$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa File: 807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa (raw, json) Hash identifier: 6nU5Uvn1xZ5QEt4Q0PO58RFiS7TFXZHh67GyL/vGm8w= Subject key identifier: 8C:0A:5C:3F:1C:87:56:72:11:62:0B:86:6F:34:3E:85:1A:96:88:C8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584EBB11A56CC3414834C45DA0C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 64267 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:a5:6c:c3:41:48:34:c4:5d:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=8383f581-0d1b-496b-8ebd-9da6b6764cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:31:50:ef:f8:44:a2:4c:32:d0:43:a1:27: bf:cd:85:f0:2a:9e:5b:ee:74:e4:e0:38:6c:67:d6: 56:55:53:0f:cf:94:65:d9:21:01:b0:20:d2:2b:c3: e5:4a:6e:de:ce:38:69:95:57:09:01:b4:90:05:8b: 7b:17:ba:fc:fa:47:fc:40:be:d1:9f:d3:4d:0e:24: b4:e0:cc:13:96:e6:cb:04:01:59:dd:6d:f2:64:c6: 39:b7:53:50:cd:50:94:f8:6c:73:5a:45:22:58:11: b4:ae:3b:b1:a3:49:8b:1c:a2:55:b4:27:79:4f:e4: 05:e8:f7:3e:81:0d:23:b4:0b:9c:da:cd:df:c0:05: 93:02:62:0e:7d:11:c5:34:6e:87:87:1e:fc:c0:4d: a3:71:73:90:f9:8f:c5:17:a1:08:34:0a:71:6b:66: 10:d9:3a:fd:13:22:7d:4e:18:4e:18:82:7f:f8:03: 3d:51:42:aa:f3:05:ce:9f:e9:93:d9:1b:1e:3a:25: 5d:29:31:0e:8e:78:56:7c:c1:73:b0:c4:da:31:e6: 8d:fb:cd:2f:8d:20:6c:c6:48:2f:01:a3:8c:1d:d8: dc:6e:06:46:e7:6b:3a:7e:5b:0b:b1:4c:74:c5:74: 3a:33:6c:a4:6f:42:04:bd:aa:89:85:20:9a:44:fc: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:5C:3F:1C:87:56:72:11:62:0B:86:6F:34:3E:85:1A:96:88:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:08:e9:2e:7e:01:f1:3a:a2:bc:b7:3e:8d:d0:57:eb:b8:50: 08:e9:53:3c:48:bc:1d:35:10:7c:97:a4:42:65:e7:86:fc:09: b2:b9:67:7b:ce:41:72:c3:17:be:1e:79:aa:27:d6:0c:8d:5d: 54:1b:b9:c3:03:b5:f2:d6:72:79:b2:f8:54:72:d3:73:42:44: 58:69:4e:5a:86:19:89:59:50:e3:96:58:d2:30:99:1b:64:10: 7b:5b:d4:75:e2:13:ca:40:2d:20:1a:97:ae:ef:f7:02:f5:97: c9:5d:eb:5b:0a:dc:cb:c4:7f:4c:73:df:9d:d8:9d:59:bb:c1: ac:cc:fa:61:a0:bd:3e:06:5e:1d:7e:83:5c:66:05:f4:31:7e: f7:da:30:d7:72:c5:18:09:7f:48:bb:ab:7a:3c:6c:23:a9:09: 92:d4:e2:9b:07:d5:e4:e8:5a:41:18:39:9e:91:2e:5e:01:6b: 2c:be:eb:41:c3:36:3a:b7:e3:84:69:3f:9d:d0:e6:ab:7a:b5: 7a:0a:e7:52:6e:99:52:98:45:77:ec:44:6b:ee:aa:64:0c:b9: 2e:c2:c5:97:be:75:99:d3:13:38:15:2b:75:4d:3e:c0:7e:0b: 61:ed:10:35:30:a9:d6:e1:7a:50:09:50:a2:24:de:57:0d:56: aa:f3:f6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EaVsw0FINMRdoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk ODM4M2Y1ODEtMGQxYi00OTZiLThlYmQtOWRhNmI2NzY0Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJsxUO/4RKJMMtBDoSe/zYXwKp5b7nTk4Dhs Z9ZWVVMPz5Rl2SEBsCDSK8PlSm7ezjhplVcJAbSQBYt7F7r8+kf8QL7Rn9NNDiS0 4MwTlubLBAFZ3W3yZMY5t1NQzVCU+GxzWkUiWBG0rjuxo0mLHKJVtCd5T+QF6Pc+ gQ0jtAuc2s3fwAWTAmIOfRHFNG6Hhx78wE2jcXOQ+Y/FF6EINApxa2YQ2Tr9EyJ9 ThhOGIJ/+AM9UUKq8wXOn+mT2RseOiVdKTEOjnhWfMFzsMTaMeaN+80vjSBsxkgv AaOMHdjcbgZG52s6flsLsUx0xXQ6M2ykb0IEvaqJhSCaRPyTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwKXD8ch1ZyEWILhm80PoUalojIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvODA3YjJmMGEtMTc0OC0z NGIyLWIxN2QtNjc3MTljYThhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgI6S5+AfE6ory3Po3QV+u4UAjpUzxIvB01EHyXpEJl54b8CbK5Z3vO QXLDF74eeaon1gyNXVQbucMDtfLWcnmy+FRy03NCRFhpTlqGGYlZUOOWWNIwmRtk EHtb1HXiE8pALSAal67v9wL1l8ld61sK3MvEf0xz353YnVm7wazM+mGgvT4GXh1+ g1xmBfQxfvfaMNdyxRgJf0i7q3o8bCOpCZLU4psH1eToWkEYOZ6RLl4Bayy+60HD Njq344RpP53Q5qt6tXoK51JumVKYRXfsRGvuqmQMuS7CxZe+dZnTEzgVK3VNPsB+ C2HtEDUwqdbhelAJUKIk3lcNVqrz9lE= -----END CERTIFICATE-----Generated at Thu Sep 3 19:38:45 2026 by rpki-client