$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a2bc1c6f-149f-3420-8247-16c685a3ea55.roa File: a2bc1c6f-149f-3420-8247-16c685a3ea55.roa (raw, json) Hash identifier: /UJ8MBqzZyA6RYoDx8r1Oih6MmG9mbrgmOIUUTNNid0= Subject key identifier: 76:FA:C5:0E:E4:D1:29:36:30:F4:8D:95:A3:EF:D1:24:B1:FD:04:DB Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D5024EAE876D3503B1DC39480 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a2bc1c6f-149f-3420-8247-16c685a3ea55.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 834 IP address blocks: 216.83.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:ea:e8:76:d3:50:3b:1d:c3:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=7789f4e2-c832-40c1-9070-fbde5094ef63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:58:ce:fb:bd:a2:8a:f8:cf:da:b3:0f:5f: 02:56:82:ce:4a:b3:16:fa:cf:2b:45:dc:01:ba:be: ca:0e:80:69:ac:c7:c9:df:65:f0:e1:ce:07:85:e3: fa:d3:af:50:d2:06:f5:96:32:20:12:06:6b:f3:d2: 97:5a:11:05:77:d6:4c:fe:e1:4f:df:15:ed:7c:fd: 28:51:d4:26:9b:da:2f:cc:87:5f:4e:5d:dc:0e:3d: 78:df:da:5e:e2:07:9d:c8:89:20:f1:26:63:58:eb: d2:15:10:84:91:ef:de:82:19:e7:25:9d:e6:c3:88: dc:b7:7a:86:a2:c9:9e:97:86:55:32:4e:f5:f8:ad: 63:7d:12:f8:1f:b5:b9:28:c3:d6:ca:01:bf:b4:29: ab:ab:13:7c:c1:2c:38:f7:d1:97:e2:b0:0e:b7:f1: d5:83:ce:68:56:28:b4:e3:07:84:4a:54:ad:e2:c4: 1d:44:79:fe:79:fe:18:35:40:4d:19:4c:b4:ed:64: 72:ec:2b:f5:72:ad:13:6d:0d:8e:4b:62:5c:f6:de: 5d:1e:f7:73:d2:84:b9:5c:c9:b8:ec:5b:5c:3b:f9: 5b:d8:ce:76:72:f5:32:93:10:8a:4c:b9:75:16:81: b3:2e:b2:41:35:ab:66:ab:d1:5d:0e:87:f9:9e:43: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FA:C5:0E:E4:D1:29:36:30:F4:8D:95:A3:EF:D1:24:B1:FD:04:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/a2bc1c6f-149f-3420-8247-16c685a3ea55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:09:82:5c:08:11:03:4c:fd:73:0b:41:36:9c:57:26:51:a6: 0f:fb:9c:47:5e:ef:1f:07:33:e7:69:cc:d8:52:3c:6d:5a:52: 42:91:b7:43:4d:67:1a:40:84:58:bb:e9:44:00:4a:d5:47:98: 7b:12:70:1f:e1:f5:b9:33:be:15:93:2f:3b:65:2e:3b:d1:d6: 96:f6:10:dd:22:17:2e:5d:c6:1a:b0:1f:1c:84:ea:f1:1e:13: b1:6c:6c:db:10:98:96:0b:78:6e:27:82:88:03:f7:d4:72:57: 65:3d:ec:99:28:28:9e:dc:83:5b:f7:a3:37:1a:b7:92:18:f2: 9d:7f:d8:c1:79:15:f1:b5:c2:ef:d5:4a:06:51:51:bf:4a:b0: 44:d4:41:a0:10:50:b7:1a:e8:7d:43:28:df:1c:96:f3:2f:c6: 28:3a:9a:34:92:14:a9:17:2c:aa:ed:62:15:68:87:92:06:41: 82:f3:db:38:43:2d:36:6b:b9:c0:db:ae:4b:ab:8b:60:84:3c: 63:b4:da:60:0e:fc:83:87:3f:1a:bb:88:dc:b4:29:48:92:32: 06:4e:d2:ce:4d:b2:99:73:94:89:15:bd:a6:9f:b5:6e:fb:d1: 1a:07:37:cb:39:f0:8a:cb:10:f1:f8:d2:84:82:b1:e2:e6:01: 60:59:22:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJOrodtNQOx3DlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk Nzc4OWY0ZTItYzgzMi00MGMxLTkwNzAtZmJkZTUwOTRlZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWNYzvu9oor4z9qzD18CVoLOSrMW+s8rRdwB ur7KDoBprMfJ32Xw4c4HheP6069Q0gb1ljIgEgZr89KXWhEFd9ZM/uFP3xXtfP0o UdQmm9ovzIdfTl3cDj1439pe4gedyIkg8SZjWOvSFRCEke/eghnnJZ3mw4jct3qG osmel4ZVMk71+K1jfRL4H7W5KMPWygG/tCmrqxN8wSw499GX4rAOt/HVg85oVii0 4weESlSt4sQdRHn+ef4YNUBNGUy07WRy7Cv1cq0TbQ2OS2Jc9t5dHvdz0oS5XMm4 7FtcO/lb2M52cvUykxCKTLl1FoGzLrJBNatmq9FdDof5nkMUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb6xQ7k0Sk2MPSNlaPv0SSx/QTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYTJiYzFjNmYtMTQ5Zi0z NDIwLTgyNDctMTZjNjg1YTNlYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FM1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYJglwIEQNM/XMLQTacVyZRpg/7nEde7x8HM+dpzNhSPG1aUkKRt0NN ZxpAhFi76UQAStVHmHsScB/h9bkzvhWTLztlLjvR1pb2EN0iFy5dxhqwHxyE6vEe E7FsbNsQmJYLeG4ngogD99RyV2U97JkoKJ7cg1v3ozcat5IY8p1/2MF5FfG1wu/V SgZRUb9KsETUQaAQULca6H1DKN8clvMvxig6mjSSFKkXLKrtYhVoh5IGQYLz2zhD LTZrucDbrkuri2CEPGO02mAO/IOHPxq7iNy0KUiSMgZO0s5NsplzlIkVvaaftW77 0RoHN8s58IrLEPH40oSCseLmAWBZImk= -----END CERTIFICATE-----Generated at Wed Apr 15 20:31:59 2026 by rpki-client