$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa File: 9ac4592f-54b4-32dd-9da1-2b504063b789.roa (raw, json) Hash identifier: xlOop1/iKilwCbbWNdmlWAWa3DzpkovPC9J13RAo3jw= Subject key identifier: 9B:EF:82:6E:25:97:02:3B:95:AB:F2:E7:D1:51:AA:87:81:5B:DA:27 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B891782676F59C759F02E6160 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 216.83.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:82:67:6f:59:c7:59:f0:2e:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=246d8333-d69e-48dc-91dd-26983a557df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:01:15:22:d4:22:96:20:7b:fe:83:6a:ad: 48:d9:4c:c5:8e:64:47:dc:f7:e2:7a:49:2f:d9:75: 82:49:f5:28:1b:bd:1a:95:c8:99:ff:2b:e7:cb:9f: 34:30:01:cd:9c:5f:ba:44:82:eb:2c:a2:04:a3:c5: 2e:e6:7d:fc:d0:0d:d3:58:53:d4:7d:26:3b:c6:6c: 08:09:27:78:3a:e2:36:38:07:d6:b3:91:ef:54:dd: cd:cb:58:dd:32:49:10:4d:c7:14:5b:29:f1:b8:fd: e9:ec:e1:5b:ac:52:7c:eb:74:4d:a3:c7:e5:3f:c4: 99:f8:1e:f7:f8:e6:9b:a2:9b:49:1d:b2:7b:79:13: 66:19:d1:02:59:ba:e1:ee:2c:d4:4d:28:f9:96:f9: 34:9e:9d:92:4b:6b:33:b9:8c:be:01:a9:65:ff:41: 5c:50:3d:f6:ad:dc:80:ba:d5:64:ed:5a:51:29:0d: da:51:5d:7d:51:7f:d7:2d:8e:5f:ff:de:07:c9:07: 19:33:84:67:e7:01:17:a4:71:25:d6:0b:e8:b1:1b: 84:b0:58:04:e9:f8:c8:79:33:4f:bc:37:f5:56:41: 2b:8d:4f:92:49:12:dd:66:66:e6:1a:70:75:64:ba: fd:89:b8:1e:93:96:0a:b0:79:2c:cb:58:15:ee:fa: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EF:82:6E:25:97:02:3B:95:AB:F2:E7:D1:51:AA:87:81:5B:DA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9ac4592f-54b4-32dd-9da1-2b504063b789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:48:65:95:01:78:12:b6:93:96:1b:f2:98:e2:be:fd:25:c0: 4a:2a:b9:9a:16:27:5a:2d:8e:ca:e5:5c:7f:4f:59:96:04:58: 05:3d:70:70:dc:ca:b9:29:1d:f7:0a:41:5c:94:a3:5e:f4:cc: af:cd:31:1a:f5:ff:a5:bb:f0:e4:eb:7b:9e:c5:f2:8c:c2:d6: 3c:50:d6:5c:02:cf:20:51:63:be:b6:4d:75:2d:0c:f5:e5:64: 05:3f:d7:93:fe:f5:f2:a8:7f:54:be:18:d6:9d:11:b6:b0:a9: 70:ee:d0:a7:4d:a8:28:85:80:fa:53:6f:b1:19:ea:49:21:e0: 8d:0f:31:39:7b:e1:b2:1b:24:08:94:05:44:2b:d0:9c:fc:0d: f4:be:0f:89:2c:43:50:9a:25:01:16:5c:aa:3f:f1:54:8e:bd: 9a:e1:e6:c4:61:77:c5:7e:65:10:6a:47:ac:00:ed:bd:cc:4e: d9:3c:40:61:c8:e5:40:07:ba:4e:1c:26:12:b1:69:63:ed:dc: 8f:2c:07:3d:a4:19:07:97:e1:f6:22:42:b6:36:ab:65:4c:da: f7:21:0b:b0:15:d9:b5:e7:5c:78:d6:01:e3:48:92:64:e3:b8: 3c:c2:71:9e:69:dd:7d:7c:97:0c:87:7f:a9:8b:62:f3:c6:da: 39:f3:d3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4Jnb1nHWfAuYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MjQ2ZDgzMzMtZDY5ZS00OGRjLTkxZGQtMjY5ODNhNTU3ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVsBFSLUIpYge/6Daq1I2UzFjmRH3Pfiekkv 2XWCSfUoG70alciZ/yvny580MAHNnF+6RILrLKIEo8Uu5n380A3TWFPUfSY7xmwI CSd4OuI2OAfWs5HvVN3Ny1jdMkkQTccUWynxuP3p7OFbrFJ863RNo8flP8SZ+B73 +OaboptJHbJ7eRNmGdECWbrh7izUTSj5lvk0np2SS2szuYy+Aall/0FcUD32rdyA utVk7VpRKQ3aUV19UX/XLY5f/94HyQcZM4Rn5wEXpHEl1gvosRuEsFgE6fjIeTNP vDf1VkErjU+SSRLdZmbmGnB1ZLr9ibgek5YKsHksy1gV7vozhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvvgm4llwI7lavy59FRqoeBW9onMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWFjNDU5MmYtNTRiNC0z MmRkLTlkYTEtMmI1MDQwNjNiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINIZZUBeBK2k5Yb8pjivv0lwEoquZoWJ1otjsrlXH9PWZYEWAU9cHDc yrkpHfcKQVyUo170zK/NMRr1/6W78OTre57F8ozC1jxQ1lwCzyBRY762TXUtDPXl ZAU/15P+9fKof1S+GNadEbawqXDu0KdNqCiFgPpTb7EZ6kkh4I0PMTl74bIbJAiU BUQr0Jz8DfS+D4ksQ1CaJQEWXKo/8VSOvZrh5sRhd8V+ZRBqR6wA7b3MTtk8QGHI 5UAHuk4cJhKxaWPt3I8sBz2kGQeX4fYiQrY2q2VM2vchC7AV2bXnXHjWAeNIkmTj uDzCcZ5p3X18lwyHf6mLYvPG2jnz0+g= -----END CERTIFICATE-----Generated at Sun Oct 19 22:29:43 2025 by rpki-client