdcP6H0X 1JUvSM5N+i2DpaZwrDBhkyCQav03M2VVsAXBinuz/1msfmhLfLqwJv8bXWAOnSaV Q66XK6g2OTaeNPbrJqYPBWW6jdhJqhfQq1sTCOK5hNIrvNyljtZg5USWj2i9pX55 8kl6CWdUo82i7+RfLNrYa5M2xhwLwvw2CQZH7uGJ7kMMVNw1kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt/Ho8sIEiHiDLpceEEQyPDmTWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzQwNWRlZmMtNmEwYy0z ZmJhLTlhMDItNzNjYmJlMGQxMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY2z+tvC4Ux/VLeyvchifBsyp3PmR8KW/MyoKDKgPzel2G7869uVSlE xsXU0q/h18T0KlKGUSIFkNyEwFFOukhHI9MtsUjmcaoh8Pf5PPP2Wfro1vXl8FNT Bl6oov4bqgJUdvvK2qXCShF9fdWKZr69yhCkGgNe/9j0EITDC3H5PGzkNFyzWc17 ccUGhgyqBBLTieY53qr8pD2vNj5x4vSiSQjvZs0i6YLToXKbvJsyYT2nGfpy0rFl 5KUk3rIxE4ahOFG2kv9I5Q4TW1ymxAKi9FYVSVmiQufrLfDCuH9yHyCRd2OmgAsa 3T6PCiFXm/a3jancVZpsqnqYsSmA2FU= -----END CERTIFICATE-----Generated at Fri Sep 4 23:04:14 2026 by rpki-client