$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa File: 2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa (raw, json) Hash identifier: yJqABlu5Dml3wLLIDXIGg4ZCyfKXIOg4JhwXE9AtXOc= Subject key identifier: 22:4D:46:A9:A7:B5:1A:14:DD:54:37:DE:4A:20:57:7B:F7:C9:AB:23 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584EBB11C85208D4F591B97EDD80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 54252 IP address blocks: 216.224.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c8:52:08:d4:f5:91:b9:7e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=062dae0b-9c75-4e70-b2e1-af91ed1a23eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:c5:8a:fb:80:98:9a:11:e7:14:c5:f3:04: 1a:c0:e7:3a:7e:e4:a1:1e:64:d5:7f:78:c1:c9:c6: c3:2d:d3:c4:a1:d2:37:97:5b:2c:66:09:80:0a:da: cf:70:49:c7:fb:b7:a4:03:d2:b3:e6:66:4c:ad:da: 00:53:02:bc:d0:ee:70:6a:8d:98:e9:fa:de:57:54: 22:61:45:50:43:f8:3a:13:82:49:38:93:80:1f:0d: 4a:ab:4e:4c:f5:41:ce:80:5a:0c:e6:d1:70:0c:be: 31:ab:85:c1:12:7b:8a:ee:26:40:41:b6:8c:6c:e4: 60:48:a0:31:d6:c3:7f:40:9e:ef:a2:25:b5:13:6a: 4c:5b:d0:2f:81:93:a3:6d:38:66:35:d7:e1:1e:f1: 90:ed:be:b4:7b:1e:2c:61:08:26:c8:50:ec:49:8c: c2:bc:9c:a6:8a:8b:9d:29:c7:ad:65:b9:45:e3:f2: 86:ac:24:7f:e3:32:99:a7:e9:fe:76:10:b5:16:2b: c3:93:62:ab:be:31:cc:1c:0b:a6:89:7f:1e:32:f9: 9e:2a:f9:c8:2f:65:78:c8:5d:cb:91:93:58:45:78: 4d:00:3c:02:87:f8:ef:6d:ea:8a:4f:8e:28:c4:df: cb:eb:6e:3d:4f:3e:77:d0:45:6d:e7:04:ab:e9:b2: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:46:A9:A7:B5:1A:14:DD:54:37:DE:4A:20:57:7B:F7:C9:AB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2b8ba2d0-3350-34c3-a4ae-ded3f06acde4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b7:0d:36:94:60:88:5e:75:d8:4d:f9:86:6d:34:58:09:61: 6a:23:2c:24:54:58:7c:8c:41:b7:32:c3:eb:80:08:dc:c5:00: e4:47:51:7c:ee:6c:79:7d:bb:65:da:71:a8:b7:da:e4:78:b9: 79:37:23:40:0f:fe:af:f8:ab:f1:90:4c:a5:92:65:3e:f2:d0: fc:47:f0:bb:31:5e:88:2d:cb:91:6e:a0:f0:56:49:63:ab:b3: 0b:4b:f2:c6:52:8f:ee:8b:f6:b8:84:65:60:e8:c2:63:45:b8: 4d:5e:90:e9:30:d3:72:4d:41:18:9c:bb:df:4b:f9:5d:64:5f: d7:1f:1a:fd:a5:bd:82:72:97:ed:39:82:ec:93:66:56:bd:cf: f3:38:d5:ac:53:57:69:ea:60:3b:14:bb:a4:19:a6:e0:ee:0a: a2:99:32:36:eb:61:c2:e5:7a:68:aa:e7:20:b1:f9:d0:ea:c3: 39:16:2a:3e:01:01:60:b2:79:62:f1:77:d8:d5:80:81:c3:3e: 10:70:63:50:cb:22:46:85:87:33:65:5d:56:de:f2:f1:51:2d: 05:bc:e3:26:03:82:74:54:d7:19:d8:ce:cc:26:ef:ef:dc:31: e6:70:e9:09:29:6c:6e:5e:19:f3:e5:3a:11:50:75:e5:b7:76: 5f:d0:8a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EchSCNT1kbl+3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk MDYyZGFlMGItOWM3NS00ZTcwLWIyZTEtYWY5MWVkMWEyM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsprFivuAmJoR5xTF8wQawOc6fuShHmTVf3jB ycbDLdPEodI3l1ssZgmACtrPcEnH+7ekA9Kz5mZMrdoAUwK80O5wao2Y6freV1Qi YUVQQ/g6E4JJOJOAHw1Kq05M9UHOgFoM5tFwDL4xq4XBEnuK7iZAQbaMbORgSKAx 1sN/QJ7voiW1E2pMW9AvgZOjbThmNdfhHvGQ7b60ex4sYQgmyFDsSYzCvJymioud KcetZblF4/KGrCR/4zKZp+n+dhC1FivDk2KrvjHMHAumiX8eMvmeKvnIL2V4yF3L kZNYRXhNADwCh/jvbeqKT44oxN/L6249Tz530EVt5wSr6bLwMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJNRqmntRoU3VQ33kogV3v3yasjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmI4YmEyZDAtMzM1MC0z NGMzLWE0YWUtZGVkM2YwNmFjZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS3DTaUYIheddhN+YZtNFgJYWojLCRUWHyMQbcyw+uACNzFAORHUXzu bHl9u2Xacai32uR4uXk3I0AP/q/4q/GQTKWSZT7y0PxH8LsxXogty5FuoPBWSWOr swtL8sZSj+6L9riEZWDowmNFuE1ekOkw03JNQRicu99L+V1kX9cfGv2lvYJyl+05 guyTZla9z/M41axTV2nqYDsUu6QZpuDuCqKZMjbrYcLlemiq5yCx+dDqwzkWKj4B AWCyeWLxd9jVgIHDPhBwY1DLIkaFhzNlXVbe8vFRLQW84yYDgnRU1xnYzswm7+/c MeZw6QkpbG5eGfPlOhFQdeW3dl/Qiko= -----END CERTIFICATE-----Generated at Thu Sep 24 13:53:54 2026 by rpki-client