$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f42bce03-7332-3074-a6d6-2ca21646e072.roa File: f42bce03-7332-3074-a6d6-2ca21646e072.roa (raw, json) Hash identifier: pcb7TEs27LjCxikeKwSQ21X575KXDz5TwTEwfa8lzsM= Subject key identifier: 8B:3F:8B:00:16:B4:64:E5:24:37:2E:BE:E2:27:2D:D6:A4:55:40:3C Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584EFE1215F5BBD15A37C0E28180 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f42bce03-7332-3074-a6d6-2ca21646e072.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 33203 IP address blocks: 216.83.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:15:f5:bb:d1:5a:37:c0:e2:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=21ade2a7-e550-4bb5-bac6-641e6d03d83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:a0:60:b9:c9:0e:46:cd:a2:c3:ad:c1:a2: 20:38:27:f2:39:3f:12:cf:06:76:e5:74:77:83:0d: c3:13:bf:bd:84:df:6b:87:a8:d4:16:e8:26:05:b5: 23:b7:d5:a6:09:ef:66:cb:d4:78:a7:24:c0:8d:6a: 7a:40:f3:8c:56:c1:20:e4:76:d2:38:3f:7b:e6:6c: 02:07:90:9f:ea:c2:10:bb:e3:f1:b9:98:b5:44:79: 76:04:4f:4a:64:17:47:f5:29:c3:ad:94:3c:2c:1c: 70:e0:d9:ff:7b:a9:07:e2:e1:44:e4:24:f5:17:e0: 96:39:69:a7:8b:ee:1b:34:36:6d:20:8b:98:66:0d: 08:b4:29:75:af:ad:d8:cc:aa:69:28:e7:33:09:78: eb:31:c7:67:87:81:be:ed:08:30:4a:2f:8a:42:77: 98:e0:38:8a:37:d2:5e:2a:96:07:7b:ca:66:bd:4c: 8d:4d:a3:84:14:fb:13:a9:a6:2b:8b:e2:94:fd:1a: 34:91:9b:a2:03:dd:21:b1:51:6f:78:52:d1:c6:1f: 0c:11:ef:b0:bb:21:11:c7:8e:ed:1d:89:99:af:c3: 2d:60:c6:8a:c2:5e:92:5c:38:e6:8a:9c:fd:4c:00: fd:72:d8:94:71:65:84:0b:7a:ca:a9:cd:80:0b:54: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:8B:00:16:B4:64:E5:24:37:2E:BE:E2:27:2D:D6:A4:55:40:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/f42bce03-7332-3074-a6d6-2ca21646e072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:52:52:14:ce:f3:9b:b5:3c:9a:35:78:80:76:7a:36:b3:75: 35:49:8e:38:e7:ec:81:36:00:36:aa:ca:06:c4:06:9f:ad:e9: f8:81:ad:1b:ec:c3:6b:4d:ef:e2:9a:5f:fc:81:b2:37:92:be: cf:59:b9:76:d5:9e:5d:66:f2:2a:39:32:32:d5:e6:f6:99:63: 4f:91:55:f4:32:40:92:dd:b9:d6:cc:af:f6:c9:5c:e1:5f:de: 26:31:06:0f:8c:79:53:f0:16:97:26:9f:97:03:90:f2:5d:59: 24:96:2e:ea:50:29:b6:f9:da:e5:f3:ad:f7:45:be:da:43:b2: 7b:01:88:52:30:c3:0f:d7:46:cd:8a:9f:ef:55:5b:5f:a0:2d: 6c:cf:43:7c:56:f0:77:28:6e:f7:b5:e4:b0:a8:58:92:4a:ae: a6:f3:b7:d9:1d:56:95:41:25:8f:2f:19:64:68:73:50:e3:a0: a6:9b:e4:84:6d:6b:2c:8f:76:d8:9f:54:5c:d1:0d:53:15:63: d7:97:d9:d6:13:b7:48:48:86:79:68:19:72:c7:ab:07:d1:12: 79:32:ea:a6:d8:b5:d1:76:89:ae:d2:54:47:10:56:8f:1b:c1: 54:06:7f:12:fe:64:71:01:d2:28:d4:c7:83:c1:7a:bd:75:ac: 42:96:b2:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhX1u9FaN8DigYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjFhZGUyYTctZTU1MC00YmI1LWJhYzYtNjQxZTZkMDNkODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ugYLnJDkbNosOtwaIgOCfyOT8SzwZ25XR3 gw3DE7+9hN9rh6jUFugmBbUjt9WmCe9my9R4pyTAjWp6QPOMVsEg5HbSOD975mwC B5Cf6sIQu+PxuZi1RHl2BE9KZBdH9SnDrZQ8LBxw4Nn/e6kH4uFE5CT1F+CWOWmn i+4bNDZtIIuYZg0ItCl1r63YzKppKOczCXjrMcdnh4G+7QgwSi+KQneY4DiKN9Je KpYHe8pmvUyNTaOEFPsTqaYri+KU/Ro0kZuiA90hsVFveFLRxh8MEe+wuyERx47t HYmZr8MtYMaKwl6SXDjmipz9TAD9ctiUcWWEC3rKqc2AC1TuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/iwAWtGTlJDcuvuInLdakVUA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZjQyYmNlMDMtNzMzMi0z MDc0LWE2ZDYtMmNhMjE2NDZlMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNSUhTO85u1PJo1eIB2ejazdTVJjjjn7IE2ADaqygbEBp+t6fiBrRvs w2tN7+KaX/yBsjeSvs9ZuXbVnl1m8io5MjLV5vaZY0+RVfQyQJLdudbMr/bJXOFf 3iYxBg+MeVPwFpcmn5cDkPJdWSSWLupQKbb52uXzrfdFvtpDsnsBiFIwww/XRs2K n+9VW1+gLWzPQ3xW8Hcobve15LCoWJJKrqbzt9kdVpVBJY8vGWRoc1DjoKab5IRt ayyPdtifVFzRDVMVY9eX2dYTt0hIhnloGXLHqwfREnky6qbYtdF2ia7SVEcQVo8b wVQGfxL+ZHEB0ijUx4PBer11rEKWshU= -----END CERTIFICATE-----Generated at Sat Sep 26 03:55:34 2026 by rpki-client