$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa File: 9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa (raw, json) Hash identifier: 7sCB+CQBHu8feJQizoleZmFNOl/khHjhQ5SYM60G3Uw= Subject key identifier: 7E:04:21:EA:D0:09:4A:C2:1A:19:FD:F5:13:DA:D0:6B:CB:EE:90:93 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F119D10FEC5C0080F403DBEC0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 211373 IP address blocks: 216.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:10:fe:c5:c0:08:0f:40:3d:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9a48135b-df64-4e85-ba70-be0673a3dfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:cf:44:68:74:3e:39:7f:c6:db:9f:c1:15: 54:58:9d:86:b5:70:71:b1:53:43:0f:79:40:1f:eb: a2:93:df:7b:1b:15:f8:48:61:4a:69:2a:b3:b6:57: 73:01:3d:fb:9c:2e:a8:20:0c:4e:57:bb:2d:8f:11: 23:82:f2:3c:c0:55:7c:fc:b2:fd:fc:d8:23:66:80: c1:91:79:ad:38:e0:85:52:21:a4:c1:e7:b2:dc:af: 06:41:e8:63:e5:e4:cc:14:35:d5:56:0b:1d:63:22: ef:0e:b9:19:a5:25:14:a9:07:2e:cc:ef:66:c9:8a: 6f:f3:df:95:d6:55:71:04:5e:d1:4a:14:a9:b6:ce: a9:b2:83:55:ea:32:1b:da:52:81:2a:e4:f3:17:ca: 70:1c:94:f9:1f:5a:69:ee:b2:1e:16:b9:bd:7f:f5: de:58:30:99:90:9b:c5:5c:7e:c5:87:ea:02:5c:99: 0a:e9:d4:5e:96:5d:99:4d:87:b3:ee:fe:80:26:87: fd:98:66:51:1d:aa:5c:0a:30:ac:d7:5f:ca:c3:1e: 5b:46:40:8c:5c:90:2f:88:a3:d7:13:4a:2b:f4:02: b4:dc:d5:21:41:85:dd:d5:d3:77:47:1d:0a:a9:cd: 5d:df:3b:01:a4:c1:ec:0f:a4:3f:5f:08:3b:ec:1f: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:04:21:EA:D0:09:4A:C2:1A:19:FD:F5:13:DA:D0:6B:CB:EE:90:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:63:b2:22:09:3f:10:4d:6c:b2:89:8a:7a:5d:af:f1:cc:bd: c9:94:9f:0b:31:f8:78:5f:7e:16:84:eb:0e:a6:ae:0f:db:89: d3:df:6e:a9:b2:d0:0f:ec:6f:07:94:a8:18:ba:fd:cd:bf:05: a6:86:90:dd:9a:5a:f8:b3:3c:81:ed:40:9c:ca:18:c1:12:3d: ea:dd:1a:f1:24:b1:1c:8b:34:9e:63:2e:f9:e9:18:d0:7e:95: c8:9f:49:1b:41:16:c1:e0:b0:b2:94:c3:e3:32:be:0a:6c:05: d4:a2:39:76:d4:d7:8b:e9:4b:48:f8:df:00:de:54:c1:0a:4a: 3b:20:f0:dd:68:2e:d2:13:23:f8:50:a6:17:7c:94:15:ea:20: 3a:55:03:97:7b:46:f7:36:41:d0:1c:96:54:7b:83:df:13:b4: f1:41:ef:10:13:c1:d4:ca:1c:9d:60:20:24:e9:3d:e8:cc:12: 27:a4:3b:71:36:3c:26:13:5b:3e:e0:17:d8:a1:bf:d2:60:aa: a7:1b:c3:f7:cf:42:6a:ea:39:05:5b:45:74:76:0f:e3:09:f8: 24:a4:7d:68:f0:01:4d:61:ae:ef:e3:64:4f:8d:52:a3:16:ec: 45:f8:d8:52:c6:ff:21:d2:e0:57:57:5f:c6:f9:dc:91:9d:c1: 45:59:bd:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRD+xcAID0A9vsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE0ODEzNWItZGY2NC00ZTg1LWJhNzAtYmUwNjczYTNkZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUHPRGh0Pjl/xtufwRVUWJ2GtXBxsVNDD3lA H+uik997GxX4SGFKaSqztldzAT37nC6oIAxOV7stjxEjgvI8wFV8/LL9/NgjZoDB kXmtOOCFUiGkweey3K8GQehj5eTMFDXVVgsdYyLvDrkZpSUUqQcuzO9myYpv89+V 1lVxBF7RShSpts6psoNV6jIb2lKBKuTzF8pwHJT5H1pp7rIeFrm9f/XeWDCZkJvF XH7Fh+oCXJkK6dRell2ZTYez7v6AJof9mGZRHapcCjCs11/Kwx5bRkCMXJAviKPX E0or9AK03NUhQYXd1dN3Rx0Kqc1d3zsBpMHsD6Q/Xwg77B9S0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4EIerQCUrCGhn99RPa0GvL7pCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWM3NjhlMDMtZDdhOC0z ZDgxLTg0ODYtZWY0ZjVjM2E5YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNjsiIJPxBNbLKJinpdr/HMvcmUnwsx+HhffhaE6w6mrg/bidPfbqmy 0A/sbweUqBi6/c2/BaaGkN2aWvizPIHtQJzKGMESPerdGvEksRyLNJ5jLvnpGNB+ lcifSRtBFsHgsLKUw+MyvgpsBdSiOXbU14vpS0j43wDeVMEKSjsg8N1oLtITI/hQ phd8lBXqIDpVA5d7Rvc2QdAcllR7g98TtPFB7xATwdTKHJ1gICTpPejMEiekO3E2 PCYTWz7gF9ihv9Jgqqcbw/fPQmrqOQVbRXR2D+MJ+CSkfWjwAU1hru/jZE+NUqMW 7EX42FLG/yHS4FdXX8b53JGdwUVZveU= -----END CERTIFICATE-----Generated at Sat Sep 26 18:56:57 2026 by rpki-client