$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa File: 3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa (raw, json) Hash identifier: EdaVaHa8OxWTbl/VeWHY804tJsR56GITWJl9ipAJP4Q= Subject key identifier: 91:35:D2:39:4D:14:AB:AB:86:C6:42:38:35:A2:E4:90:F2:B7:9C:70 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F85785BFB6EC665A1206A02C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 11427 IP address blocks: 216.224.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:5b:fb:6e:c6:65:a1:20:6a:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=bb0b5e82-c596-49f3-805d-fc4e0f5244fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:dc:08:20:b0:e6:df:ee:c8:ac:80:06:94: e7:63:c8:9c:3f:f8:76:24:e5:1d:a3:08:a3:8a:66: 23:94:58:e1:bc:16:3b:91:c9:a5:12:09:84:c6:07: f4:39:a8:ee:9a:b9:02:1e:04:d3:cd:76:a4:57:91: d8:1d:c6:d5:28:26:a0:77:47:9c:d9:39:16:fa:da: d3:11:53:f0:4d:a4:c7:69:45:6c:c0:a2:4f:4c:fb: 88:e6:04:9f:f9:3e:cf:ed:c9:38:cd:16:8f:e9:9b: 0c:a1:2c:04:51:a3:93:bf:8c:d8:ea:8f:08:66:df: 87:d2:1e:03:86:2b:c0:e8:83:e9:0a:29:9f:0d:4f: f8:ef:ad:dc:1e:50:91:6a:ab:e5:43:8e:7b:a1:50: 85:4e:08:5d:4b:4a:d2:c3:47:ed:55:96:85:0d:31: 08:21:be:7c:da:94:1b:7b:a3:7e:a0:b7:04:75:e6: c2:9d:69:72:de:68:0b:46:e3:c6:54:c9:4c:28:df: 6b:d9:c1:ee:ea:78:20:41:f3:db:78:9f:39:22:17: 18:f2:ee:02:db:a0:7d:bc:d2:9a:c7:74:53:2a:88: 47:18:f2:dd:f8:2f:97:0e:9f:b8:a3:f8:cf:60:70: b6:b6:a9:b9:d8:6b:17:ae:05:ef:46:cb:4f:de:a8: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:D2:39:4D:14:AB:AB:86:C6:42:38:35:A2:E4:90:F2:B7:9C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fb:56:c1:ed:40:ee:8b:81:6f:10:50:77:93:8e:52:70:22: a0:c4:b8:b5:1c:b1:cb:38:14:b7:ac:5e:81:84:18:f2:ca:d7: 3d:ee:22:9c:27:7f:2a:b2:74:fa:3d:5f:29:1d:ae:3b:33:c8: 90:ef:fa:51:23:a5:97:cc:c7:93:d2:8e:a1:95:ba:26:1c:a9: 23:a0:4f:42:98:93:32:f1:c3:15:7a:f1:16:c1:fc:ef:a2:e1: 28:02:f8:0b:bb:5b:b4:dc:20:ee:15:d2:42:99:c0:74:27:9b: 86:8f:18:7d:9c:ed:3a:3a:05:65:6d:37:f1:7e:ed:6c:20:b4: 7c:14:a5:a4:33:6b:d4:06:0c:0f:69:59:49:f2:6e:de:24:0a: c6:80:a2:2f:3a:55:96:e2:5c:6d:72:59:01:27:0f:f2:fa:23: 06:bc:e1:c0:ce:c9:d1:e5:f4:76:e6:ad:97:fd:16:bc:f6:85: b9:68:c1:41:90:7e:6a:88:1c:53:55:cc:63:7f:9e:66:6e:26: d6:b6:30:08:f7:d1:76:40:00:eb:f7:8d:01:1c:2a:26:e1:6e: 1b:37:ec:6e:fe:05:69:e5:80:5c:66:c9:87:3c:7c:d1:d9:62: e6:86:79:b6:b0:c6:ee:a3:46:32:a5:1e:15:bb:5b:cc:c4:84: fc:80:5a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeFv7bsZloSBqAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YmIwYjVlODItYzU5Ni00OWYzLTgwNWQtZmM0ZTBmNTI0NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2TcCCCw5t/uyKyABpTnY8icP/h2JOUdowij imYjlFjhvBY7kcmlEgmExgf0OajumrkCHgTTzXakV5HYHcbVKCagd0ec2TkW+trT EVPwTaTHaUVswKJPTPuI5gSf+T7P7ck4zRaP6ZsMoSwEUaOTv4zY6o8IZt+H0h4D hivA6IPpCimfDU/4763cHlCRaqvlQ457oVCFTghdS0rSw0ftVZaFDTEIIb582pQb e6N+oLcEdebCnWly3mgLRuPGVMlMKN9r2cHu6nggQfPbeJ85IhcY8u4C26B9vNKa x3RTKohHGPLd+C+XDp+4o/jPYHC2tqm52GsXrgXvRstP3qjTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE10jlNFKurhsZCODWi5JDyt5xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZkN2FjYTgtYWI1NS0z MWZhLWEzYjgtYTM4MDlmNWQwOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD37VsHtQO6LgW8QUHeTjlJwIqDEuLUcscs4FLesXoGEGPLK1z3uIpwn fyqydPo9XykdrjszyJDv+lEjpZfMx5PSjqGVuiYcqSOgT0KYkzLxwxV68RbB/O+i 4SgC+Au7W7TcIO4V0kKZwHQnm4aPGH2c7To6BWVtN/F+7WwgtHwUpaQza9QGDA9p WUnybt4kCsaAoi86VZbiXG1yWQEnD/L6Iwa84cDOydHl9HbmrZf9Frz2hblowUGQ fmqIHFNVzGN/nmZuJta2MAj30XZAAOv3jQEcKibhbhs37G7+BWnlgFxmyYc8fNHZ YuaGebawxu6jRjKlHhW7W8zEhPyAWmE= -----END CERTIFICATE-----Generated at Sat Oct 24 05:15:00 2026 by rpki-client