$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa File: 129451a5-5452-32f8-83ec-09ca3ad44df2.roa (raw, json) Hash identifier: GlQ0w24Ba5oV3/zJvNQOQdGYjxG+ohlv1p9Fa6aoc94= Subject key identifier: 3E:80:9A:54:77:19:E3:BF:59:16:7E:09:BE:34:BE:01:E2:81:68:D3 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D386A57DAAC0A39DECD3FDDC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 397630 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:57:da:ac:0a:39:de:cd:3f:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=fcea2296-9289-457c-8e87-f230ec454a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:1d:e7:47:7d:02:6e:65:ba:f6:f8:cb:5d: 23:46:bd:32:f8:a6:9b:42:53:5f:ce:fc:ff:c6:ac: 9e:00:fd:32:f9:84:5a:e3:96:18:b5:62:e0:28:3e: 41:2b:62:e4:1a:a9:37:da:fe:2a:ef:95:1d:27:b3: 3a:8a:49:70:6f:37:f9:6c:03:a6:23:fe:c6:97:bf: de:c1:0b:03:1f:d4:64:18:4e:a6:c8:2c:9c:f8:7e: de:34:f5:e4:03:1e:65:bd:e1:30:c8:9b:36:8e:fe: 3e:b4:f8:7c:92:0d:d4:c2:77:7d:4b:e4:88:d3:b2: 4d:61:c3:34:7f:a5:eb:5a:ad:dc:43:97:61:f9:e0: 49:48:a6:8e:56:cb:f6:5b:bd:02:4a:62:dc:a0:f9: 2b:4d:5b:a3:ca:7d:aa:6f:35:b6:0c:33:64:b0:b2: 39:ac:95:c6:3f:d9:9e:3c:eb:f7:37:d9:12:45:61: f9:9f:c0:5d:18:81:2f:98:c1:98:28:ff:e5:b6:3a: 66:f8:a3:ae:04:2e:d0:12:88:0a:00:88:19:cc:eb: 5d:f6:a4:f7:93:f8:f6:a7:64:80:0a:bb:42:2f:9e: d1:94:cc:b5:a7:c0:f8:07:63:15:4b:67:e2:c9:e6: c8:76:8b:86:45:ee:80:ea:f8:66:17:80:b2:a1:fa: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:9A:54:77:19:E3:BF:59:16:7E:09:BE:34:BE:01:E2:81:68:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:80:db:df:26:86:eb:df:88:8a:79:3a:81:fe:b9:a0:ad:85: d2:7d:9b:fa:8d:bc:dd:55:22:47:a4:67:8e:1d:16:74:49:88: cc:62:a4:7a:1a:4b:b7:0b:e9:04:78:51:f9:e5:ff:69:72:ff: ef:6a:84:7c:1b:a4:48:9d:f8:87:6b:fd:54:e6:b1:a5:3c:90: f5:29:78:00:6f:b5:b9:bf:96:9b:25:b6:28:86:de:3d:f1:06: e4:4f:29:88:aa:a7:bf:36:1b:18:3a:0a:6e:55:31:f6:a9:5f: ff:50:08:79:80:d9:ad:c4:ee:a9:f4:e8:ee:5c:af:a1:d3:61: 48:a3:ed:61:3d:86:28:58:c3:3c:86:f5:3c:b9:a3:d7:47:c9: e8:67:31:82:00:5f:08:6c:9c:d2:1d:4f:6c:1f:77:42:88:05: 4a:77:56:f1:2e:c9:41:44:a3:a5:bc:6a:7a:23:85:f0:32:3d: d8:20:a6:b2:b7:5c:56:3d:49:af:96:fd:26:e6:80:27:46:80: f1:b3:1c:ca:77:ae:71:0e:46:6a:5f:a1:23:08:16:bf:90:23: f0:27:b9:d9:ae:43:cc:a3:f3:95:e3:d8:2a:d0:ad:00:ec:7e: c2:4a:da:75:3b:ed:a3:ec:20:99:b4:a4:f9:e0:88:35:dc:f4: 31:87:5a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alfarAo53s0/3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZmNlYTIyOTYtOTI4OS00NTdjLThlODctZjIzMGVjNDU0YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIMd50d9Am5luvb4y10jRr0y+KabQlNfzvz/ xqyeAP0y+YRa45YYtWLgKD5BK2LkGqk32v4q75UdJ7M6iklwbzf5bAOmI/7Gl7/e wQsDH9RkGE6myCyc+H7eNPXkAx5lveEwyJs2jv4+tPh8kg3Uwnd9S+SI07JNYcM0 f6XrWq3cQ5dh+eBJSKaOVsv2W70CSmLcoPkrTVujyn2qbzW2DDNksLI5rJXGP9me POv3N9kSRWH5n8BdGIEvmMGYKP/ltjpm+KOuBC7QEogKAIgZzOtd9qT3k/j2p2SA CrtCL57RlMy1p8D4B2MVS2fiyebIdouGRe6A6vhmF4CyofqDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6AmlR3GeO/WRZ+Cb40vgHigWjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTI5NDUxYTUtNTQ1Mi0z MmY4LTgzZWMtMDljYTNhZDQ0ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuA298mhuvfiIp5OoH+uaCthdJ9m/qNvN1VIkekZ44dFnRJiMxipHoa S7cL6QR4Ufnl/2ly/+9qhHwbpEid+Idr/VTmsaU8kPUpeABvtbm/lpsltiiG3j3x BuRPKYiqp782Gxg6Cm5VMfapX/9QCHmA2a3E7qn06O5cr6HTYUij7WE9hihYwzyG 9Ty5o9dHyehnMYIAXwhsnNIdT2wfd0KIBUp3VvEuyUFEo6W8anojhfAyPdggprK3 XFY9Sa+W/SbmgCdGgPGzHMp3rnEORmpfoSMIFr+QI/AnudmuQ8yj85Xj2CrQrQDs fsJK2nU77aPsIJm0pPngiDXc9DGHWrc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:42:31 2026 by rpki-client