$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa File: fc936a75-72c0-395c-a61c-d20afdd52258.roa (raw, json) Hash identifier: ugHBLa1swmnF4WethMNdF1FtoCYlBOwqrWp5eV+rgIo= Subject key identifier: 19:A8:3C:32:7B:1B:01:E5:31:D5:39:59:7A:6F:92:18:49:2F:F7:71 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4975BCC9FBE2456356365000 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 216.246.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:bc:c9:fb:e2:45:63:56:36:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d54f48f6-d160-4427-90ab-a543bfacfa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:dc:0d:05:15:37:bf:a6:42:42:33:8f:96: 06:23:2e:e1:c1:9f:61:d0:50:0a:e6:f1:cd:9f:74: fb:6e:58:dd:57:6b:07:8f:f1:b4:f0:dd:24:c0:3a: 77:fc:83:2e:b7:b1:60:d2:09:11:67:0c:a8:04:2b: ae:ae:63:67:7e:fc:37:e8:7b:d3:b8:0b:6f:40:d1: 6b:69:70:39:8c:cb:3c:12:52:49:f7:29:ef:e1:41: 04:77:5e:07:1d:91:77:ac:6b:02:81:31:77:b9:4f: 99:af:37:6f:9d:aa:ae:31:63:2c:80:ad:be:ca:26: 00:b3:98:fe:b5:c2:ea:ee:ef:22:e4:a6:19:54:0f: f1:aa:30:72:69:f9:45:7d:03:5f:08:db:79:d5:5d: 21:76:7f:93:a2:18:55:11:5c:f9:d8:4b:e5:f7:81: f3:24:1e:45:d8:47:0a:61:d6:e2:cf:ec:04:cc:2a: af:49:02:b2:03:c1:5a:a7:92:0a:40:75:2e:c1:8d: b0:36:07:2b:db:35:fe:f8:53:49:4a:18:dd:07:f3: 5d:c0:99:fe:8c:85:7a:36:db:63:f9:71:e6:db:f2: 64:ca:a6:6e:28:97:23:76:50:7c:b9:e1:4f:a0:83: af:9d:5c:72:fe:ab:eb:b6:c0:cd:7e:43:d8:7e:77: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:3C:32:7B:1B:01:E5:31:D5:39:59:7A:6F:92:18:49:2F:F7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3b:a0:6a:10:03:45:5e:c0:4b:69:af:ea:81:53:e7:00:0e: ac:93:87:bc:84:b9:08:07:66:1d:f2:db:bd:58:ad:cf:34:9f: 7a:45:14:1c:cb:69:ce:26:f2:1a:a8:62:a0:43:40:20:2e:0d: 17:26:83:53:8a:02:bf:d4:e0:2f:84:e0:a1:90:8f:e5:22:a6: 1c:9f:68:b9:9d:da:fa:bb:cc:bb:48:ea:a5:83:41:6a:15:a1: b9:74:9d:3a:94:70:09:34:cd:09:df:b7:d6:e3:9e:25:9a:13: e3:ef:c1:d1:f2:c3:8d:df:86:b8:25:b4:ce:56:92:7e:9d:3f: 2a:f9:a6:01:47:a0:b9:b1:ec:38:80:3a:bb:dc:f5:07:56:1a: 28:f4:e1:58:61:53:3c:be:1a:7f:2c:3a:ea:1c:b8:72:a7:e4: e5:7b:44:32:f1:0e:95:70:07:25:30:c1:ae:68:55:5c:dd:a9: cd:c0:af:e4:2f:f1:bb:0b:f3:07:37:74:47:56:a0:d0:a3:d6: dc:9b:d6:7e:12:24:61:65:cc:59:e9:87:e2:ce:92:05:71:7c: 29:b0:7f:f6:40:52:1b:5c:d9:7b:98:8e:25:29:8e:4c:bc:a5: 06:2f:3c:d8:3b:48:2e:9a:26:8d:87:a9:ed:75:32:6b:d7:a5: e7:df:0f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdbzJ++JFY1Y2UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU0ZjQ4ZjYtZDE2MC00NDI3LTkwYWItYTU0M2JmYWNmYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFrcDQUVN7+mQkIzj5YGIy7hwZ9h0FAK5vHN n3T7bljdV2sHj/G08N0kwDp3/IMut7Fg0gkRZwyoBCuurmNnfvw36HvTuAtvQNFr aXA5jMs8ElJJ9ynv4UEEd14HHZF3rGsCgTF3uU+ZrzdvnaquMWMsgK2+yiYAs5j+ tcLq7u8i5KYZVA/xqjByaflFfQNfCNt51V0hdn+TohhVEVz52Evl94HzJB5F2EcK Ydbiz+wEzCqvSQKyA8Fap5IKQHUuwY2wNgcr2zX++FNJShjdB/NdwJn+jIV6Nttj +XHm2/JkyqZuKJcjdlB8ueFPoIOvnVxy/qvrtsDNfkPYfncVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmoPDJ7GwHlMdU5WXpvkhhJL/dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZmM5MzZhNzUtNzJjMC0z OTVjLWE2MWMtZDIwYWZkZDUyMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw7oGoQA0VewEtpr+qBU+cADqyTh7yEuQgHZh3y271Yrc80n3pFFBzL ac4m8hqoYqBDQCAuDRcmg1OKAr/U4C+E4KGQj+UiphyfaLmd2vq7zLtI6qWDQWoV obl0nTqUcAk0zQnft9bjniWaE+PvwdHyw43fhrgltM5Wkn6dPyr5pgFHoLmx7DiA Orvc9QdWGij04VhhUzy+Gn8sOuocuHKn5OV7RDLxDpVwByUwwa5oVVzdqc3Ar+Qv 8bsL8wc3dEdWoNCj1tyb1n4SJGFlzFnph+LOkgVxfCmwf/ZAUhtc2XuYjiUpjky8 pQYvPNg7SC6aJo2Hqe11MmvXpeffD+A= -----END CERTIFICATE-----Generated at Sat Oct 3 11:41:31 2026 by rpki-client