$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/e9cea2cb-187f-3518-a90c-81c1199f87b3.roa File: e9cea2cb-187f-3518-a90c-81c1199f87b3.roa (raw, json) Hash identifier: 4K08o0XMtSKY+aPofLO3IH1zmOzpEMTwlb+wx9qdoBA= Subject key identifier: 99:34:D0:A8:12:EA:0F:9B:65:EA:A6:A1:EB:41:95:3C:A2:31:4D:3E Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BB272BA588D1AAA83B143D200 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/e9cea2cb-187f-3518-a90c-81c1199f87b3.roa Signing time: Thu 30 Oct 2025 20:32:45 +0000 ROA not before: Thu 30 Oct 2025 20:32:45 +0000 ROA not after: Wed 28 Jan 2026 21:32:45 +0000 asID: 205886 IP address blocks: 216.83.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:72:ba:58:8d:1a:aa:83:b1:43:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 30 20:32:45 2025 GMT Not After : Jan 28 21:32:45 2026 GMT Subject: CN=e4b53e87-855e-4ea7-8ecd-a0115c8c26e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:e0:42:9a:21:20:9e:42:a7:ea:98:93:d6: c8:d3:ff:cd:74:e0:96:64:49:1a:4c:4a:fe:0c:20: 64:23:e2:2f:68:1e:34:7a:e6:e2:fa:36:9a:e7:4f: 8b:3a:b9:5b:3a:61:dd:51:bc:f9:b7:83:9f:5a:58: 39:24:c4:6f:55:b0:75:25:74:0f:d3:7f:a0:df:db: 37:99:e8:49:5c:66:44:6b:c0:d2:e8:5f:4b:56:ed: 69:a1:35:2a:1e:b8:e5:7b:7c:be:57:7f:32:fc:f9: 05:d7:3f:bb:35:2c:69:22:84:84:5b:45:74:cd:42: a1:30:af:19:1d:c2:82:20:3d:54:51:d6:71:e6:2c: 56:d2:5c:d0:c3:0c:ef:0b:38:5a:c6:82:a0:24:8e: f5:76:ed:62:2a:f1:b6:b4:fa:fb:f9:29:cc:15:4f: c0:e3:60:8c:d7:fd:18:01:27:2e:32:de:42:ff:69: bd:cc:7c:b0:21:1f:20:2f:dd:a1:95:ec:60:61:7e: 40:7b:9d:be:1a:af:11:23:66:bd:b6:3d:db:0b:fb: ba:1d:33:7f:ac:9f:4c:1c:60:ed:02:ab:cb:49:f5: 5b:06:d0:d8:c1:01:84:c7:ef:65:d6:a8:10:38:2b: e6:08:14:76:45:af:b3:1f:43:70:db:09:4b:39:11: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:34:D0:A8:12:EA:0F:9B:65:EA:A6:A1:EB:41:95:3C:A2:31:4D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/e9cea2cb-187f-3518-a90c-81c1199f87b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:99:6f:a7:a0:ba:e4:2c:b0:0d:5d:8b:28:21:37:bb:9a:50: 12:d2:8e:b3:cf:09:92:bd:fd:b3:a6:a7:2f:8a:fc:2f:48:cf: 29:1c:00:a0:f4:7c:41:ce:5e:41:2b:d8:6f:c6:96:6f:82:2b: 28:a4:dc:b3:c5:25:bf:de:6b:43:16:18:80:9b:85:f7:0b:01: 8c:db:93:d6:e0:38:68:94:56:8c:65:76:4a:6d:22:2d:47:86: 0f:e3:93:6f:99:a9:b4:26:f8:98:8c:76:ec:8f:6d:3a:fc:af: 92:53:3d:00:11:86:b3:79:66:9e:bf:f1:73:a5:c5:36:1e:a5: b0:b5:36:16:00:5b:d9:03:cb:03:bf:80:a4:2d:90:08:2f:d9: 99:1f:ca:28:4e:7b:7a:e6:aa:1a:17:41:d4:94:a7:c2:00:b4: b1:d2:64:37:37:3f:8b:89:55:11:bf:4d:7b:54:60:9b:57:d1: ea:ae:0c:e8:23:23:df:af:df:ed:fb:f5:11:83:88:82:f9:23: a9:61:de:91:6d:08:54:b8:6b:88:4b:29:e8:ed:91:4b:56:97: 30:15:f9:f0:fb:89:f1:b9:9a:d6:ff:cb:7f:5e:bb:df:af:55: b8:81:23:a9:98:4b:7e:7d:3b:85:d2:d3:98:13:74:ce:db:59: b0:e3:04:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuycrpYjRqqg7FD0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAzMDIwMzI0NVoXDTI2MDEyODIxMzI0NVowLzEtMCsGA1UEAxMk ZTRiNTNlODctODU1ZS00ZWE3LThlY2QtYTAxMTVjOGMyNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XgQpohIJ5Cp+qYk9bI0//NdOCWZEkaTEr+ DCBkI+IvaB40eubi+jaa50+LOrlbOmHdUbz5t4OfWlg5JMRvVbB1JXQP03+g39s3 mehJXGZEa8DS6F9LVu1poTUqHrjle3y+V38y/PkF1z+7NSxpIoSEW0V0zUKhMK8Z HcKCID1UUdZx5ixW0lzQwwzvCzhaxoKgJI71du1iKvG2tPr7+SnMFU/A42CM1/0Y AScuMt5C/2m9zHywIR8gL92hlexgYX5Ae52+Gq8RI2a9tj3bC/u6HTN/rJ9MHGDt AqvLSfVbBtDYwQGEx+9l1qgQOCvmCBR2Ra+zH0Nw2wlLORFLMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk00KgS6g+bZeqmoetBlTyiMU0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZTljZWEyY2ItMTg3Zi0z NTE4LWE5MGMtODFjMTE5OWY4N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Zb6eguuQssA1diyghN7uaUBLSjrPPCZK9/bOmpy+K/C9IzykcAKD0 fEHOXkEr2G/Glm+CKyik3LPFJb/ea0MWGICbhfcLAYzbk9bgOGiUVoxldkptIi1H hg/jk2+ZqbQm+JiMduyPbTr8r5JTPQARhrN5Zp6/8XOlxTYepbC1NhYAW9kDywO/ gKQtkAgv2ZkfyihOe3rmqhoXQdSUp8IAtLHSZDc3P4uJVRG/TXtUYJtX0equDOgj I9+v3+379RGDiIL5I6lh3pFtCFS4a4hLKejtkUtWlzAV+fD7ifG5mtb/y39eu9+v VbiBI6mYS359O4XS05gTdM7bWbDjBJQ= -----END CERTIFICATE-----Generated at Sat Nov 1 08:27:33 2025 by rpki-client