$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa File: 807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa (raw, json) Hash identifier: yM/+Ci4yIH2m/ny5O+LUiM7juvjuhDyBjrsyt8a+O5w= Subject key identifier: C9:3D:89:20:88:CD:43:5E:2E:70:DB:68:D6:77:C8:51:5A:84:04:48 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D386A28C5169D3ABE5EAAA100 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 64267 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:28:c5:16:9d:3a:be:5e:aa:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=d96e3f57-f7d4-4e4e-abad-7fde1c640cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:57:3d:1a:a8:b2:c3:66:50:2b:4e:68:57: 79:28:0c:82:4b:f8:7b:33:c9:fb:ea:31:41:4e:2c: 6f:e8:ee:46:b1:ab:47:94:4d:73:68:c0:24:02:84: 88:09:df:17:93:56:54:b6:91:d6:40:cd:d7:e1:57: 19:37:b9:df:11:71:26:13:4c:5e:66:c4:ac:43:08: 00:2a:f9:c1:f4:5a:7d:25:ed:1f:b0:73:ce:79:93: bf:fe:6d:2a:19:c6:a1:5a:a3:50:0a:5b:2f:98:44: 15:8f:a5:31:ce:f2:5f:26:f7:da:2e:d9:9e:28:9c: e2:f8:62:2a:7a:29:4b:5a:60:a4:76:e3:a0:11:13: 5b:14:e1:a4:8e:e6:af:b9:43:40:3c:97:ff:8e:31: f9:76:5a:00:88:d0:43:a7:b9:d1:84:4e:2b:86:cb: b5:a2:4e:5e:d8:b4:88:d7:46:98:a5:67:26:9e:97: 81:b7:1c:cb:14:75:92:49:2f:87:b9:1c:8b:91:9f: 10:f1:b4:a3:1b:68:58:eb:97:5e:8f:56:4f:37:85: a4:0a:98:e2:08:37:40:4d:54:aa:03:80:1a:af:70: 22:55:05:79:40:21:7d:f1:67:c7:86:92:19:0c:fa: 2f:3d:40:d6:4c:67:21:85:fd:ae:7b:ed:bc:78:45: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3D:89:20:88:CD:43:5E:2E:70:DB:68:D6:77:C8:51:5A:84:04:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/807b2f0a-1748-34b2-b17d-67719ca8a0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:81:d0:f9:b3:07:90:c4:be:d4:3c:57:f8:88:29:21:ca:fc: cc:61:e7:1b:dd:64:83:40:85:8e:60:6e:5c:57:47:cc:97:82: f6:8b:85:53:42:c4:7c:09:5b:c4:38:65:a5:c7:08:4c:46:5a: a9:c1:64:30:e0:c0:3f:f9:de:11:64:a8:17:9d:7d:40:5c:14: 31:28:f9:19:48:de:71:97:e7:2b:8c:84:3b:6c:0f:68:f0:41: 03:44:b3:e2:6d:05:21:18:c4:50:cd:39:58:35:f1:d4:3f:88: 99:e6:ab:e6:07:88:35:68:e2:0d:45:90:e6:0b:fb:f6:79:61: 9a:ad:29:37:dd:aa:ec:c1:97:83:15:2a:6b:6f:c5:96:84:f2: 31:84:2c:64:28:ce:87:c6:94:4e:6c:1f:d8:b9:c2:7e:32:58: 6a:80:2f:da:03:a7:7c:49:4f:d3:b2:52:bf:4a:fa:7a:05:ca: 86:64:90:b1:0b:b6:ef:bd:dd:c8:e2:48:c0:5a:29:67:ab:ec: 06:4e:42:a4:bb:c5:16:a8:f4:97:c2:65:63:e7:d6:e3:8b:bd: fe:2e:d9:77:7c:e2:8d:67:f5:c6:0c:3a:c2:f4:27:2c:f3:a7: a0:0b:70:9a:d3:46:4d:75:30:92:73:f0:67:9d:ef:8f:26:f8: aa:a7:01:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aijFFp06vl6qoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZDk2ZTNmNTctZjdkNC00ZTRlLWFiYWQtN2ZkZTFjNjQwY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSpXPRqossNmUCtOaFd5KAyCS/h7M8n76jFB Tixv6O5GsatHlE1zaMAkAoSICd8Xk1ZUtpHWQM3X4VcZN7nfEXEmE0xeZsSsQwgA KvnB9Fp9Je0fsHPOeZO//m0qGcahWqNQClsvmEQVj6UxzvJfJvfaLtmeKJzi+GIq eilLWmCkduOgERNbFOGkjuavuUNAPJf/jjH5dloAiNBDp7nRhE4rhsu1ok5e2LSI 10aYpWcmnpeBtxzLFHWSSS+HuRyLkZ8Q8bSjG2hY65dej1ZPN4WkCpjiCDdATVSq A4Aar3AiVQV5QCF98WfHhpIZDPovPUDWTGchhf2ue+28eEVU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk9iSCIzUNeLnDbaNZ3yFFahARIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvODA3YjJmMGEtMTc0OC0z NGIyLWIxN2QtNjc3MTljYThhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuB0PmzB5DEvtQ8V/iIKSHK/Mxh5xvdZINAhY5gblxXR8yXgvaLhVNC xHwJW8Q4ZaXHCExGWqnBZDDgwD/53hFkqBedfUBcFDEo+RlI3nGX5yuMhDtsD2jw QQNEs+JtBSEYxFDNOVg18dQ/iJnmq+YHiDVo4g1FkOYL+/Z5YZqtKTfdquzBl4MV KmtvxZaE8jGELGQozofGlE5sH9i5wn4yWGqAL9oDp3xJT9OyUr9K+noFyoZkkLEL tu+93cjiSMBaKWer7AZOQqS7xRao9JfCZWPn1uOLvf4u2Xd84o1n9cYMOsL0Jyzz p6ALcJrTRk11MJJz8Ged748m+KqnAb4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:05 2026 by rpki-client