$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa File: 0867b451-b315-3f3b-bed4-0121ba565f01.roa (raw, json) Hash identifier: QzYDxfE3FspVf6XIxCehy1gm960VctYDSIY780dV8oY= Subject key identifier: CC:A9:B0:61:1A:41:91:A6:46:3A:77:71:1C:9C:01:F4:BA:05:08:87 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B398705E1619133FB8D383230 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 216.246.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:05:e1:61:91:33:fb:8d:38:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=3093340b-1381-4aa9-931a-92dc42d915bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:8b:3f:27:79:d5:43:5c:b6:95:a7:0a:2a: 34:af:e9:4e:17:87:2d:2d:e3:fc:67:6c:8a:b4:80: f5:0e:2d:c4:95:fa:ac:28:69:6c:e4:33:ef:52:20: 37:35:55:e7:db:01:0e:98:84:c4:ce:2a:6e:ca:f7: b3:d5:04:3a:d4:27:36:de:b5:be:dc:81:2c:5e:80: 64:20:b3:cd:7a:bb:c1:08:64:09:46:73:6d:12:f4: 33:51:4e:75:00:70:af:c9:43:fa:95:d1:b8:6b:bb: 5e:86:19:b4:27:df:77:48:e0:df:ec:6b:e5:02:e4: 6c:68:2a:0a:89:ab:62:c5:69:3f:01:2b:18:ec:27: 8b:47:3f:87:bb:73:72:71:bf:fa:ff:a8:c1:1e:5d: 7f:9e:af:59:18:c9:13:d3:a0:aa:e0:65:bf:f2:ef: 3b:ce:72:bd:74:16:f0:82:d7:bc:a1:8b:75:78:0f: 0b:67:2f:29:fa:3e:ea:cd:3a:ee:e2:d8:82:d9:9e: 23:5e:48:41:93:82:39:4c:a8:0e:d7:ef:1b:33:0f: ba:06:e8:ee:75:04:b3:fd:5e:8e:04:16:19:27:19: af:df:0e:56:fa:32:dc:3d:3f:f1:71:9a:c5:e5:57: b5:cf:2e:43:70:41:1e:11:2c:80:4a:88:50:2a:97: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:B0:61:1A:41:91:A6:46:3A:77:71:1C:9C:01:F4:BA:05:08:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/0867b451-b315-3f3b-bed4-0121ba565f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:35:5b:ea:23:cd:5f:50:83:a9:48:ff:ca:36:63:b6:04:6b: ff:3e:e5:cf:b5:4e:ea:27:37:cc:f2:36:6f:d2:5a:44:a3:72: a8:84:04:11:f5:78:de:ec:6c:3c:dc:a9:42:a0:aa:cc:ee:d4: f4:29:e4:b1:6c:c9:0e:b2:51:78:f8:ee:92:c2:b8:6b:84:76: 7a:58:97:e8:23:80:1b:0a:e7:bc:ca:cf:bd:f1:e1:9e:70:b0: 18:41:6f:92:87:a2:56:42:75:85:d6:c1:ab:75:40:eb:02:0d: bd:ad:21:a6:35:20:66:dc:ac:4d:23:bc:f5:ca:61:27:79:b9: 9a:0c:48:f9:b5:c5:9f:42:4e:d6:22:22:f9:01:4e:6d:32:67: e0:bc:5c:14:e5:e9:7e:00:22:5a:97:92:08:3f:43:04:65:49: cf:64:57:5f:d7:ab:43:79:b8:cb:7b:eb:9c:41:d6:f0:8b:88: 96:86:9f:8f:41:2c:68:76:72:cf:31:d8:2a:b6:59:4c:fb:ca: c9:fb:24:ea:bc:a7:1b:10:3d:b8:e5:e2:8c:c7:d1:3e:f5:e2: 92:7b:7b:e1:dc:c4:e4:5c:b4:0f:06:e2:37:4b:8e:17:aa:15: 0c:88:6a:d5:31:b0:6a:d4:50:44:57:a8:88:25:80:ac:d3:b3: bb:4a:9b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwXhYZEz+404MjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MzA5MzM0MGItMTM4MS00YWE5LTkzMWEtOTJkYzQyZDkxNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQSLPyd51UNctpWnCio0r+lOF4ctLeP8Z2yK tID1Di3ElfqsKGls5DPvUiA3NVXn2wEOmITEzipuyvez1QQ61Cc23rW+3IEsXoBk ILPNervBCGQJRnNtEvQzUU51AHCvyUP6ldG4a7tehhm0J993SODf7GvlAuRsaCoK iatixWk/ASsY7CeLRz+Hu3Nycb/6/6jBHl1/nq9ZGMkT06Cq4GW/8u87znK9dBbw gte8oYt1eA8LZy8p+j7qzTru4tiC2Z4jXkhBk4I5TKgO1+8bMw+6BujudQSz/V6O BBYZJxmv3w5W+jLcPT/xcZrF5Ve1zy5DcEEeESyASohQKpclhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMypsGEaQZGmRjp3cRycAfS6BQiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMDg2N2I0NTEtYjMxNS0z ZjNiLWJlZDQtMDEyMWJhNTY1ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA1W+ojzV9Qg6lI/8o2Y7YEa/8+5c+1TuonN8zyNm/SWkSjcqiEBBH1 eN7sbDzcqUKgqszu1PQp5LFsyQ6yUXj47pLCuGuEdnpYl+gjgBsK57zKz73x4Z5w sBhBb5KHolZCdYXWwat1QOsCDb2tIaY1IGbcrE0jvPXKYSd5uZoMSPm1xZ9CTtYi IvkBTm0yZ+C8XBTl6X4AIlqXkgg/QwRlSc9kV1/Xq0N5uMt765xB1vCLiJaGn49B LGh2cs8x2Cq2WUz7ysn7JOq8pxsQPbjl4ozH0T714pJ7e+HcxORctA8G4jdLjheq FQyIatUxsGrUUERXqIglgKzTs7tKm8g= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:36 2025 by rpki-client