$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa File: a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa (raw, json) Hash identifier: pNR7qcG6OXi24JqwM67isg/MFpTREqM151sLdqZWrBA= Subject key identifier: 48:8A:5B:F8:B6:47:0C:B0:EB:53:DF:B6:C6:F7:74:C4:86:85:F3:D1 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B398706063F8869527EC65580 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 216.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:06:06:3f:88:69:52:7e:c6:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=b1f390cc-05ca-4772-9004-ba068efd0cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:2b:ac:6f:f6:f9:b2:a9:e5:45:7a:b4:c2: 0e:bd:44:a7:c3:0d:d9:f9:d8:3a:15:d7:44:a9:99: 67:0c:8b:ee:7f:37:f3:38:e3:24:a7:a7:94:6f:9d: ba:c5:b8:80:45:06:fd:d5:9a:20:f9:d4:38:12:61: 5b:4b:b5:6f:65:6d:bf:02:78:48:5a:07:d1:90:e1: 01:47:52:3f:13:cd:6f:7b:cd:7b:8b:38:74:80:01: ac:ce:1f:cf:b0:a5:a3:f3:f3:71:29:e2:15:6a:96: b0:79:6b:cc:e0:3c:c0:97:58:1a:c3:83:52:77:59: 50:d6:98:4a:87:e2:00:f4:93:f2:e6:9c:17:f9:a5: e0:0a:ad:fe:8a:99:d9:82:c8:40:73:54:16:51:6a: e2:27:ca:98:10:0c:24:d4:6c:cb:fb:fb:85:54:2e: 03:d5:01:78:11:fd:9c:64:c2:89:5a:21:0a:f4:8d: 19:e2:0b:b7:af:df:55:da:41:c7:1c:57:24:08:ba: 0b:5d:cd:72:e3:6d:45:85:93:92:5c:b3:ca:21:4c: e6:70:9e:3d:7b:9a:88:b1:f9:1a:1e:95:34:87:99: ed:bc:d1:3e:a1:c2:d8:82:09:bc:dd:ae:d8:d7:47: 33:63:99:45:86:88:10:4f:e2:7f:d6:38:3f:1d:94: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8A:5B:F8:B6:47:0C:B0:EB:53:DF:B6:C6:F7:74:C4:86:85:F3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:55:98:ef:99:f1:ad:df:14:6c:a2:23:a9:22:74:fd:2b:7d: 93:8b:07:dc:dd:1b:68:42:4f:66:f8:7f:79:74:85:00:4a:0b: 9f:ad:0f:98:ae:31:e6:d2:83:50:a5:e6:9d:79:65:ce:3c:86: bb:b0:e7:77:87:c6:f2:74:91:05:aa:76:9f:b3:54:8e:a2:88: 61:14:df:06:62:cd:fd:2b:13:73:c5:5f:11:48:f5:75:2d:d8: 3d:84:ba:15:32:a1:7d:d4:78:0a:71:24:e9:9c:40:a5:fd:f4: a1:bd:30:43:65:fb:81:7f:05:97:df:ab:c6:42:ec:08:ce:4b: 01:69:85:3e:29:29:e8:7b:f0:fd:ea:7e:0f:4c:30:d5:9c:6e: 1e:b7:fe:ae:86:83:29:e5:91:3c:3a:8e:f5:a4:e1:29:e7:ba: 1e:0d:c8:d2:01:f6:bb:7e:5b:e8:a5:2b:e6:35:db:a3:30:03: 6e:19:df:31:2b:25:91:0f:94:07:ab:94:32:1c:1c:92:39:04: 35:d6:ca:1a:51:03:f7:20:dc:9a:98:c0:55:34:45:76:3a:f5: eb:0c:67:7a:25:87:e4:62:72:79:6b:fa:e6:a2:a1:f2:af:bc: fb:47:b0:78:fa:d8:6c:fa:cc:c7:b6:a9:5b:6e:09:b6:d6:dd: f8:3e:59:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwYGP4hpUn7GVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YjFmMzkwY2MtMDVjYS00NzcyLTkwMDQtYmEwNjhlZmQwY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldgrrG/2+bKp5UV6tMIOvUSnww3Z+dg6FddE qZlnDIvufzfzOOMkp6eUb526xbiARQb91Zog+dQ4EmFbS7VvZW2/AnhIWgfRkOEB R1I/E81ve817izh0gAGszh/PsKWj8/NxKeIVapaweWvM4DzAl1gaw4NSd1lQ1phK h+IA9JPy5pwX+aXgCq3+ipnZgshAc1QWUWriJ8qYEAwk1GzL+/uFVC4D1QF4Ef2c ZMKJWiEK9I0Z4gu3r99V2kHHHFckCLoLXc1y421FhZOSXLPKIUzmcJ49e5qIsfka HpU0h5ntvNE+ocLYggm83a7Y10czY5lFhogQT+J/1jg/HZT21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiKW/i2Rwyw61Pftsb3dMSGhfPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYTdhZWZkNGEtNDEyMC0z ZWFmLWJjNjgtYWEyYTBkYTY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRVmO+Z8a3fFGyiI6kidP0rfZOLB9zdG2hCT2b4f3l0hQBKC5+tD5iu MebSg1Cl5p15Zc48hruw53eHxvJ0kQWqdp+zVI6iiGEU3wZizf0rE3PFXxFI9XUt 2D2EuhUyoX3UeApxJOmcQKX99KG9MENl+4F/BZffq8ZC7AjOSwFphT4pKeh78P3q fg9MMNWcbh63/q6GgynlkTw6jvWk4Snnuh4NyNIB9rt+W+ilK+Y126MwA24Z3zEr JZEPlAerlDIcHJI5BDXWyhpRA/cg3JqYwFU0RXY69esMZ3olh+Ricnlr+uaiofKv vPtHsHj62Gz6zMe2qVtuCbbW3fg+Wd4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:38 2025 by rpki-client