$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa File: 3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa (raw, json) Hash identifier: +OMAz023Ze2G9AI/gBCdThdmtYyO01mSB6kyDWQsrmI= Subject key identifier: 72:55:27:18:B9:42:64:21:8A:0B:8D:C9:CF:D2:D5:F1:41:C1:64:1A Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F49893361BE32C0EF86BC5BC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54004 IP address blocks: 216.83.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:33:61:be:32:c0:ef:86:bc:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a5a9f55-66f5-4195-b3c7-7bd5edc31553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:7e:4c:4e:ae:1d:23:e8:ba:2d:b3:d4:3f: 12:8d:2f:46:fc:8b:9d:0b:be:47:46:13:f8:d6:f1: 93:25:8d:8a:99:68:ba:7c:7c:7c:56:e8:06:d9:a5: 8d:f6:c3:63:4c:d5:76:ab:12:1a:4f:5d:1a:eb:2c: 79:76:13:c7:4b:ea:35:55:6d:6d:c9:f3:e0:a8:5a: 68:68:92:d8:c4:59:05:10:1b:1a:0f:18:b4:d8:ad: c3:c3:d5:37:22:b7:c9:e9:de:8a:ef:e2:c6:ab:88: d2:c0:7d:65:76:e9:6b:90:48:06:c4:e7:e1:77:aa: 3f:56:89:4f:ca:cd:c5:9a:37:dd:28:e9:fd:55:e6: 96:02:ab:65:de:06:6c:c5:09:62:33:4e:a0:13:14: aa:ab:06:93:b8:47:70:70:ca:17:7e:bb:37:8e:6c: 06:43:f1:bd:03:36:ba:eb:64:b6:6a:f4:71:a5:3c: 68:c3:fc:17:dd:56:91:28:a3:06:43:b3:34:13:4a: 10:c4:0e:bb:ed:0a:a1:bd:dd:04:30:0a:c4:9c:a8: 29:2e:63:bc:a0:4f:4a:08:d1:7d:66:bf:b4:a6:3e: ad:43:d4:fb:81:d3:15:b4:91:50:a8:e7:a0:ea:cc: d0:f3:59:3c:a7:d5:17:ca:b8:82:2e:d1:f7:60:73: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:27:18:B9:42:64:21:8A:0B:8D:C9:CF:D2:D5:F1:41:C1:64:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cb:2c:bf:4c:88:bd:75:35:51:4d:b3:94:fc:80:6e:b0:b7: 08:10:16:25:e8:59:2d:b4:78:39:ec:28:09:e7:46:a8:61:2e: eb:8c:dd:39:4a:84:f9:93:27:ef:3d:57:6b:ac:85:f3:a9:6a: 2c:69:b8:5d:7d:35:92:05:d4:72:fc:fd:ec:31:aa:c1:34:37: 5f:a1:22:a7:69:9a:3c:3d:bc:c1:92:c0:51:48:9a:88:8d:48: ba:58:09:76:34:42:76:fa:1e:48:21:e0:8a:6f:9a:03:b3:3a: 6a:93:4c:37:79:46:87:99:c3:a8:e9:90:c5:21:7b:09:fb:41: 65:f5:64:a7:45:1a:8e:07:c1:61:91:62:f8:02:68:69:3e:15: 24:90:26:bb:70:b0:44:81:a3:d1:fe:b5:cf:bb:5c:d8:a6:9d: ce:f7:a1:48:b5:fa:38:f8:72:29:12:d1:95:7a:41:c8:7d:79: 1d:2f:6b:39:83:c5:b2:76:73:51:f8:97:89:1b:d7:dc:99:a5: 82:b1:2c:f6:ef:5a:44:a9:30:1b:40:5f:fb:cb:7e:dc:f0:e3: 33:50:4f:9f:ff:0e:ec:42:89:b3:70:cd:9c:b7:7d:31:38:89: f9:ee:c8:57:05:f5:40:0e:66:10:9f:88:69:2d:e4:a2:24:c1: e6:28:2f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiTNhvjLA74a8W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGE1YTlmNTUtNjZmNS00MTk1LWIzYzctN2JkNWVkYzMxNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/t+TE6uHSPoui2z1D8SjS9G/IudC75HRhP4 1vGTJY2KmWi6fHx8VugG2aWN9sNjTNV2qxIaT10a6yx5dhPHS+o1VW1tyfPgqFpo aJLYxFkFEBsaDxi02K3Dw9U3IrfJ6d6K7+LGq4jSwH1ldulrkEgGxOfhd6o/VolP ys3FmjfdKOn9VeaWAqtl3gZsxQliM06gExSqqwaTuEdwcMoXfrs3jmwGQ/G9Aza6 62S2avRxpTxow/wX3VaRKKMGQ7M0E0oQxA677Qqhvd0EMArEnKgpLmO8oE9KCNF9 Zr+0pj6tQ9T7gdMVtJFQqOeg6szQ81k8p9UXyriCLtH3YHPOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJVJxi5QmQhiguNyc/S1fFBwWQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzQwNWRlZmMtNmEwYy0z ZmJhLTlhMDItNzNjYmJlMGQxMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7LLL9MiL11NVFNs5T8gG6wtwgQFiXoWS20eDnsKAnnRqhhLuuM3TlK hPmTJ+89V2ushfOpaixpuF19NZIF1HL8/ewxqsE0N1+hIqdpmjw9vMGSwFFImoiN SLpYCXY0Qnb6Hkgh4IpvmgOzOmqTTDd5RoeZw6jpkMUhewn7QWX1ZKdFGo4HwWGR YvgCaGk+FSSQJrtwsESBo9H+tc+7XNimnc73oUi1+jj4cikS0ZV6Qch9eR0vazmD xbJ2c1H4l4kb19yZpYKxLPbvWkSpMBtAX/vLftzw4zNQT5//DuxCibNwzZy3fTE4 ifnuyFcF9UAOZhCfiGkt5KIkweYoL/k= -----END CERTIFICATE-----Generated at Fri Sep 25 22:22:05 2026 by rpki-client