$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa File: 702f69c0-4ec8-311b-935d-382c2fabdcef.roa (raw, json) Hash identifier: FMEDYIMY+ZBXJhnJcxsc12pAyZJXbQn74UxsGyrxxnI= Subject key identifier: BC:C3:6A:09:29:C7:45:52:D5:59:43:50:2F:AD:15:8B:C0:7B:BE:4A Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D1B1A660221DF7E64F6596D80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 13335 IP address blocks: 216.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:66:02:21:df:7e:64:f6:59:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=358a451e-66d7-4340-83c6-85ad1799fe87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:8c:d9:67:08:04:0e:0b:34:72:ab:54:9a: 11:6d:11:12:b4:36:05:f3:8b:88:f1:a4:43:9c:f8: 9e:a5:aa:1f:91:fc:81:2e:3c:46:9a:82:fc:03:79: f1:64:05:b9:28:42:ab:01:bf:df:d7:2f:ca:6d:c8: 09:2a:85:60:05:69:f9:cf:a7:35:26:04:c4:eb:ec: 24:a9:a0:75:e0:e4:33:71:4b:95:d6:d8:a3:cb:d9: f4:d8:64:f4:cc:40:f2:62:f0:6d:54:dd:9a:fe:62: c2:b9:4c:c7:61:de:60:ba:6f:d0:11:d0:44:3a:f1: 3f:d3:97:de:79:0e:f2:d1:ec:5e:a3:bf:ec:b2:0c: b5:19:c9:3d:82:9a:12:dd:5e:a7:53:c6:7e:87:b9: 02:d3:5b:2b:3d:05:1e:fa:60:8c:32:16:fb:9d:8d: 11:cc:db:84:62:68:8e:cd:e6:ad:53:e9:45:bf:ed: 8b:98:05:49:09:e4:ea:3c:f5:d9:71:9a:95:19:95: 7a:08:ff:63:92:1e:88:ef:7d:dc:65:48:bf:fc:d9: c8:e4:d4:e7:26:c8:a0:8e:76:04:aa:0b:e2:01:3d: e1:0f:a0:b6:25:1d:bb:25:44:00:9a:84:b5:9d:5f: 4d:69:de:94:6e:b4:04:77:29:2c:ee:96:1c:97:d1: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:6A:09:29:C7:45:52:D5:59:43:50:2F:AD:15:8B:C0:7B:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ba:e9:10:62:72:f4:3d:52:60:e4:95:96:59:e8:a9:16:da: 8d:b3:99:1b:63:4e:4b:49:d5:7d:7f:86:73:97:64:69:6d:55: 7f:6c:8e:40:c7:cb:5c:8c:c3:a2:c3:2e:7e:76:21:77:18:8f: 73:b2:5a:d1:d8:29:45:0d:15:23:0e:d9:92:09:d4:d8:1f:d6: 73:b2:24:72:b6:cd:d1:dc:00:de:3b:75:32:d1:8a:bb:e4:60: 01:63:f4:f9:b8:7c:c9:39:18:16:a9:54:6c:07:c1:94:61:37: be:54:3d:53:d7:6b:d4:40:81:ed:61:2c:fe:d3:82:08:10:20: 43:e2:d7:dd:69:9c:56:3c:88:43:5d:91:58:62:55:14:a5:2a: 96:8d:ae:9f:eb:b1:3c:e0:b3:12:9a:3e:b3:ba:d7:23:f3:a1: 5e:2a:c0:21:b1:85:b2:36:33:4c:de:2c:22:65:fd:f8:80:bb: 7e:e4:08:3e:8d:6f:b4:9b:26:c1:a3:d3:1d:62:4b:a2:c9:8c: 14:18:1e:f9:ef:07:9b:c4:e4:4a:2e:fe:cb:34:62:09:1a:9d: 82:44:4e:20:33:f4:de:3f:d1:76:2d:26:f6:6b:9a:13:8b:28: c5:8a:68:02:a9:05:a7:29:ed:b1:9f:66:29:5f:1c:67:af:06: b1:30:fd:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmYCId9+ZPZZbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MzU4YTQ1MWUtNjZkNy00MzQwLTgzYzYtODVhZDE3OTlmZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2+M2WcIBA4LNHKrVJoRbREStDYF84uI8aRD nPiepaofkfyBLjxGmoL8A3nxZAW5KEKrAb/f1y/KbcgJKoVgBWn5z6c1JgTE6+wk qaB14OQzcUuV1tijy9n02GT0zEDyYvBtVN2a/mLCuUzHYd5gum/QEdBEOvE/05fe eQ7y0exeo7/ssgy1Gck9gpoS3V6nU8Z+h7kC01srPQUe+mCMMhb7nY0RzNuEYmiO zeatU+lFv+2LmAVJCeTqPPXZcZqVGZV6CP9jkh6I733cZUi//NnI5NTnJsigjnYE qgviAT3hD6C2JR27JUQAmoS1nV9Nad6UbrQEdyks7pYcl9Hq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzDagkpx0VS1VlDUC+tFYvAe75KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzAyZjY5YzAtNGVjOC0z MTFiLTkzNWQtMzgyYzJmYWJkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq66RBicvQ9UmDklZZZ6KkW2o2zmRtjTktJ1X1/hnOXZGltVX9sjkDH y1yMw6LDLn52IXcYj3OyWtHYKUUNFSMO2ZIJ1Ngf1nOyJHK2zdHcAN47dTLRirvk YAFj9Pm4fMk5GBapVGwHwZRhN75UPVPXa9RAge1hLP7TgggQIEPi191pnFY8iENd kVhiVRSlKpaNrp/rsTzgsxKaPrO61yPzoV4qwCGxhbI2M0zeLCJl/fiAu37kCD6N b7SbJsGj0x1iS6LJjBQYHvnvB5vE5Eou/ss0YgkanYJETiAz9N4/0XYtJvZrmhOL KMWKaAKpBacp7bGfZilfHGevBrEw/es= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:01 2026 by rpki-client