$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa File: 023c0147-31da-314e-b950-3ddf9ade51ea.roa (raw, json) Hash identifier: DLtMLIiiMOMQ34aPCKzgGl8KjkwrNH2exWpafFkGD6Y= Subject key identifier: 5C:97:DC:F4:17:E5:4B:EB:01:12:29:5C:A1:7B:13:F4:09:8B:6E:F8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B8A7CD5A597DB31A2AEB3D800 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 398493 IP address blocks: 69.176.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d5:a5:97:db:31:a2:ae:b3:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=2a27d2ed-be1c-4736-ab91-285128b77dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:5a:d3:5d:7d:86:56:1b:ed:d2:47:d1:9e: 09:9d:d5:a7:01:85:a3:9f:ed:8d:ba:65:de:50:6e: 66:5e:22:b0:78:43:51:7d:a5:c8:2e:5c:0d:29:ce: df:9c:1f:d8:42:23:14:b9:85:0e:c6:56:7d:c7:06: f8:14:21:b3:ee:29:2f:83:09:4a:85:2d:1d:6a:ae: 56:f9:ce:f1:2a:ab:c0:af:96:67:03:16:94:cb:7f: ff:07:79:7e:f8:27:08:93:83:4a:25:05:6e:77:e8: 14:2f:a7:3c:c2:92:c5:98:76:78:d6:1b:93:10:cc: e1:44:49:cf:60:46:43:56:2c:e7:80:09:4c:f2:cf: c6:6b:fe:cc:dc:a0:47:0d:26:3b:99:5c:86:50:9f: bc:bd:52:a4:de:46:5c:a1:3f:68:bc:4e:40:2e:71: 01:92:8c:ba:43:52:bf:a3:d9:d5:27:3c:07:b0:af: 12:f7:d2:3a:63:e7:6a:d6:b8:53:4c:ef:21:68:cd: 6a:3b:9d:11:fe:5d:69:e3:62:9d:30:67:e2:ff:e6: 8b:28:ce:57:39:25:00:e8:9c:76:0e:48:00:c1:fe: 87:c0:90:c2:7f:3b:85:c6:6c:51:cd:6c:6d:e1:9e: 96:60:f2:ea:66:d4:63:75:d3:ec:51:54:de:68:23: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:DC:F4:17:E5:4B:EB:01:12:29:5C:A1:7B:13:F4:09:8B:6E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 69.176.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9b:7f:92:c1:d7:77:f4:60:e2:bf:32:f4:eb:cb:3b:c4:cf: 91:80:4a:8a:41:a9:18:8b:9a:b0:2d:f6:e7:8c:bd:35:df:3b: e9:06:18:30:96:6a:3f:32:e1:9b:f7:d2:3e:6f:44:dc:62:ce: 39:91:dc:71:d9:b8:7d:f8:ac:f1:e0:51:e3:25:6b:37:91:b7: a6:20:de:1b:73:da:93:ab:d7:d9:23:04:dc:6c:0a:f3:a8:0d: 92:cf:31:d7:10:44:18:f4:2d:02:53:ac:a2:26:b4:79:c3:62: e9:77:21:37:21:26:5d:2b:e7:ba:20:ed:5d:ad:79:af:08:f6: a7:5b:36:8e:97:78:11:fe:e7:15:16:5f:5f:02:4d:e8:c3:14: 4b:ad:50:b8:8b:2c:78:e5:ff:1e:08:22:94:07:1b:68:c3:52: 15:75:cd:31:1a:56:ff:5e:f9:93:11:81:cf:e8:4b:ac:8c:8d: 67:f1:1f:66:75:ce:c5:e4:a8:9c:92:ba:b3:6e:33:86:0f:af: b1:c8:77:80:e9:4e:25:53:ca:48:ff:f3:6f:14:c1:0c:72:21: 91:56:0b:49:5a:41:3f:9a:5f:eb:19:29:23:b9:7d:d4:4a:e0: b2:83:b0:87:6f:58:ae:b8:90:d6:03:2b:3b:35:89:71:5f:fd: 55:aa:8b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfNWll9sxoq6z2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk MmEyN2QyZWQtYmUxYy00NzM2LWFiOTEtMjg1MTI4Yjc3ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruBa0119hlYb7dJH0Z4JndWnAYWjn+2NumXe UG5mXiKweENRfaXILlwNKc7fnB/YQiMUuYUOxlZ9xwb4FCGz7ikvgwlKhS0daq5W +c7xKqvAr5ZnAxaUy3//B3l++CcIk4NKJQVud+gUL6c8wpLFmHZ41huTEMzhREnP YEZDVizngAlM8s/Ga/7M3KBHDSY7mVyGUJ+8vVKk3kZcoT9ovE5ALnEBkoy6Q1K/ o9nVJzwHsK8S99I6Y+dq1rhTTO8haM1qO50R/l1p42KdMGfi/+aLKM5XOSUA6Jx2 DkgAwf6HwJDCfzuFxmxRzWxt4Z6WYPLqZtRjddPsUVTeaCNFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyX3PQX5UvrARIpXKF7E/QJi274MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMDIzYzAxNDctMzFkYS0z MTRlLWI5NTAtM2RkZjlhZGU1MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEubf5LB13f0YOK/MvTryzvEz5GASopBqRiLmrAt9ueMvTXfO+kGGDCW aj8y4Zv30j5vRNxizjmR3HHZuH34rPHgUeMlazeRt6Yg3htz2pOr19kjBNxsCvOo DZLPMdcQRBj0LQJTrKImtHnDYul3ITchJl0r57og7V2tea8I9qdbNo6XeBH+5xUW X18CTejDFEutULiLLHjl/x4IIpQHG2jDUhV1zTEaVv9e+ZMRgc/oS6yMjWfxH2Z1 zsXkqJySurNuM4YPr7HId4DpTiVTykj/828UwQxyIZFWC0laQT+aX+sZKSO5fdRK 4LKDsIdvWK64kNYDKzs1iXFf/VWqi38= -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:50 2025 by rpki-client