$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cc25a448-02bd-3174-b917-6253d3e4d6f8.roa File: cc25a448-02bd-3174-b917-6253d3e4d6f8.roa (raw, json) Hash identifier: Jm+GGV+j1LQ+MHZBckfRtZMD/YRnVMG26IWKKgLCChs= Subject key identifier: 86:30:D3:CE:00:9F:85:B6:50:B7:B5:A5:F2:5A:23:F7:C6:56:D2:82 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D9B8560DAA76D992C0E075D80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cc25a448-02bd-3174-b917-6253d3e4d6f8.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 214432 IP address blocks: 69.176.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:60:da:a7:6d:99:2c:0e:07:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=8844474c-b652-4e3a-a977-eb1e4d953d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:7f:58:e9:68:aa:a4:9e:b6:84:5d:2b:3e: be:96:c4:51:d8:fa:06:78:f9:91:a1:d1:c3:90:8a: 85:22:89:37:29:9d:38:8f:42:c7:0f:11:64:91:cc: de:63:dd:f9:e7:d7:22:78:0b:80:b8:3b:d0:dc:13: dc:32:3b:a4:d1:07:34:b8:ef:0c:9f:fb:e7:93:32: cd:48:65:f6:fd:31:24:c1:2d:9c:f9:f9:81:c5:d6: b3:f1:c3:b4:d4:6b:d8:63:12:a0:ef:0f:41:67:f0: 95:b4:b3:63:e4:c0:f2:b7:3b:1e:f7:8d:dd:cd:b6: 2d:ea:5f:7d:47:c8:42:33:72:b9:ff:44:62:4e:50: b8:75:85:56:b1:2e:77:e8:7d:9e:14:9d:0f:4a:de: d0:5a:f9:e5:05:5c:28:97:b8:a7:78:30:f2:fe:a4: c5:c3:2b:8b:3c:5a:0d:b0:c4:cb:84:5b:1e:52:cc: 18:7e:d8:16:04:54:a6:c6:bf:4a:c9:2f:14:78:b5: 20:65:0a:8e:36:b0:fb:c1:4d:d3:89:45:64:9f:4a: 14:9e:90:85:89:67:76:82:a6:02:db:ba:a5:43:5d: b8:17:25:79:77:59:b7:30:20:ac:e6:26:30:1b:74: d0:b1:9e:56:e7:c5:a4:ce:56:d6:3f:06:11:1f:e3: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:30:D3:CE:00:9F:85:B6:50:B7:B5:A5:F2:5A:23:F7:C6:56:D2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cc25a448-02bd-3174-b917-6253d3e4d6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f9:fe:88:4a:f4:bd:da:b5:ef:da:37:0a:42:cf:23:47:8f: fb:d3:f8:09:86:66:79:eb:f0:47:b4:9c:71:63:cd:d1:30:35: e1:91:aa:ec:53:3c:64:cf:05:e0:48:9c:08:9d:ae:dc:cb:7c: 49:4a:86:30:be:25:0b:4b:4b:59:c7:fd:37:53:2e:e2:c7:8d: ce:a8:1a:62:81:45:fb:79:f8:36:c5:5d:3d:09:56:db:91:74: 5a:86:be:34:76:28:c7:ad:43:83:b4:f0:32:c8:c2:95:e2:9f: 16:e4:09:75:57:74:ca:52:35:b3:c4:17:e4:40:39:af:f9:b9: 61:94:f7:3d:f8:3d:f0:28:2e:3d:9c:75:dd:8e:7e:7a:c2:57: 54:ea:e6:47:38:8d:aa:21:c8:36:62:56:dd:c9:4c:01:08:29: be:e5:a9:a5:55:a5:01:40:97:34:e9:db:0e:a8:cb:bc:12:c3: f3:0e:cc:7d:c2:03:3e:32:f0:1a:27:cd:7e:e1:8b:a0:8f:06: 6c:f4:f8:37:0d:4d:22:4b:e3:cf:b3:be:ae:d5:b1:23:78:fa: 52:6b:81:bd:d4:60:f0:31:81:dd:3d:fb:e5:52:2a:cd:18:c2: 6b:c1:01:82:db:f4:87:35:19:64:5a:12:f6:8b:80:2e:e7:e7: b9:84:28:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhWDap22ZLA4HXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ODg0NDQ3NGMtYjY1Mi00ZTNhLWE5NzctZWIxZTRkOTUzZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKt/WOloqqSetoRdKz6+lsRR2PoGePmRodHD kIqFIok3KZ04j0LHDxFkkczeY93559cieAuAuDvQ3BPcMjuk0Qc0uO8Mn/vnkzLN SGX2/TEkwS2c+fmBxdaz8cO01GvYYxKg7w9BZ/CVtLNj5MDytzse943dzbYt6l99 R8hCM3K5/0RiTlC4dYVWsS536H2eFJ0PSt7QWvnlBVwol7ineDDy/qTFwyuLPFoN sMTLhFseUswYftgWBFSmxr9KyS8UeLUgZQqONrD7wU3TiUVkn0oUnpCFiWd2gqYC 27qlQ124FyV5d1m3MCCs5iYwG3TQsZ5W58WkzlbWPwYRH+OdtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYw084An4W2ULe1pfJaI/fGVtKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2MyNWE0NDgtMDJiZC0z MTc0LWI5MTctNjI1M2QzZTRkNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj5/ohK9L3ate/aNwpCzyNHj/vT+AmGZnnr8Ee0nHFjzdEwNeGRquxT PGTPBeBInAidrtzLfElKhjC+JQtLS1nH/TdTLuLHjc6oGmKBRft5+DbFXT0JVtuR dFqGvjR2KMetQ4O08DLIwpXinxbkCXVXdMpSNbPEF+RAOa/5uWGU9z34PfAoLj2c dd2OfnrCV1Tq5kc4jaohyDZiVt3JTAEIKb7lqaVVpQFAlzTp2w6oy7wSw/MOzH3C Az4y8BonzX7hi6CPBmz0+DcNTSJL48+zvq7VsSN4+lJrgb3UYPAxgd09++VSKs0Y wmvBAYLb9Ic1GWRaEvaLgC7n57mEKGs= -----END CERTIFICATE-----Generated at Mon Apr 27 08:00:58 2026 by rpki-client