$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c24509f3-a2a0-393c-b4af-86abcb1fe94f.roa File: c24509f3-a2a0-393c-b4af-86abcb1fe94f.roa (raw, json) Hash identifier: pFuAdg1XCB7bfLl5oSMtzqOtCOoBtE788/IsjUHN8no= Subject key identifier: 04:09:57:66:B2:6D:E7:55:9B:E5:22:5B:CE:5C:8E:B2:74:59:BF:C1 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584ECBD1EE573DAB800FE5AE9E80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c24509f3-a2a0-393c-b4af-86abcb1fe94f.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 834 IP address blocks: 216.83.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:ee:57:3d:ab:80:0f:e5:ae:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=cf09be8b-3acd-4ac8-85f7-4f30d0a1cd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:72:58:63:8f:f4:8a:13:09:78:5b:f4:5d: 25:1f:f4:87:24:36:de:97:1c:0a:a4:67:90:8c:90: 66:71:12:74:f9:79:f3:a2:a8:6c:12:7c:fc:2e:d8: d8:0a:b8:03:01:99:75:32:a0:8c:b1:c3:ab:73:e7: ba:10:b0:dd:db:5b:19:34:6d:d8:62:34:2e:cd:f9: 24:de:05:fd:9c:5b:24:e0:0d:09:0a:47:04:d4:b2: e0:71:96:8b:80:38:ba:f1:25:b3:11:d7:8f:a8:e7: 2c:a8:eb:a7:7e:52:43:56:45:46:87:aa:b5:b4:1e: c0:7f:c3:de:ce:f2:8f:6d:12:76:80:4c:3f:4a:bc: 7a:4e:6d:a5:ea:a9:cb:d1:a9:bf:7b:56:93:39:31: 15:c2:97:fd:4f:07:00:8a:5b:31:8c:dd:0c:10:3b: b4:b5:c7:85:33:86:26:19:68:e1:7e:47:2a:db:cc: 90:d2:b4:07:09:a8:d8:51:0c:44:6c:f1:58:bf:cd: e2:d3:86:0c:8a:10:91:c8:0f:69:05:b8:3b:7d:75: 1f:2e:2a:f4:6f:35:6f:93:30:7b:e0:b5:60:3c:67: 37:d7:06:29:4e:e1:9f:19:ce:83:5a:70:a9:bd:e5: e3:7b:56:42:2c:e2:30:d6:33:88:c7:c5:e4:5e:ab: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:57:66:B2:6D:E7:55:9B:E5:22:5B:CE:5C:8E:B2:74:59:BF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c24509f3-a2a0-393c-b4af-86abcb1fe94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0c:9b:d6:ea:bf:7b:fc:15:01:e7:82:44:78:6c:a8:74:a8: e1:f5:9b:12:ad:96:38:e3:0d:35:b5:45:d0:07:e2:db:48:fe: d0:ff:83:c9:ff:5e:89:88:65:3b:4f:7d:0a:4c:eb:08:f2:47: 92:f8:09:76:fc:08:97:1a:54:1a:5c:6c:93:6d:c7:c2:4e:81: 2a:ab:9e:4c:df:08:fa:e0:54:b1:22:27:f7:27:68:31:05:14: 25:da:c2:11:ac:b7:c1:79:bb:c5:19:80:26:ea:d0:c3:f1:47: f6:39:64:fd:af:e2:a1:20:68:e3:8e:d4:4c:22:9f:48:ec:0c: 49:89:14:f0:75:58:91:5c:70:22:96:b4:34:43:c5:d6:79:a8: c5:2f:2d:db:9d:39:6b:c4:7d:6d:ff:70:73:db:04:60:1e:fa: 90:9e:e7:fe:1c:c8:07:c9:b2:88:4b:82:14:b8:60:2f:a4:a2: 4a:ee:4f:7a:59:d2:19:60:5e:1d:c5:62:c4:a4:6c:22:5a:f1: 01:f5:e0:ac:5c:c6:d7:a6:dd:82:5a:e7:09:a3:6d:3e:57:da: 9b:b2:2f:e1:ef:d7:a7:e6:72:a6:00:48:6e:c6:9e:cf:1f:18: 33:90:d4:67:ec:8c:75:0f:ee:c7:b8:21:47:0c:e4:2f:73:02: 23:a8:c7:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0e5XPauAD+WunoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk Y2YwOWJlOGItM2FjZC00YWM4LTg1ZjctNGYzMGQwYTFjZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGByWGOP9IoTCXhb9F0lH/SHJDbelxwKpGeQ jJBmcRJ0+XnzoqhsEnz8LtjYCrgDAZl1MqCMscOrc+e6ELDd21sZNG3YYjQuzfkk 3gX9nFsk4A0JCkcE1LLgcZaLgDi68SWzEdePqOcsqOunflJDVkVGh6q1tB7Af8Pe zvKPbRJ2gEw/Srx6Tm2l6qnL0am/e1aTOTEVwpf9TwcAilsxjN0MEDu0tceFM4Ym GWjhfkcq28yQ0rQHCajYUQxEbPFYv83i04YMihCRyA9pBbg7fXUfLir0bzVvkzB7 4LVgPGc31wYpTuGfGc6DWnCpveXje1ZCLOIw1jOIx8XkXqumGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQJV2aybedVm+UiW85cjrJ0Wb/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYzI0NTA5ZjMtYTJhMC0z OTNjLWI0YWYtODZhYmNiMWZlOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FMuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Mm9bqv3v8FQHngkR4bKh0qOH1mxKtljjjDTW1RdAH4ttI/tD/g8n/ XomIZTtPfQpM6wjyR5L4CXb8CJcaVBpcbJNtx8JOgSqrnkzfCPrgVLEiJ/cnaDEF FCXawhGst8F5u8UZgCbq0MPxR/Y5ZP2v4qEgaOOO1Ewin0jsDEmJFPB1WJFccCKW tDRDxdZ5qMUvLdudOWvEfW3/cHPbBGAe+pCe5/4cyAfJsohLghS4YC+kokruT3pZ 0hlgXh3FYsSkbCJa8QH14Kxcxtem3YJa5wmjbT5X2puyL+Hv16fmcqYASG7Gns8f GDOQ1GfsjHUP7se4IUcM5C9zAiOox7o= -----END CERTIFICATE-----Generated at Thu Aug 13 12:21:12 2026 by rpki-client