$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa File: 2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa (raw, json) Hash identifier: Jov0efKSyXk2hT6+ci06vefmVntSywoN6qZnREYW9f0= Subject key identifier: C2:2A:71:1B:86:CA:C0:8B:54:1F:62:B9:5C:48:3A:81:8E:D9:05:AD Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584B79B6C633763CFA3C80C80500 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa Signing time: Fri 10 Oct 2025 12:48:47 +0000 ROA not before: Fri 10 Oct 2025 12:48:47 +0000 ROA not after: Thu 08 Jan 2026 13:48:47 +0000 asID: 54252 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:b6:c6:33:76:3c:fa:3c:80:c8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 10 12:48:47 2025 GMT Not After : Jan 8 13:48:47 2026 GMT Subject: CN=f5c688a8-a14b-4370-a135-d52d6b5184ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:97:66:ca:0a:48:b5:d5:d0:80:a9:bb:95: 05:91:9f:46:78:31:ec:58:72:a9:5e:95:ea:92:92: b5:c2:88:1c:8a:98:7d:f8:dd:55:81:33:29:4b:eb: 02:45:83:f5:64:ea:bb:14:f1:3e:1c:70:5b:0b:47: 60:43:df:1e:63:ae:b8:01:fa:d1:9c:00:81:72:20: 5a:ee:49:d6:34:07:01:59:df:ea:d6:b4:58:d1:a7: cb:51:16:d2:92:82:e7:f1:83:02:48:03:8e:f8:71: 85:07:98:20:18:31:3a:5b:3f:37:6e:1b:02:c7:29: 52:f2:f1:a0:c9:18:eb:51:03:d9:b3:b3:29:da:26: 6e:8e:4a:33:9b:6f:80:e0:1c:c6:75:c6:34:16:34: 16:e8:da:2a:a1:76:28:b6:f4:68:a2:4a:d3:ec:8f: 95:30:c2:0d:a8:b2:af:0c:6c:4e:1c:16:b2:3c:23: 0c:f8:d4:2e:4d:31:f6:bb:f0:40:fc:50:41:47:8b: b1:72:d3:ec:8c:e4:3b:c5:f9:1c:42:9b:f3:77:ba: a7:2c:3b:00:44:2d:16:ac:38:cd:7d:88:67:19:fd: e5:61:f6:9b:57:56:26:9c:45:f8:f5:a6:c8:90:e5: d8:96:e3:76:a4:e5:e3:30:fd:20:f6:d6:2c:6d:b9: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:71:1B:86:CA:C0:8B:54:1F:62:B9:5C:48:3A:81:8E:D9:05:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4c:3a:a8:ff:f1:66:32:26:7f:fd:85:92:8b:d0:0e:1e:83: 66:01:79:e7:80:41:8b:cb:aa:16:e5:94:13:1f:99:14:cd:59: 86:33:2a:b2:2d:75:1a:f7:69:ca:36:af:d2:a3:e8:f5:0a:96: 81:cd:0e:36:ed:bb:6a:10:ce:2a:7f:de:7c:77:3b:7f:c9:fe: 63:68:14:9c:5a:36:c3:8d:99:a0:e4:46:89:0d:41:a7:f0:cb: bd:db:cb:e7:b4:94:73:d8:57:b3:46:5d:e5:1e:a8:7f:2a:1d: 86:77:b7:38:94:ce:1f:1e:b9:50:82:8d:8e:aa:38:23:5d:53: 10:44:56:92:74:91:a4:ed:e1:a8:5c:ee:eb:74:12:c7:f8:f4: 2a:e1:4f:98:bb:85:13:73:f2:d7:89:c1:14:ba:b2:c1:fc:b5: b7:49:f6:4f:70:bf:a7:3d:13:56:05:ac:b6:3b:28:12:17:d8: 7a:33:ae:27:00:c4:3e:6a:71:6a:ec:e7:3c:3b:81:0f:f1:9b: 92:ab:06:0f:cc:7f:ec:b3:63:bb:2c:10:3f:0a:0c:16:da:40: 0e:10:e1:32:84:9c:ad:8d:94:c4:16:3a:d3:12:9b:28:25:42: 92:fd:33:36:8a:29:6a:76:19:df:ff:99:9d:f8:52:87:e7:3b: 0f:ce:af:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5tsYzdjz6PIDIBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAxMDEyNDg0N1oXDTI2MDEwODEzNDg0N1owLzEtMCsGA1UEAxMk ZjVjNjg4YTgtYTE0Yi00MzcwLWExMzUtZDUyZDZiNTE4NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOeXZsoKSLXV0ICpu5UFkZ9GeDHsWHKpXpXq kpK1wogciph9+N1VgTMpS+sCRYP1ZOq7FPE+HHBbC0dgQ98eY664AfrRnACBciBa 7knWNAcBWd/q1rRY0afLURbSkoLn8YMCSAOO+HGFB5ggGDE6Wz83bhsCxylS8vGg yRjrUQPZs7Mp2iZujkozm2+A4BzGdcY0FjQW6NoqoXYotvRookrT7I+VMMINqLKv DGxOHBayPCMM+NQuTTH2u/BA/FBBR4uxctPsjOQ7xfkcQpvzd7qnLDsARC0WrDjN fYhnGf3lYfabV1YmnEX49abIkOXYluN2pOXjMP0g9tYsbbnnRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIqcRuGysCLVB9iuVxIOoGO2QWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmI4YmEyZDAtMzM1MC0z NGMzLWE0YWUtZGVkM2YwNmFjZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJMOqj/8WYyJn/9hZKL0A4eg2YBeeeAQYvLqhbllBMfmRTNWYYzKrIt dRr3aco2r9Kj6PUKloHNDjbtu2oQzip/3nx3O3/J/mNoFJxaNsONmaDkRokNQafw y73by+e0lHPYV7NGXeUeqH8qHYZ3tziUzh8euVCCjY6qOCNdUxBEVpJ0kaTt4ahc 7ut0Esf49CrhT5i7hRNz8teJwRS6ssH8tbdJ9k9wv6c9E1YFrLY7KBIX2HozricA xD5qcWrs5zw7gQ/xm5KrBg/Mf+yzY7ssED8KDBbaQA4Q4TKEnK2NlMQWOtMSmygl QpL9MzaKKWp2Gd//mZ34UofnOw/Or5E= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:16 2025 by rpki-client