$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa File: 9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa (raw, json) Hash identifier: 1Ux4jbV8iNuWR99nHlnrAqWza3BN95C4ijUr/ceunpc= Subject key identifier: 8C:46:90:3F:94:89:8F:1E:1F:E8:E8:52:6E:0A:2E:4E:87:9B:AF:98 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D8EF57EEE6E83281BA608BD80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 211373 IP address blocks: 216.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:7e:ee:6e:83:28:1b:a6:08:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0ac94917-8466-4124-b4bf-b58d1744f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:86:6a:64:77:2d:48:c4:2c:07:54:f8:65: 25:64:51:be:5e:25:43:06:04:38:e0:36:17:8d:77: 53:8d:a1:3b:cf:43:03:1d:ea:b8:0b:12:85:99:83: 6a:7b:6d:ff:72:d2:ed:09:c6:58:81:62:85:70:85: 43:37:de:5f:f1:ca:e2:99:ff:54:24:c3:81:78:a6: 37:a0:5b:0f:84:9b:48:99:db:16:f3:bf:15:fe:6a: 4e:12:e8:3d:7f:b9:0d:88:83:c3:61:56:d0:04:ed: 4a:6d:f8:b1:e8:43:ef:38:c4:e0:da:eb:4e:29:ba: 09:97:07:e6:e5:97:27:31:b5:8b:42:0d:00:0f:18: 4c:e5:6f:3c:10:6e:af:e0:0f:ad:2b:08:ec:c3:6d: d5:d3:c8:ce:9f:c0:4a:f2:7e:2f:5b:84:24:b9:fc: 0b:30:3e:30:00:4e:53:3e:52:44:d9:d6:08:c6:46: a3:bd:86:2e:a6:93:c7:4b:6d:69:cf:f7:11:98:12: 99:fb:13:69:e0:c4:18:c4:ec:31:cf:e8:bf:c6:65: 57:52:f1:eb:4a:6f:4a:16:30:fc:31:50:4d:7f:1a: 94:0b:fd:43:0a:d4:ae:8b:7c:ec:4f:0e:8a:ec:4e: 15:da:93:b0:9d:ef:8f:69:e3:31:ce:99:5c:1b:60: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:46:90:3F:94:89:8F:1E:1F:E8:E8:52:6E:0A:2E:4E:87:9B:AF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:74:a1:dd:5c:aa:04:2d:74:df:58:e4:1c:25:08:07:58:f3: bd:94:74:30:51:ac:d2:a0:0d:5a:bd:e0:ec:87:0f:15:71:36: 23:12:b9:2c:c4:1c:a1:d6:7d:09:a7:96:e2:1e:f0:36:43:f8: 01:94:91:a0:6a:a8:d0:71:46:94:97:e8:41:cf:d0:79:9c:16: 4f:ba:b7:ad:3f:e1:bf:ea:ed:01:4d:f2:76:50:a6:36:c9:d7: df:2e:5c:5a:64:fe:f0:80:99:d0:10:6b:e1:ca:13:3c:c1:f4: 4d:34:77:53:8c:8c:f2:03:14:4d:93:ed:4e:7d:36:c8:2b:7f: 3d:54:bd:84:c9:7b:79:22:89:9a:dc:e5:ff:34:74:d8:d3:85: fc:08:7b:df:b7:ad:ff:d2:84:06:0d:39:ae:3c:49:67:5f:78: da:ab:6e:40:87:68:0d:9e:e3:8f:77:ef:94:0e:22:85:64:1b: cf:c6:90:30:ff:3a:89:d6:02:a1:98:c8:a8:de:73:d0:fb:26: 6c:a2:bd:f7:b4:e1:94:a0:f2:4a:fb:b1:de:e3:85:68:1b:bf: 20:45:4b:8b:fd:b1:ad:54:b2:10:89:e7:46:3e:59:8e:82:0f: 26:ed:29:21:8f:92:c3:3e:c5:38:5c:3e:32:66:40:bf:1d:c6: 2a:05:a5:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9X7uboMoG6YIvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGFjOTQ5MTctODQ2Ni00MTI0LWI0YmYtYjU4ZDE3NDRmNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjuGamR3LUjELAdU+GUlZFG+XiVDBgQ44DYX jXdTjaE7z0MDHeq4CxKFmYNqe23/ctLtCcZYgWKFcIVDN95f8crimf9UJMOBeKY3 oFsPhJtImdsW878V/mpOEug9f7kNiIPDYVbQBO1Kbfix6EPvOMTg2utOKboJlwfm 5ZcnMbWLQg0ADxhM5W88EG6v4A+tKwjsw23V08jOn8BK8n4vW4QkufwLMD4wAE5T PlJE2dYIxkajvYYuppPHS21pz/cRmBKZ+xNp4MQYxOwxz+i/xmVXUvHrSm9KFjD8 MVBNfxqUC/1DCtSui3zsTw6K7E4V2pOwne+PaeMxzplcG2DZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxGkD+UiY8eH+joUm4KLk6Hm6+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWM3NjhlMDMtZDdhOC0z ZDgxLTg0ODYtZWY0ZjVjM2E5YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd0od1cqgQtdN9Y5BwlCAdY872UdDBRrNKgDVq94OyHDxVxNiMSuSzE HKHWfQmnluIe8DZD+AGUkaBqqNBxRpSX6EHP0HmcFk+6t60/4b/q7QFN8nZQpjbJ 198uXFpk/vCAmdAQa+HKEzzB9E00d1OMjPIDFE2T7U59Nsgrfz1UvYTJe3kiiZrc 5f80dNjThfwIe9+3rf/ShAYNOa48SWdfeNqrbkCHaA2e449375QOIoVkG8/GkDD/ OonWAqGYyKjec9D7Jmyivfe04ZSg8kr7sd7jhWgbvyBFS4v9sa1UshCJ50Y+WY6C DybtKSGPksM+xThcPjJmQL8dxioFpWs= -----END CERTIFICATE-----Generated at Mon Apr 20 01:54:49 2026 by rpki-client