$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json) Hash identifier: ZPnpuo3YNOSKXPNaT3JyBudmSCYltadB4PDfB2/Iq/0= Subject key identifier: E0:00:BB:5F:D5:33:47:11:D3:71:59:F7:54:02:58:77:92:FB:01:27 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F3E47EDC02B4A24F8ACA90530 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:c0:2b:4a:24:f8:ac:a9:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=999a392c-b104-4a88-abeb-ce8c8aa6ddbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:79:47:77:f2:5f:cb:8d:e2:4b:e1:05:35: 10:18:05:6c:73:8b:8c:90:f0:52:b0:0a:1d:02:16: ae:9e:3d:53:65:8f:55:c3:5d:0c:9c:1c:50:d2:ad: ef:92:b2:6d:42:3b:b6:9c:69:86:af:fa:a8:11:30: 4d:3f:60:92:bf:cb:80:6d:1e:d2:7b:a8:50:04:5b: 2f:2d:79:0e:39:41:7f:ed:44:d5:d1:99:09:04:b8: 28:53:db:a1:7c:e6:17:f6:4f:94:3f:42:ca:36:ec: 2c:df:37:07:c9:23:9e:0a:c2:6f:b7:f8:53:7e:54: f3:52:cc:09:45:9e:33:88:7b:01:79:8d:f1:85:dd: 51:ac:9e:0d:a0:70:42:3d:94:05:9c:18:f5:d7:23: 7f:0b:24:a6:16:de:de:b4:60:ab:61:e6:e2:1d:a9: cc:32:d6:4e:ab:aa:b2:e6:53:a4:a3:83:af:1c:40: 2a:98:22:3c:87:5c:57:b6:5d:73:8d:e1:2b:7b:c8: 79:ed:6a:28:56:c3:1c:ca:fa:68:ca:dc:95:7c:fc: d9:f1:a3:08:80:63:59:d4:aa:72:f1:3e:b9:d8:df: 31:1a:e7:14:f5:e5:e5:6a:2c:c4:1a:fd:44:8a:3b: 46:45:fa:9d:07:db:a5:4c:65:38:a7:bb:01:d7:7c: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:00:BB:5F:D5:33:47:11:D3:71:59:F7:54:02:58:77:92:FB:01:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8e:3c:bf:23:c1:d0:10:60:15:fb:4e:33:3e:d5:c6:d5:c0: fa:12:50:a5:df:f7:38:0a:f9:2c:9b:a6:82:60:a4:ae:6f:1a: aa:ff:5a:1c:05:e9:ce:36:1b:f4:89:09:29:3a:b0:c0:7e:e7: 65:94:4e:33:97:ef:50:31:e9:85:8a:d1:4b:a5:e0:80:92:21: c7:47:b8:dd:ee:c7:b4:e9:d1:d4:1b:04:c2:79:b8:3e:1e:3c: 9b:49:1c:12:eb:83:75:5f:a6:cd:fb:e7:85:20:a3:e1:35:78: 5a:26:2a:0d:2a:c3:e3:e4:07:98:73:3f:90:c3:35:44:37:39: 2b:e0:d3:8c:a2:40:5c:7b:1d:41:eb:88:47:24:57:05:b8:2b: 70:b4:7d:29:ca:54:be:b0:77:7e:38:98:32:72:74:a9:09:95: 02:e0:40:bf:ad:5f:9a:b5:7a:e4:79:78:f3:e0:a4:8e:6e:24: 9f:3c:7e:ad:28:16:ab:63:bf:93:19:01:57:ff:f3:49:21:ad: ee:c4:db:98:a2:10:47:99:82:e8:e3:89:d1:e1:23:cd:60:dd: 29:76:1e:8c:7f:1d:5e:f2:a2:c7:5e:96:58:c3:43:86:da:83: 4f:4e:7c:97:d3:94:e3:24:84:c6:a5:86:2f:f7:ac:ea:30:1e: 1a:02:73:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+3AK0ok+KypBTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OTk5YTM5MmMtYjEwNC00YTg4LWFiZWItY2U4YzhhYTZkZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxh5R3fyX8uN4kvhBTUQGAVsc4uMkPBSsAod Ahaunj1TZY9Vw10MnBxQ0q3vkrJtQju2nGmGr/qoETBNP2CSv8uAbR7Se6hQBFsv LXkOOUF/7UTV0ZkJBLgoU9uhfOYX9k+UP0LKNuws3zcHySOeCsJvt/hTflTzUswJ RZ4ziHsBeY3xhd1RrJ4NoHBCPZQFnBj11yN/CySmFt7etGCrYebiHanMMtZOq6qy 5lOko4OvHEAqmCI8h1xXtl1zjeEre8h57WooVsMcyvpoytyVfPzZ8aMIgGNZ1Kpy 8T652N8xGucU9eXlaizEGv1EijtGRfqdB9ulTGU4p7sB13zNrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAAu1/VM0cR03FZ91QCWHeS+wEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZhNGQ2OTYtMjc2Zi0z NmFjLTkxMzEtMTVkZGRkOGJjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGOPL8jwdAQYBX7TjM+1cbVwPoSUKXf9zgK+SybpoJgpK5vGqr/WhwF 6c42G/SJCSk6sMB+52WUTjOX71Ax6YWK0Uul4ICSIcdHuN3ux7Tp0dQbBMJ5uD4e PJtJHBLrg3Vfps3754Ugo+E1eFomKg0qw+PkB5hzP5DDNUQ3OSvg04yiQFx7HUHr iEckVwW4K3C0fSnKVL6wd344mDJydKkJlQLgQL+tX5q1euR5ePPgpI5uJJ88fq0o Fqtjv5MZAVf/80khre7E25iiEEeZgujjidHhI81g3Sl2Hox/HV7yosdelljDQ4ba g09OfJfTlOMkhMalhi/3rOowHhoCc2A= -----END CERTIFICATE-----Generated at Sat Sep 26 16:28:37 2026 by rpki-client