$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa File: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (raw, json) Hash identifier: oylTV8Utr/z8Q6jWO6j7PTPCgv7nYG/zi0h4FqE4nHI= Subject key identifier: D6:29:20:F5:85:F9:9F:15:E6:25:B4:5D:F3:1D:8A:46:D8:F8:38:0E Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389 Certificate serial: 010D0C9F4328584F49871D1E3710E23A8F0B6380 Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4540 IP address blocks: 142.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:1d:1e:37:10:e2:3a:8f:0b:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff1a08e-9692-475a-9b04-916530111389 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=934b34fa-2bd7-4539-899d-6415ede3bf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:21:4a:84:b5:10:af:9e:14:2c:ef:53:f4: 14:5d:79:82:38:ce:98:80:d5:28:35:aa:43:3d:3a: 9c:76:32:cc:00:e6:9a:1a:0c:4f:01:d8:26:cd:f8: 98:4c:87:91:65:85:97:10:53:ea:3a:9a:51:08:08: 61:6c:4b:8b:19:68:ad:a8:66:51:3c:91:b6:74:fb: 06:85:f9:69:95:18:32:b7:a4:b7:01:14:31:10:98: b8:da:bf:ce:5d:de:c6:b5:4a:9b:8a:3c:26:be:8b: 77:85:3f:83:32:ca:90:3e:24:6f:d4:ed:0e:d3:d2: b9:46:49:2c:20:e4:78:1b:9d:fe:29:7d:22:82:aa: 5c:56:3e:46:5c:6f:a0:76:2f:75:39:5a:cd:7b:42: d2:fe:3d:21:5f:22:56:79:49:92:d2:9c:28:bb:58: 80:38:43:71:bb:bc:2a:66:8f:6a:db:d1:81:4a:1c: 51:0f:62:4c:48:82:9e:0c:8e:4c:be:46:ad:a9:e5: cb:5a:78:19:54:dd:61:80:93:10:28:80:98:d6:d3: 7d:48:ee:ad:b5:66:d7:28:91:81:f8:7f:d1:8c:2d: 02:4c:a4:da:3c:7a:fc:46:e4:35:38:f5:2c:c4:18: 0a:54:6b:f6:7e:7a:b1:bc:2d:ad:aa:8a:51:94:c3: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:20:F5:85:F9:9F:15:E6:25:B4:5D:F3:1D:8A:46:D8:F8:38:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl X509v3 Authority Key Identifier: keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer sbgp-ipAddrBlock: critical IPv4: 142.249.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:aa:7e:bf:e6:c9:99:a8:e1:cb:52:72:4c:03:fc:03:2d:82: d2:f5:56:33:24:00:4b:81:b9:b5:7f:7a:cd:e0:02:19:18:17: ad:8f:1e:de:4f:7a:04:e9:98:a2:4f:67:fe:8a:aa:f3:c4:87: 33:de:4c:b2:a1:b9:ee:ca:03:a3:a2:1c:7c:f1:22:1c:11:b1: 0f:7b:1e:bc:44:d9:38:7f:7c:e2:62:b3:05:72:ce:e6:48:09: 27:20:63:51:7d:4a:6d:50:78:2d:8f:a9:20:24:5b:db:e0:7c: f5:05:13:a9:24:4b:8d:a4:f9:ea:d5:76:a1:9f:5b:ba:cc:38: 9e:dd:ea:f8:f0:ef:ea:ac:79:24:82:55:2f:e9:7f:50:66:6a: d2:33:91:b1:ec:d2:6c:bf:57:bf:c7:6a:b7:ed:0f:df:d6:34: d9:55:b6:9d:48:d2:bd:fe:a9:6a:b5:c0:e3:b6:d9:7a:3a:e1: 9f:e7:a0:48:09:91:d5:7e:7d:ed:13:88:5e:59:fd:02:f4:5a: 54:bd:e3:f7:83:74:52:9b:88:be:0c:22:dc:28:2d:ba:fc:2c: 72:62:18:a8:4f:b3:04:44:91:20:ba:82:03:3d:24:32:79:bf: 65:b0:17:9a:3c:1e:55:5e:81:dd:81:82:a6:03:4e:83:67:fb: 98:b5:e2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhx0eNxDiOo8LY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTEx Mzg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTM0YjM0ZmEtMmJkNy00NTM5LTg5OWQtNjQxNWVkZTNiZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlREhSoS1EK+eFCzvU/QUXXmCOM6YgNUoNapD PTqcdjLMAOaaGgxPAdgmzfiYTIeRZYWXEFPqOppRCAhhbEuLGWitqGZRPJG2dPsG hflplRgyt6S3ARQxEJi42r/OXd7GtUqbijwmvot3hT+DMsqQPiRv1O0O09K5Rkks IOR4G53+KX0igqpcVj5GXG+gdi91OVrNe0LS/j0hXyJWeUmS0pwou1iAOENxu7wq Zo9q29GBShxRD2JMSIKeDI5MvkatqeXLWngZVN1hgJMQKICY1tN9SO6ttWbXKJGB +H/RjC0CTKTaPHr8RuQ1OPUsxBgKVGv2fnqxvC2tqopRlMMJ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYpIPWF+Z8V5iW0XfMdikbY+DgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYx YTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvZjcxZGRjZDEtYmFkMS0z NTQ0LTk2ZWMtMWE1NzJiZWVlMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2ZmMWEwOGUtOTY5Mi00NzVhLTli MDQtOTE2NTMwMTExMzg5L2NmZjFhMDhlLTk2OTItNDc1YS05YjA0LTkxNjUzMDEx MTM4OS5jcmwwHwYDVR0jBBgwFoAU/7vAmoVMMQwbnO/bc4IcyxC59LEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1 MzAxMTEzODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuqfr/myZmo4ctSckwD/AMtgtL1VjMkAEuBubV/es3gAhkYF62PHt5P egTpmKJPZ/6KqvPEhzPeTLKhue7KA6OiHHzxIhwRsQ97HrxE2Th/fOJiswVyzuZI CScgY1F9Sm1QeC2PqSAkW9vgfPUFE6kkS42k+erVdqGfW7rMOJ7d6vjw7+qseSSC VS/pf1BmatIzkbHs0my/V7/HarftD9/WNNlVtp1I0r3+qWq1wOO22Xo64Z/noEgJ kdV+fe0TiF5Z/QL0WlS94/eDdFKbiL4MItwoLbr8LHJiGKhPswREkSC6ggM9JDJ5 v2WwF5o8HlVegd2BgqYDToNn+5i14kg= -----END CERTIFICATE-----Generated at Tue Sep 29 00:06:06 2026 by rpki-client