$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa File: cb642c56-30e9-38e3-a46b-763036ada939.roa (raw, json) Hash identifier: hf9y+k41+QyRmb/Cj7XDo5xVI71nFiFnP4vAcSmEzYo= Subject key identifier: 85:35:E8:9C:47:B2:2F:6C:7D:4A:B0:05:4B:60:54:6E:EA:8A:C3:4B Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F49882B301D4056FDAD7841CC Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 216.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:2b:30:1d:40:56:fd:ad:78:41:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ece71a7-ef5f-4327-b712-0bd2e2e71fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:7f:83:99:0b:c0:45:29:94:6c:2b:cd:d8: 41:65:7e:5c:4c:6c:34:02:7b:4d:e7:fc:4b:0b:d3: e2:98:2e:f1:04:c5:cb:d3:33:86:02:59:eb:9f:79: 1d:e6:f0:2c:02:1f:41:6f:52:9d:7f:68:fd:34:77: 7a:ef:25:e9:07:73:e8:db:62:e1:8c:aa:ed:90:dc: 09:b0:b9:a9:87:7e:0f:e3:d4:b6:df:07:1d:b4:b0: e4:d1:e8:9a:53:c7:05:31:bb:6f:ca:de:03:ea:08: 8c:0b:5e:14:53:02:c9:46:70:fe:b1:63:03:2a:34: 05:b0:78:98:c3:70:5a:e9:68:a4:5d:18:58:69:bb: db:d2:29:5d:0e:10:9d:3f:e2:05:ad:4d:fd:48:23: 16:9c:7f:c0:b5:ea:92:9e:f5:ac:41:91:28:f6:37: b8:57:0e:37:69:0d:d7:f7:7c:5a:6c:41:85:4e:c7: ee:15:a8:ec:29:f6:f4:51:56:7e:f6:1e:b8:2c:eb: 8d:6e:ac:58:8e:b2:d4:b4:43:a4:26:c1:4f:47:77: b3:16:dc:1a:66:1f:2e:dc:62:75:20:10:ab:9e:59: bf:af:c4:b3:bd:00:fe:63:7e:6e:35:26:53:74:3c: 5d:3b:fc:d0:ab:3a:de:ad:10:ab:42:df:8d:44:94: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:35:E8:9C:47:B2:2F:6C:7D:4A:B0:05:4B:60:54:6E:EA:8A:C3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:10:10:05:eb:fc:0f:69:bf:8a:ad:3c:c7:47:db:d7:6a:46: a0:03:44:bd:b6:c3:b2:43:81:4b:f4:5c:07:aa:d6:cb:79:60: cb:e6:0e:d7:5a:07:f9:bc:6d:8e:7f:eb:68:12:e5:96:8e:1d: 00:e2:5d:b2:af:d1:d0:5d:2d:f7:37:ba:60:22:a3:47:4f:80: eb:3a:94:44:ba:ce:cf:cb:00:69:f0:90:1b:31:16:2f:61:48: d9:6a:ae:e1:48:da:b0:3a:0c:c9:e2:31:8f:aa:db:ac:18:19: 81:51:be:cd:e8:4f:c1:4e:34:44:ad:aa:e6:4c:aa:e5:77:50: 64:c5:e4:c7:c1:ce:ca:35:c3:5a:21:64:6a:5b:68:33:30:cf: 23:a6:6b:89:72:26:fc:a9:b7:f3:1d:87:00:a6:c8:51:bc:fe: 2c:98:05:0c:58:ae:2d:63:7d:66:99:7f:1b:c4:4e:1d:42:a8: be:ec:79:ec:fb:0b:73:34:12:05:a5:c7:7d:0f:d4:79:45:b1: 58:7e:a9:54:b3:ac:9d:72:73:f9:4e:e0:77:7d:a6:ad:7e:e1: b9:5f:b4:57:43:50:71:f3:d8:3b:c5:3e:7b:3a:8c:1f:c2:78: d7:7e:45:c9:31:ef:e5:07:34:ea:84:c0:3d:95:c6:34:ea:2e: 41:c5:38:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCswHUBW/a14QcwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmVjZTcxYTctZWY1Zi00MzI3LWI3MTItMGJkMmUyZTcxZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVh/g5kLwEUplGwrzdhBZX5cTGw0AntN5/xL C9PimC7xBMXL0zOGAlnrn3kd5vAsAh9Bb1Kdf2j9NHd67yXpB3Po22LhjKrtkNwJ sLmph34P49S23wcdtLDk0eiaU8cFMbtvyt4D6giMC14UUwLJRnD+sWMDKjQFsHiY w3Ba6WikXRhYabvb0ildDhCdP+IFrU39SCMWnH/AteqSnvWsQZEo9je4Vw43aQ3X 93xabEGFTsfuFajsKfb0UVZ+9h64LOuNbqxYjrLUtEOkJsFPR3ezFtwaZh8u3GJ1 IBCrnlm/r8SzvQD+Y35uNSZTdDxdO/zQqzrerRCrQt+NRJQZsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU16JxHsi9sfUqwBUtgVG7qisNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2I2NDJjNTYtMzBlOS0z OGUzLWE0NmItNzYzMDM2YWRhOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8QEAXr/A9pv4qtPMdH29dqRqADRL22w7JDgUv0XAeq1st5YMvmDtda B/m8bY5/62gS5ZaOHQDiXbKv0dBdLfc3umAio0dPgOs6lES6zs/LAGnwkBsxFi9h SNlqruFI2rA6DMniMY+q26wYGYFRvs3oT8FONEStquZMquV3UGTF5MfBzso1w1oh ZGpbaDMwzyOma4lyJvypt/MdhwCmyFG8/iyYBQxYri1jfWaZfxvETh1CqL7seez7 C3M0EgWlx30P1HlFsVh+qVSzrJ1yc/lO4Hd9pq1+4blftFdDUHHz2DvFPns6jB/C eNd+Rckx7+UHNOqEwD2VxjTqLkHFOMk= -----END CERTIFICATE-----Generated at Sun Sep 27 05:55:40 2026 by rpki-client