$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b80fdc9e-4fbc-3d82-930a-a3ae5d26e42b.roa File: b80fdc9e-4fbc-3d82-930a-a3ae5d26e42b.roa (raw, json) Hash identifier: 5AiF3f9cp2QhdC3H0GZkxh2J1J8LQG0HyxMlozwjYo4= Subject key identifier: 0E:64:79:ED:96:EC:4D:65:8C:EA:6B:6F:AF:02:40:FD:EF:13:58:E8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F497465A531A5D4FFEF7DB400 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b80fdc9e-4fbc-3d82-930a-a3ae5d26e42b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 214432 IP address blocks: 216.83.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:65:a5:31:a5:d4:ff:ef:7d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7c57baa8-80c1-4dac-ac23-fa75eb04ce0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c9:a3:9b:ae:4f:45:b5:84:ff:1e:de:8c:75: e1:9d:ef:33:c4:b4:76:8b:00:80:23:d4:68:bd:b8: a3:8d:60:9e:33:ad:09:cc:06:73:03:97:b6:4c:ee: 1b:62:92:88:92:d2:58:33:3c:53:5d:01:61:af:a0: 1b:34:58:d5:85:fc:3f:0a:28:9c:08:57:51:59:4b: 86:54:10:60:2e:c5:d2:5e:8e:c7:a1:91:48:5a:47: 5e:21:cb:39:37:37:88:83:57:e5:a8:a9:6f:20:1e: c9:e3:d1:23:5c:2d:8a:9a:3e:a1:04:dd:72:87:d4: 19:1b:d1:3e:94:f0:00:8e:a5:c0:91:b0:e0:5e:77: 69:1f:2e:49:c0:63:03:eb:ba:82:5a:6f:38:cd:5f: ae:ac:b0:34:2b:5c:f6:10:77:4b:09:63:af:10:46: 4b:98:58:13:db:56:1c:30:36:d3:59:49:84:f2:42: 6b:ef:b1:b5:85:08:87:2e:1b:53:d0:d5:20:33:3a: fc:35:84:fe:bf:07:e3:0c:1b:d1:85:62:d3:fd:d2: 8f:9b:3c:bf:11:e1:a3:95:b2:5d:37:62:20:c2:fa: 51:08:df:58:94:d1:ce:e3:70:a3:f4:6f:04:96:89: d7:6e:09:1f:b1:07:55:ff:74:81:16:c2:76:df:54: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:64:79:ED:96:EC:4D:65:8C:EA:6B:6F:AF:02:40:FD:EF:13:58:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b80fdc9e-4fbc-3d82-930a-a3ae5d26e42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:08:1c:e2:65:04:f1:58:e5:e6:7f:02:f0:d1:49:93:d2:89: 48:53:ca:e9:b2:89:77:12:98:44:c4:d4:52:43:18:74:2d:b5: 91:71:e4:21:25:8c:92:16:89:a4:56:1e:ce:5b:d3:e5:95:0c: 98:16:14:3b:45:7b:8b:57:d5:53:c0:9b:28:c2:72:a7:de:d1: 73:b1:74:34:1c:7e:42:e0:aa:79:f8:97:1b:ad:21:a4:0f:dd: de:87:2e:df:a6:b9:c1:d6:cc:31:3b:25:dd:a9:28:53:4b:85: c7:60:79:20:36:ef:24:cd:24:2d:93:c5:bd:00:c3:cb:c5:4b: 14:d0:f8:ee:e3:3c:d8:7d:b7:94:cb:a0:2b:4d:a6:49:c6:b3: 84:77:67:0b:54:2f:c3:34:65:05:15:33:3e:ce:7a:5c:43:16: 8a:dc:ba:bb:ae:ee:f2:ef:22:67:27:af:e3:30:18:c2:af:e9: d1:34:c8:f3:a9:53:b8:d0:d0:31:72:a6:5b:88:11:7e:84:38: bb:09:e2:59:b4:69:57:c6:51:2a:f6:d9:78:e0:5c:20:2d:31: 50:dd:cd:fe:1c:68:7b:63:52:fb:65:4e:d5:1a:86:ed:43:e9: 40:84:dd:46:b4:73:9d:36:d5:a2:50:e6:ef:ac:07:46:e3:64: dc:7f:fc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGWlMaXU/+99tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2M1N2JhYTgtODBjMS00ZGFjLWFjMjMtZmE3NWViMDRjZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcmjm65PRbWE/x7ejHXhne8zxLR2iwCAI9Ro vbijjWCeM60JzAZzA5e2TO4bYpKIktJYMzxTXQFhr6AbNFjVhfw/CiicCFdRWUuG VBBgLsXSXo7HoZFIWkdeIcs5NzeIg1flqKlvIB7J49EjXC2Kmj6hBN1yh9QZG9E+ lPAAjqXAkbDgXndpHy5JwGMD67qCWm84zV+urLA0K1z2EHdLCWOvEEZLmFgT21Yc MDbTWUmE8kJr77G1hQiHLhtT0NUgMzr8NYT+vwfjDBvRhWLT/dKPmzy/EeGjlbJd N2IgwvpRCN9YlNHO43Cj9G8ElonXbgkfsQdV/3SBFsJ231SYUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5kee2W7E1ljOprb68CQP3vE1joMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYjgwZmRjOWUtNGZiYy0z ZDgyLTkzMGEtYTNhZTVkMjZlNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYIHOJlBPFY5eZ/AvDRSZPSiUhTyumyiXcSmETE1FJDGHQttZFx5CEl jJIWiaRWHs5b0+WVDJgWFDtFe4tX1VPAmyjCcqfe0XOxdDQcfkLgqnn4lxutIaQP 3d6HLt+mucHWzDE7Jd2pKFNLhcdgeSA27yTNJC2Txb0Aw8vFSxTQ+O7jPNh9t5TL oCtNpknGs4R3ZwtUL8M0ZQUVMz7OelxDForcuruu7vLvImcnr+MwGMKv6dE0yPOp U7jQ0DFypluIEX6EOLsJ4lm0aVfGUSr22XjgXCAtMVDdzf4caHtjUvtlTtUahu1D 6UCE3Ua0c5021aJQ5u+sB0bjZNx//Do= -----END CERTIFICATE-----Generated at Fri Sep 25 23:56:09 2026 by rpki-client