$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa File: fd534e9c-4605-365f-b678-e5faa4b9bc67.roa (raw, json) Hash identifier: 98/56DRYnRFy0dhr930naVh1NsABvSflDzMgFWZjNY8= Subject key identifier: D1:61:31:5C:76:55:CC:AC:E7:13:C9:76:B4:9F:AB:0C:1C:36:32:FC Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584B25FC411E740CE33958F0E900 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 401348 IP address blocks: 72.46.24.0/24 maxlen: 24 72.46.25.0/24 maxlen: 24 72.46.26.0/24 maxlen: 24 72.46.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:41:1e:74:0c:e3:39:58:f0:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=86a86ffd-dee3-48f0-866b-d07cd9c8cd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:88:58:51:18:c5:c8:46:60:a8:e2:a1:a9:82: 3a:fc:32:5e:49:6f:a5:50:86:36:d2:de:4c:7e:87: e9:50:96:cf:7b:fd:ca:2c:1c:19:00:36:a8:4a:74: 11:4c:0c:88:b7:b1:60:4c:11:97:ba:8f:e1:70:fa: e3:64:72:bd:34:9e:db:a9:35:13:f3:80:36:8d:bd: 9f:91:cb:da:c3:6a:b0:50:9f:f0:03:dd:20:29:56: 01:b3:a6:5e:f4:ab:6d:59:a5:7f:40:4e:80:ff:19: 8e:96:d0:bd:95:40:4d:fe:68:b2:65:7c:d5:5c:70: 9e:58:c3:c6:d9:46:d6:43:44:24:48:21:86:32:9a: 13:cf:80:e4:ab:26:14:91:0d:56:7b:79:ac:c3:21: 46:9d:07:4f:22:fb:b3:dc:67:e7:73:8c:3a:06:aa: 7c:92:b4:57:6a:35:a9:0c:b5:5e:41:79:85:8b:d9: 7b:d8:62:99:c3:66:89:f0:0b:e3:2f:06:c3:b0:e8: a8:40:1d:37:bd:5b:ae:66:53:21:4f:c1:49:a0:bd: 22:6c:7f:74:06:b3:1e:38:f1:32:54:ae:4f:8a:dc: f9:fc:6f:23:ca:2d:32:9e:0f:07:bd:62:07:09:05: f0:29:2b:44:ed:4f:b4:77:71:9b:4f:da:35:7c:24: 84:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:61:31:5C:76:55:CC:AC:E7:13:C9:76:B4:9F:AB:0C:1C:36:32:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/fd534e9c-4605-365f-b678-e5faa4b9bc67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 72.46.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0d:2f:c0:3f:14:4e:8b:2d:44:26:90:13:4b:7d:61:f0:27: 12:f2:3a:c1:0c:1a:ea:34:0c:e9:71:35:07:8a:8a:d3:9e:e2: 7e:4f:5f:b1:57:0f:8a:62:54:ee:4d:fa:88:64:37:94:55:a3: 1c:7b:93:03:fd:16:7b:0a:89:c6:24:c5:b8:b1:a9:28:7d:c6: 0e:ee:15:ca:78:ae:34:4f:95:20:7a:ec:cf:78:14:1f:99:24: c9:dc:62:a5:29:01:31:61:e2:cd:1a:91:e9:d6:9e:33:4f:0f: d4:5d:aa:58:29:b0:1d:7a:7e:7a:d7:09:a1:a8:87:c6:68:14: ac:60:3e:fb:a0:03:79:68:c0:49:ca:30:cd:77:c4:fc:6f:dc: bd:6f:a5:7c:1f:1f:6b:62:ed:45:31:cc:af:f6:cb:0c:94:00: 02:76:ea:8a:b0:92:4e:57:6d:c9:7e:8b:bc:21:a4:0f:2c:c8: 32:38:57:6d:69:12:41:c0:b3:dc:6c:44:50:98:17:9d:fb:7e: 0b:13:7b:0b:04:cc:8d:c8:0e:f3:18:ac:cb:83:f6:22:28:9a: 24:7a:ba:e5:29:d1:b2:35:94:8a:74:93:0a:38:cc:2f:0b:23: 3d:75:b3:40:02:84:dc:e2:b4:1f:ad:8c:eb:f9:b5:bc:37:69: 68:19:75:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EEedAzjOVjw6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ODZhODZmZmQtZGVlMy00OGYwLTg2NmItZDA3Y2Q5YzhjZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhohYURjFyEZgqOKhqYI6/DJeSW+lUIY20t5M fofpUJbPe/3KLBwZADaoSnQRTAyIt7FgTBGXuo/hcPrjZHK9NJ7bqTUT84A2jb2f kcvaw2qwUJ/wA90gKVYBs6Ze9KttWaV/QE6A/xmOltC9lUBN/miyZXzVXHCeWMPG 2UbWQ0QkSCGGMpoTz4DkqyYUkQ1We3mswyFGnQdPIvuz3Gfnc4w6Bqp8krRXajWp DLVeQXmFi9l72GKZw2aJ8AvjLwbDsOioQB03vVuuZlMhT8FJoL0ibH90BrMeOPEy VK5Pitz5/G8jyi0yng8HvWIHCQXwKStE7U+0d3GbT9o1fCSEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFhMVx2Vcys5xPJdrSfqwwcNjL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvZmQ1MzRlOWMtNDYwNS0z NjVmLWI2NzgtZTVmYWE0YjliYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSC4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUNL8A/FE6LLUQmkBNLfWHwJxLyOsEMGuo0DOlxNQeKitOe4n5PX7FX D4piVO5N+ohkN5RVoxx7kwP9FnsKicYkxbixqSh9xg7uFcp4rjRPlSB67M94FB+Z JMncYqUpATFh4s0akenWnjNPD9RdqlgpsB16fnrXCaGoh8ZoFKxgPvugA3lowEnK MM13xPxv3L1vpXwfH2ti7UUxzK/2ywyUAAJ26oqwkk5Xbcl+i7whpA8syDI4V21p EkHAs9xsRFCYF537fgsTewsEzI3IDvMYrMuD9iIomiR6uuUp0bI1lIp0kwo4zC8L Iz11s0AChNzitB+tjOv5tbw3aWgZdXY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:54 2025 by rpki-client