$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa File: 807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa (raw, json) Hash identifier: +QJRJc4kmToR0YTQYcF24aCuq71gpBR2rxEPwvO8UXo= Subject key identifier: 64:F8:50:2B:F5:80:23:3C:93:FD:52:31:99:A0:06:A9:0A:43:59:73 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B79B63F3CAAA27BD267D0ED00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa Signing time: Fri 10 Oct 2025 12:47:43 +0000 ROA not before: Fri 10 Oct 2025 12:47:43 +0000 ROA not after: Thu 08 Jan 2026 13:47:43 +0000 asID: 64267 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:b6:3f:3c:aa:a2:7b:d2:67:d0:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 10 12:47:43 2025 GMT Not After : Jan 8 13:47:43 2026 GMT Subject: CN=36aaae3a-c2a0-4a2c-a6e0-b93f39b4cf85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:79:19:0a:60:0c:57:79:77:37:ff:55:3c: 96:02:85:9f:17:b1:e3:82:cb:36:31:91:ad:73:11: 89:44:c4:cd:d9:38:ad:62:8c:c6:c9:98:b8:5a:a0: 19:e3:00:af:cf:9e:71:3d:0a:b6:24:75:33:e3:63: 8a:ff:6c:6a:f3:5f:d6:ad:c6:37:96:36:98:02:4a: 66:32:f4:fd:5c:87:c7:ad:0b:32:d4:24:81:ce:2e: bf:a6:19:b3:36:c2:5a:32:17:6e:82:1d:33:bd:58: 58:c2:68:a4:9c:5a:78:9e:5d:44:0b:ca:f3:b7:bb: d5:e4:47:6c:eb:2b:da:4a:b0:4a:93:ce:fb:e0:92: 6c:71:ee:cb:28:7f:53:17:29:48:cd:1f:b3:3f:20: 37:7d:b2:fd:d6:60:1d:56:c5:da:62:22:2f:80:c8: 12:d4:ea:54:84:a6:d9:67:a2:fb:fc:65:b2:3f:44: 7d:a3:8f:d4:bd:21:af:ae:a0:00:79:2b:d0:da:a3: 91:9b:74:02:0d:5d:4b:a9:01:ea:08:ea:a2:67:e7: 92:e8:c2:ee:b0:28:ed:82:93:1a:a2:48:f9:5c:ea: 4c:37:67:ab:18:53:b9:5b:81:14:b5:c5:0c:59:55: e3:3c:3d:0d:5f:23:24:f2:8e:5c:61:d8:49:d5:df: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:50:2B:F5:80:23:3C:93:FD:52:31:99:A0:06:A9:0A:43:59:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:11:b9:30:8f:e8:f8:e8:9a:ae:24:24:84:0f:d7:89:14:88: 5e:6b:82:e8:50:df:51:83:dc:dc:af:a9:11:10:7f:86:b7:02: 25:3d:22:ad:b8:c8:e5:68:ec:4e:a1:60:40:3d:52:f5:bb:05: 45:09:d2:d6:1e:50:c6:f0:72:32:8d:d5:bf:48:d4:8d:b7:cc: 04:0e:bc:e6:22:65:d6:8c:c1:57:93:44:76:cd:6a:1d:e7:c0: cf:c2:ca:d4:ae:65:00:00:0f:ac:a4:71:e7:e7:b0:60:71:f6: 40:ad:dc:49:91:c8:90:a3:0b:74:d2:5e:0f:6f:b3:fd:e4:79: 8f:a1:ca:ba:86:7c:22:36:03:35:a4:02:f2:7e:70:ef:e2:2f: f7:f3:bb:90:8f:03:48:fc:08:53:20:b5:ea:82:5a:c8:13:12: 7c:1f:7e:03:e4:9c:70:33:05:81:72:bb:b4:9e:76:00:3c:b0: 95:c0:57:76:1e:65:71:c0:df:6d:65:10:0f:d2:df:fe:c6:94: 07:7d:af:50:a4:6f:9b:74:fe:86:c7:d7:1a:8b:55:39:c2:c4: c2:00:5a:cc:91:99:c2:c8:c1:10:0c:91:c2:cf:22:ca:36:75: 81:b6:d1:d5:9b:9c:0e:0d:08:4c:c1:89:75:1e:68:1e:c1:c0: 7e:22:b2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5tj88qqJ70mfQ7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxMDEyNDc0M1oXDTI2MDEwODEzNDc0M1owLzEtMCsGA1UEAxMk MzZhYWFlM2EtYzJhMC00YTJjLWE2ZTAtYjkzZjM5YjRjZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+V5GQpgDFd5dzf/VTyWAoWfF7Hjgss2MZGt cxGJRMTN2TitYozGyZi4WqAZ4wCvz55xPQq2JHUz42OK/2xq81/WrcY3ljaYAkpm MvT9XIfHrQsy1CSBzi6/phmzNsJaMhdugh0zvVhYwmiknFp4nl1EC8rzt7vV5Eds 6yvaSrBKk8774JJsce7LKH9TFylIzR+zPyA3fbL91mAdVsXaYiIvgMgS1OpUhKbZ Z6L7/GWyP0R9o4/UvSGvrqAAeSvQ2qORm3QCDV1LqQHqCOqiZ+eS6MLusCjtgpMa okj5XOpMN2erGFO5W4EUtcUMWVXjPD0NXyMk8o5cYdhJ1d8nBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT4UCv1gCM8k/1SMZmgBqkKQ1lzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvODA3YjJmMGEtMTc0OC0z NGIyLWIxN2QtNjc3MTljYThhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADERuTCP6Pjomq4kJIQP14kUiF5rguhQ31GD3NyvqREQf4a3AiU9Iq24 yOVo7E6hYEA9UvW7BUUJ0tYeUMbwcjKN1b9I1I23zAQOvOYiZdaMwVeTRHbNah3n wM/CytSuZQAAD6ykcefnsGBx9kCt3EmRyJCjC3TSXg9vs/3keY+hyrqGfCI2AzWk AvJ+cO/iL/fzu5CPA0j8CFMgteqCWsgTEnwffgPknHAzBYFyu7SedgA8sJXAV3Ye ZXHA321lEA/S3/7GlAd9r1Ckb5t0/obH1xqLVTnCxMIAWsyRmcLIwRAMkcLPIso2 dYG20dWbnA4NCEzBiXUeaB7BwH4isrA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:03:23 2025 by rpki-client