$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa File: c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa (raw, json) Hash identifier: /wpaJcc9p7mPifc1QBumvzpyTPnFIgJrv5YZwjo0EPg= Subject key identifier: 9D:5A:6F:CD:23:74:76:C1:CD:CC:97:4B:12:DB:34:3C:7B:7A:65:0F Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584DBBA059935DFA1C94147C88C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 14618 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:59:93:5d:fa:1c:94:14:7c:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=a8fe589c-9ee7-4892-8420-dc85097ea166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:a6:9c:e4:a6:7b:17:12:0e:db:d5:98:4e: 4d:42:87:da:1f:71:0d:17:6c:7f:01:ff:de:73:aa: ba:b7:64:04:cc:2f:83:76:84:db:24:a0:6b:0d:7e: 98:65:3a:f0:cd:bb:81:b8:63:be:e6:1c:4e:97:18: 6b:f0:03:29:3c:8d:60:d0:6c:73:9c:70:b2:f1:3c: 4d:6b:c7:58:a0:e3:89:10:ba:17:31:ff:4d:44:93: ca:66:31:57:7a:7b:4a:11:c6:03:c5:ea:66:8b:e8: 37:13:c0:78:15:8b:8d:6b:21:77:66:11:b1:d1:94: 09:0c:ed:ed:29:13:e3:09:31:cf:0b:5b:db:22:c9: 7c:37:82:7b:4a:9a:00:5e:1e:40:ea:b3:27:8c:26: 97:6e:36:a4:31:f5:03:77:4c:a6:c1:40:79:5d:66: 62:96:71:23:93:c1:9e:89:44:fd:f7:22:a6:97:46: 53:aa:f5:3a:08:e7:c0:2f:08:d9:7f:3f:67:dd:8a: 48:00:dc:d3:07:07:dd:00:49:fa:50:87:ab:67:b7: 17:83:9a:c3:c0:bc:bb:ad:6e:1a:8d:74:b8:a4:b4: 84:ac:45:00:bc:7e:27:31:b9:00:51:e8:d2:d0:b0: 51:79:f7:37:a8:14:da:86:02:8c:a0:54:6d:a1:d1: 6c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5A:6F:CD:23:74:76:C1:CD:CC:97:4B:12:DB:34:3C:7B:7A:65:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:46:3c:fa:c0:ab:e2:f6:cf:6b:41:ce:10:e0:63:c6:9c:85: 00:60:d4:d4:6f:d6:15:77:95:44:70:3d:73:cf:74:c1:d8:6b: 5d:7f:9f:b9:07:dd:07:a8:2d:b3:c0:49:17:13:eb:87:90:4d: e1:70:54:ea:89:d6:f6:1d:7a:08:0c:c1:4e:be:b0:ae:c9:c2: 51:0c:d2:2f:cb:7c:49:cc:bc:3b:b7:63:b8:aa:b8:fe:94:d3: 3d:cb:ff:02:ca:8d:0a:0e:4d:72:fa:06:42:9a:60:90:d5:66: 73:2b:df:b0:e9:48:7b:59:24:6f:1e:02:01:ed:6a:4d:36:74: 65:78:c4:30:62:95:a0:b0:74:ba:41:fe:e2:52:0b:ed:a2:1b: 0c:99:10:87:7a:03:8b:89:8f:05:e0:fd:e9:12:88:74:d3:02: e0:ed:46:40:a1:75:c4:9f:d1:e2:32:af:bf:fc:70:2b:1e:1a: 88:c7:30:44:2c:0d:c9:f4:da:ee:a4:93:5a:21:98:38:b9:9f: dc:8d:3c:80:50:a1:2e:57:c0:86:b5:7e:db:a5:22:03:78:52: f1:bb:70:0e:58:21:21:ce:93:46:c9:dd:9e:95:57:ec:d2:e6: 04:6c:9d:17:7e:7b:8c:aa:fd:15:28:5e:5e:84:8f:ab:80:b1: 67:b2:cd:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFmTXfoclBR8iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YThmZTU4OWMtOWVlNy00ODkyLTg0MjAtZGM4NTA5N2VhMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXOmnOSmexcSDtvVmE5NQofaH3ENF2x/Af/e c6q6t2QEzC+DdoTbJKBrDX6YZTrwzbuBuGO+5hxOlxhr8AMpPI1g0GxznHCy8TxN a8dYoOOJELoXMf9NRJPKZjFXentKEcYDxepmi+g3E8B4FYuNayF3ZhGx0ZQJDO3t KRPjCTHPC1vbIsl8N4J7SpoAXh5A6rMnjCaXbjakMfUDd0ymwUB5XWZilnEjk8Ge iUT99yKml0ZTqvU6COfALwjZfz9n3YpIANzTBwfdAEn6UIerZ7cXg5rDwLy7rW4a jXS4pLSErEUAvH4nMbkAUejS0LBRefc3qBTahgKMoFRtodFsnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1ab80jdHbBzcyXSxLbNDx7emUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYzlmZTdhMjQtNGY5MC0z MmUxLTlhYmYtM2UyNDdjOTAyYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlGPPrAq+L2z2tBzhDgY8achQBg1NRv1hV3lURwPXPPdMHYa11/n7kH 3QeoLbPASRcT64eQTeFwVOqJ1vYdeggMwU6+sK7JwlEM0i/LfEnMvDu3Y7iquP6U 0z3L/wLKjQoOTXL6BkKaYJDVZnMr37DpSHtZJG8eAgHtak02dGV4xDBilaCwdLpB /uJSC+2iGwyZEId6A4uJjwXg/ekSiHTTAuDtRkChdcSf0eIyr7/8cCseGojHMEQs Dcn02u6kk1ohmDi5n9yNPIBQoS5XwIa1ftulIgN4UvG7cA5YISHOk0bJ3Z6VV+zS 5gRsnRd+e4yq/RUoXl6Ej6uAsWeyzQY= -----END CERTIFICATE-----Generated at Wed May 13 11:40:19 2026 by rpki-client