$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa File: 129451a5-5452-32f8-83ec-09ca3ad44df2.roa (raw, json) Hash identifier: fRp2fyeJpMap80Bsc48NXNh8YfSXPkomSkslITwFhKk= Subject key identifier: 5D:BC:4F:8D:E8:58:53:E1:59:5A:2A:50:85:A3:74:2E:7A:E8:30:1A Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B79B75315F740451E37912A00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa Signing time: Fri 10 Oct 2025 12:49:53 +0000 ROA not before: Fri 10 Oct 2025 12:49:53 +0000 ROA not after: Thu 08 Jan 2026 13:49:53 +0000 asID: 397630 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:b7:53:15:f7:40:45:1e:37:91:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 10 12:49:53 2025 GMT Not After : Jan 8 13:49:53 2026 GMT Subject: CN=5f4ec957-c19e-4e31-bbc9-52ab2b02f368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:33:12:47:ab:56:91:70:66:d4:35:44:92:b8: c4:e0:fe:05:90:66:74:4d:8d:cc:fa:53:60:2c:88: 33:91:e3:87:72:9e:f0:5a:ef:20:6e:c7:c0:ab:d8: a0:a9:2d:4d:65:5d:51:38:ed:8f:5a:8f:f3:3c:3d: 9c:aa:00:9b:9d:2c:15:bf:ac:b6:15:1d:8c:91:c3: 02:d7:76:44:67:9d:61:93:6a:8e:93:8d:cb:e8:da: 47:4b:e4:ed:17:32:04:76:74:22:67:da:d5:71:cd: 3c:9c:5b:76:ba:b2:8d:b9:7b:ed:cb:91:89:f1:cf: d3:4d:1a:d4:c0:94:f6:28:42:9d:38:7c:68:a4:ee: e4:1b:82:6b:01:7a:58:d1:1c:e1:bc:22:cd:a6:63: 3a:bd:49:34:ba:b2:d9:e3:24:cd:a8:a8:5a:1f:66: c1:2b:01:f5:f9:f1:0f:4a:9e:b5:fc:9a:6e:8b:a6: 3c:a9:5f:b9:b2:09:25:6c:62:df:ff:2b:33:2d:d3: 9c:95:b5:7f:2a:7a:67:08:db:6a:25:6b:72:56:10: d4:0b:2a:b6:1d:b0:00:54:e2:19:34:80:e7:e2:2f: db:bc:79:4f:f6:2c:b5:22:d3:70:43:54:fd:43:7e: 4e:81:14:76:a1:6f:06:ca:b1:a1:80:32:1c:64:37: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:4F:8D:E8:58:53:E1:59:5A:2A:50:85:A3:74:2E:7A:E8:30:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/129451a5-5452-32f8-83ec-09ca3ad44df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cb:02:01:af:a2:83:77:27:d7:e2:c8:50:bf:6f:d7:09:59: a3:42:f4:22:f6:33:80:24:fb:e9:97:0d:d8:e2:f4:59:01:72: 53:50:c8:cc:4b:97:94:98:a7:7f:b4:42:b2:4e:5b:d8:78:ef: d9:d9:49:c2:82:6a:2d:d7:2a:78:46:c8:77:7f:a0:a2:d8:09: 90:75:09:5c:ff:12:d4:6f:d2:9f:05:87:95:5b:df:46:e5:80: 91:7e:80:71:0e:a5:e0:6d:fd:ed:55:77:ef:4d:3c:4e:eb:4f: 83:ee:58:43:50:66:6e:7a:d8:14:3e:d2:a1:d2:64:06:86:fe: 13:ec:f4:5c:e7:12:47:af:65:9c:dd:46:0f:73:d3:ac:80:95: 46:fb:cc:d7:76:06:66:d3:86:91:a6:46:d5:12:84:51:15:26: 56:7d:6f:59:0a:ee:7f:00:28:b1:2e:ee:d3:f1:6f:6a:e6:44: 80:f5:7a:01:15:ce:48:24:43:a2:09:e0:1a:2b:c4:eb:d7:3b: c1:52:94:10:57:a8:7b:5d:95:ec:31:a1:4d:62:29:10:87:2a: 7e:b6:da:8c:2f:41:12:ce:5e:1e:46:f3:55:24:ca:89:51:3b: 24:24:8f:0c:c3:9a:5a:93:ac:1d:05:25:d5:b8:6a:c3:30:9c: 8f:5b:87:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5t1MV90BFHjeRKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxMDEyNDk1M1oXDTI2MDEwODEzNDk1M1owLzEtMCsGA1UEAxMk NWY0ZWM5NTctYzE5ZS00ZTMxLWJiYzktNTJhYjJiMDJmMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TMSR6tWkXBm1DVEkrjE4P4FkGZ0TY3M+lNg LIgzkeOHcp7wWu8gbsfAq9igqS1NZV1ROO2PWo/zPD2cqgCbnSwVv6y2FR2MkcMC 13ZEZ51hk2qOk43L6NpHS+TtFzIEdnQiZ9rVcc08nFt2urKNuXvty5GJ8c/TTRrU wJT2KEKdOHxopO7kG4JrAXpY0RzhvCLNpmM6vUk0urLZ4yTNqKhaH2bBKwH1+fEP Sp61/Jpui6Y8qV+5sgklbGLf/yszLdOclbV/KnpnCNtqJWtyVhDUCyq2HbAAVOIZ NIDn4i/bvHlP9iy1ItNwQ1T9Q35OgRR2oW8GyrGhgDIcZDcJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF28T43oWFPhWVoqUIWjdC566DAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMTI5NDUxYTUtNTQ1Mi0z MmY4LTgzZWMtMDljYTNhZDQ0ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvLAgGvooN3J9fiyFC/b9cJWaNC9CL2M4Ak++mXDdji9FkBclNQyMxL l5SYp3+0QrJOW9h479nZScKCai3XKnhGyHd/oKLYCZB1CVz/EtRv0p8Fh5Vb30bl gJF+gHEOpeBt/e1Vd+9NPE7rT4PuWENQZm562BQ+0qHSZAaG/hPs9FznEkevZZzd Rg9z06yAlUb7zNd2BmbThpGmRtUShFEVJlZ9b1kK7n8AKLEu7tPxb2rmRID1egEV zkgkQ6IJ4BorxOvXO8FSlBBXqHtdlewxoU1iKRCHKn622owvQRLOXh5G81UkyolR OyQkjwzDmlqTrB0FJdW4asMwnI9bhx8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:49 2025 by rpki-client