$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1ecad41a-95fd-3134-be15-6244bf5c8460.roa File: 1ecad41a-95fd-3134-be15-6244bf5c8460.roa (raw, json) Hash identifier: 8o7YEOCaU7nSKFQjxZaLzH2Qfpge35I0bkbrNz9Ltcw= Subject key identifier: 47:B9:5F:D8:E1:9D:BD:B8:91:D9:2A:D4:98:37:15:DE:2F:12:7B:83 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BB5B48020E810D1E283417B40 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1ecad41a-95fd-3134-be15-6244bf5c8460.roa Signing time: Sat 01 Nov 2025 00:32:42 +0000 ROA not before: Sat 01 Nov 2025 00:32:42 +0000 ROA not after: Fri 30 Jan 2026 01:32:42 +0000 asID: 834 IP address blocks: 216.83.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:b4:80:20:e8:10:d1:e2:83:41:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Nov 1 00:32:42 2025 GMT Not After : Jan 30 01:32:42 2026 GMT Subject: CN=e6c2d166-6915-4f87-9b61-fe2203a49890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:e4:cd:88:a4:e4:af:a7:3a:6a:eb:25:2e: ae:b0:18:ca:0d:f6:fa:47:ff:5f:fc:e1:38:5d:dd: 2f:75:5c:c1:ed:8a:e2:7b:9e:69:e7:e0:26:46:81: 66:d6:c2:72:27:c9:47:2f:0c:7e:c3:3a:da:30:e9: 4a:5b:ca:3f:d7:48:b5:4e:ae:34:e3:c3:07:05:47: f3:fa:3d:d4:79:24:8f:86:1d:fd:dd:29:55:2a:77: 26:43:65:58:ce:21:86:f3:61:76:e7:15:91:c8:f4: e5:b7:c5:fc:b0:be:ea:de:d7:8f:2e:d0:de:80:4e: 90:16:eb:0b:4a:8f:14:a1:3a:7f:c2:df:67:cc:82: cc:b8:41:c2:e4:63:32:15:1c:e4:1e:70:39:d7:5d: 6d:b7:6c:67:88:da:17:93:5a:a7:d8:98:0d:b3:99: bb:16:ac:a9:44:66:cd:c9:cc:ca:dc:d8:31:b1:c3: 85:46:6b:44:ad:d6:44:b4:25:62:af:07:24:59:fc: 00:ee:35:db:bd:b1:7e:ed:29:4c:23:4c:6a:bc:98: 76:d3:da:0f:31:a9:cf:3b:ee:29:fa:14:4b:a2:6f: be:17:73:26:8e:f8:f5:4b:87:ee:e3:79:12:26:fa: b4:16:9a:78:71:5e:84:b8:06:68:7f:cb:fc:ae:e4: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:5F:D8:E1:9D:BD:B8:91:D9:2A:D4:98:37:15:DE:2F:12:7B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1ecad41a-95fd-3134-be15-6244bf5c8460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f0:9d:c6:8a:0a:77:b3:f1:a6:ec:2c:c9:c7:ae:ba:c4:8b: c1:00:02:15:b9:95:90:20:6c:e0:f2:b8:f8:28:4f:e7:f4:82: 3e:bc:dc:0b:5a:89:26:e9:cb:d9:9a:e7:70:39:31:5f:f9:82: ec:1c:89:0a:04:28:58:75:e0:a8:ca:0d:d4:4c:4b:1c:bf:31: 5a:dc:b5:2e:a5:5f:ab:95:ca:38:5e:10:08:ee:89:b7:44:97: 1a:01:13:c2:13:f3:eb:31:0f:46:6b:ac:82:71:de:d3:2d:e0: 41:e5:52:57:d2:b0:64:ae:bf:c5:91:70:d2:41:03:9d:33:b6: 9e:19:60:fa:02:3e:45:1f:db:28:e8:c4:0d:fb:a6:5f:bd:e0: fa:9b:8e:0e:f4:5d:1c:d3:c2:e4:59:44:2b:69:cd:23:36:7b: 71:46:e0:0d:6b:5b:28:db:ca:92:4e:6f:3e:16:61:ff:20:a6: 3e:4d:86:af:31:ac:16:47:6a:6a:99:64:68:cb:98:3a:e5:9f: fd:29:d6:d5:20:91:2f:01:df:96:90:41:71:1d:df:d4:b8:7f: 67:17:51:ac:b3:a5:69:d5:4b:f7:90:bf:4c:ee:28:fc:f2:b0: 7e:dc:31:e6:cc:89:3c:5c:59:4e:7d:71:37:26:1f:c7:38:ac: c7:73:69:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1tIAg6BDR4oNBe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTEwMTAwMzI0MloXDTI2MDEzMDAxMzI0MlowLzEtMCsGA1UEAxMk ZTZjMmQxNjYtNjkxNS00Zjg3LTliNjEtZmUyMjAzYTQ5ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx7kzYik5K+nOmrrJS6usBjKDfb6R/9f/OE4 Xd0vdVzB7Yrie55p5+AmRoFm1sJyJ8lHLwx+wzraMOlKW8o/10i1Tq4048MHBUfz +j3UeSSPhh393SlVKncmQ2VYziGG82F25xWRyPTlt8X8sL7q3tePLtDegE6QFusL So8UoTp/wt9nzILMuEHC5GMyFRzkHnA5111tt2xniNoXk1qn2JgNs5m7FqypRGbN yczK3NgxscOFRmtErdZEtCVirwckWfwA7jXbvbF+7SlMI0xqvJh209oPManPO+4p +hRLom++F3Mmjvj1S4fu43kSJvq0Fpp4cV6EuAZof8v8ruStMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe5X9jhnb24kdkq1Jg3Fd4vEnuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMWVjYWQ0MWEtOTVmZC0z MTM0LWJlMTUtNjI0NGJmNWM4NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2FMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXwncaKCnez8absLMnHrrrEi8EAAhW5lZAgbODyuPgoT+f0gj683Ata iSbpy9ma53A5MV/5guwciQoEKFh14KjKDdRMSxy/MVrctS6lX6uVyjheEAjuibdE lxoBE8IT8+sxD0ZrrIJx3tMt4EHlUlfSsGSuv8WRcNJBA50ztp4ZYPoCPkUf2yjo xA37pl+94Pqbjg70XRzTwuRZRCtpzSM2e3FG4A1rWyjbypJObz4WYf8gpj5Nhq8x rBZHamqZZGjLmDrln/0p1tUgkS8B35aQQXEd39S4f2cXUayzpWnVS/eQv0zuKPzy sH7cMebMiTxcWU59cTcmH8c4rMdzacg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:24:46 2025 by rpki-client