$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa File: 702f69c0-4ec8-311b-935d-382c2fabdcef.roa (raw, json) Hash identifier: Z8K/geq1OIMeY566Ft6P1Qz0UxntCXbd7E8YMNp95BQ= Subject key identifier: 2E:37:81:AD:C9:FD:EB:CF:39:75:EC:FD:4D:0D:FB:08:11:23:5B:00 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B5B07637F3B5F6014180A4400 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 13335 IP address blocks: 216.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:63:7f:3b:5f:60:14:18:0a:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1ea22d37-0e0f-485d-adb4-4fe23afe5597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:1b:e8:36:80:6a:3d:93:e3:19:88:eb:05: 2c:2d:d2:ff:af:06:c5:1a:cf:e9:8c:a6:12:d5:c3: 86:dc:c9:ef:5c:68:8e:2f:07:69:23:c7:20:1b:f7: 64:8c:08:ec:cf:de:f8:b8:e7:46:22:cb:61:05:f7: 8f:26:e7:e9:7b:b2:d2:b1:cf:fc:71:5f:07:06:a1: b5:0e:b6:cb:f6:11:67:a4:f3:9c:37:5b:69:5d:57: a6:e2:6c:e7:80:3a:0e:b4:69:58:68:1c:39:23:5c: ae:74:0f:90:90:be:3c:d4:25:03:e6:0b:7d:e4:ff: 5f:39:b8:5f:81:12:c2:a9:58:0e:0a:0b:c2:01:a2: a5:45:b3:13:bd:16:2e:57:6d:22:bf:81:c4:88:ec: 21:48:d8:3d:a4:6a:e6:c6:b7:3f:28:31:47:2c:1f: e3:ac:08:52:f4:db:78:00:69:4c:a5:d7:3a:53:62: 33:18:82:7f:6e:d6:cd:2c:82:2b:f9:a7:27:23:36: de:56:dc:5c:f9:f2:9d:c1:49:69:96:76:b1:07:35: 56:fb:bb:29:cb:99:84:d8:2a:f8:5e:4f:94:b9:08: c3:2e:80:84:fd:4f:ab:60:da:49:9a:97:de:db:e9: b4:46:e6:ee:35:18:31:f5:76:8f:27:a1:ce:da:14: 15:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:37:81:AD:C9:FD:EB:CF:39:75:EC:FD:4D:0D:FB:08:11:23:5B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/702f69c0-4ec8-311b-935d-382c2fabdcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ea:98:6f:6e:9a:95:b6:26:d6:2a:a6:ec:72:f2:af:b9:89: 80:30:b2:64:a7:86:f0:3c:d3:58:88:9c:61:6a:58:6c:44:f5: 0b:af:11:a6:2a:dc:c9:0d:0c:12:50:23:2e:67:c5:22:00:48: b3:c1:dd:c2:6b:be:fe:29:94:f7:07:ba:0e:e1:f6:1e:48:14: db:ed:7c:14:0f:0f:37:b4:53:e4:f5:0d:48:03:af:9e:ab:41: 7f:14:f7:44:71:05:61:3b:b2:cc:94:07:9c:6e:41:2c:80:39: 66:d4:dd:cc:8f:2a:e9:ce:64:0e:28:0a:f0:37:76:27:56:05: 32:f6:57:2b:fe:77:cc:28:68:1f:c3:de:a9:10:34:0c:69:3a: 73:5e:a0:57:b0:61:84:91:06:48:9f:2f:0a:63:68:c7:48:8d: a1:9e:ca:58:11:92:e7:d2:e8:f0:04:74:7e:02:44:33:e9:da: 81:1e:a2:9a:c3:d5:98:ff:38:9e:19:22:0c:9c:41:47:3e:18: 9f:41:5b:ac:9b:64:cc:ea:0c:ed:cc:97:8f:eb:cb:d7:5d:ad: b3:cc:77:05:c6:19:bd:ec:78:e3:cb:ac:ec:59:a3:fb:b7:35: 91:22:ec:2c:52:6d:c3:7b:91:89:f9:47:11:e1:5d:8c:2f:d7: fd:1d:dd:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2N/O19gFBgKRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWVhMjJkMzctMGUwZi00ODVkLWFkYjQtNGZlMjNhZmU1NTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZcb6DaAaj2T4xmI6wUsLdL/rwbFGs/pjKYS 1cOG3MnvXGiOLwdpI8cgG/dkjAjsz974uOdGIsthBfePJufpe7LSsc/8cV8HBqG1 DrbL9hFnpPOcN1tpXVem4mzngDoOtGlYaBw5I1yudA+QkL481CUD5gt95P9fObhf gRLCqVgOCgvCAaKlRbMTvRYuV20iv4HEiOwhSNg9pGrmxrc/KDFHLB/jrAhS9Nt4 AGlMpdc6U2IzGIJ/btbNLIIr+acnIzbeVtxc+fKdwUlplnaxBzVW+7spy5mE2Cr4 Xk+UuQjDLoCE/U+rYNpJmpfe2+m0RubuNRgx9XaPJ6HO2hQVJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC43ga3J/evPOXXs/U0N+wgRI1sAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzAyZjY5YzAtNGVjOC0z MTFiLTkzNWQtMzgyYzJmYWJkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7qmG9umpW2JtYqpuxy8q+5iYAwsmSnhvA801iInGFqWGxE9QuvEaYq 3MkNDBJQIy5nxSIASLPB3cJrvv4plPcHug7h9h5IFNvtfBQPDze0U+T1DUgDr56r QX8U90RxBWE7ssyUB5xuQSyAOWbU3cyPKunOZA4oCvA3didWBTL2Vyv+d8woaB/D 3qkQNAxpOnNeoFewYYSRBkifLwpjaMdIjaGeylgRkufS6PAEdH4CRDPp2oEeoprD 1Zj/OJ4ZIgycQUc+GJ9BW6ybZMzqDO3Ml4/ry9ddrbPMdwXGGb3seOPLrOxZo/u3 NZEi7CxSbcN7kYn5RxHhXYwv1/0d3TE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:11:00 2025 by rpki-client