$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/326d1e4c-8aeb-3dd4-9be2-ef3dd0dc4f80.roa File: 326d1e4c-8aeb-3dd4-9be2-ef3dd0dc4f80.roa (raw, json) Hash identifier: 0AXFGvM/S4/DL2aoP8gYcReVbdKE94ab7b2chqxpyCA= Subject key identifier: E3:CA:3E:9E:1A:83:1A:76:66:C0:5E:E9:77:94:03:AC:95:E3:FC:6D Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584CAE573263970E63FFEC7504F0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/326d1e4c-8aeb-3dd4-9be2-ef3dd0dc4f80.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 211373 IP address blocks: 216.224.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:32:63:97:0e:63:ff:ec:75:04:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c8802aa9-9e34-478a-b310-6900718afa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:89:0e:f1:38:98:88:29:08:ff:f3:41:a2: 70:12:48:56:1d:2a:c2:4c:4a:29:ee:0d:68:4b:4d: 44:44:08:b4:83:23:4a:c8:cf:66:86:90:44:d1:a7: 2a:78:61:a1:ab:15:fa:ae:2d:a3:cb:2b:14:aa:e8: b1:07:a1:80:b6:81:6c:b3:dc:c1:db:8f:eb:52:f0: 1e:6d:4c:7c:46:7a:c4:9a:30:a6:46:0e:2c:44:5b: b5:31:79:47:42:ac:6e:33:40:45:50:cd:82:07:ef: a6:b8:14:99:2d:4d:78:6d:a0:8a:a6:2b:ee:76:41: 43:90:a8:34:bd:7f:a4:95:79:05:2c:9f:d9:b5:17: 70:55:f0:1d:b9:ea:8d:85:49:8a:e3:6e:c8:aa:86: 19:fd:84:cb:de:b8:4e:6d:7e:78:83:51:28:c5:7a: 8f:1a:9d:f3:50:3d:14:b2:e1:c9:b7:28:b9:8e:6d: 81:5b:57:2f:a8:8f:b3:e3:c0:70:cf:6a:f4:1d:e6: 14:27:33:be:11:9b:b9:8b:a7:80:dd:61:7a:cb:ce: 34:41:7d:b7:f1:2d:27:fe:09:b6:98:f5:42:c9:77: 08:de:41:22:50:b4:e2:8c:5c:c7:d8:13:2f:0e:b8: 30:2b:19:da:4f:d4:8f:af:f6:5c:8c:08:75:dd:43: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CA:3E:9E:1A:83:1A:76:66:C0:5E:E9:77:94:03:AC:95:E3:FC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/326d1e4c-8aeb-3dd4-9be2-ef3dd0dc4f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:dd:8e:3e:00:39:4f:b3:07:d7:53:d8:d8:83:3b:18:3d:2c: 82:09:1b:fe:bd:2f:53:74:ca:0e:72:7d:d0:3a:06:25:ab:ef: 5f:9c:de:94:5f:93:d9:6b:9b:13:b6:94:e9:d9:58:12:1c:e0: d7:9d:df:e1:e1:10:61:6c:56:29:d2:6e:e1:8e:26:ef:60:c0: cc:0c:f3:69:c4:7e:ca:70:29:ad:0e:ae:70:a2:31:eb:ed:0e: 5f:b3:e7:7f:e7:91:56:db:81:4d:b3:d7:78:2a:79:43:8a:41: a3:1d:b2:83:37:aa:7e:31:aa:b4:5d:7d:ee:fa:4c:50:6c:83: 80:4a:43:97:ba:81:a4:47:57:bf:ec:b9:48:f8:c6:3d:87:22: 0b:56:da:c2:4a:ba:51:c3:e2:dd:19:9e:c2:d7:70:bc:35:b9: 34:8c:a4:a2:f5:2e:f8:58:58:07:a3:64:a4:d2:41:eb:63:30: 89:38:a9:0a:09:ab:37:3e:1e:45:06:90:fb:df:39:46:76:b7: e5:8f:2b:fb:ee:d3:1c:92:d3:82:2c:15:c3:d2:2a:ed:89:49: b2:4d:45:ef:f2:bc:e0:d6:bb:51:91:46:d8:e9:09:0c:9b:23: 9e:8d:4d:d5:6e:a0:a1:17:00:4c:9d:c4:af:67:2d:e2:c2:54: 51:28:c5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzJjlw5j/+x1BPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yzg4MDJhYTktOWUzNC00NzhhLWIzMTAtNjkwMDcxOGFmYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzeJDvE4mIgpCP/zQaJwEkhWHSrCTEop7g1o S01ERAi0gyNKyM9mhpBE0acqeGGhqxX6ri2jyysUquixB6GAtoFss9zB24/rUvAe bUx8RnrEmjCmRg4sRFu1MXlHQqxuM0BFUM2CB++muBSZLU14baCKpivudkFDkKg0 vX+klXkFLJ/ZtRdwVfAdueqNhUmK427IqoYZ/YTL3rhObX54g1EoxXqPGp3zUD0U suHJtyi5jm2BW1cvqI+z48Bwz2r0HeYUJzO+EZu5i6eA3WF6y840QX238S0n/gm2 mPVCyXcI3kEiULTijFzH2BMvDrgwKxnaT9SPr/ZcjAh13UPArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPKPp4agxp2ZsBe6XeUA6yV4/xtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzI2ZDFlNGMtOGFlYi0z ZGQ0LTliZTItZWYzZGQwZGM0ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/djj4AOU+zB9dT2NiDOxg9LIIJG/69L1N0yg5yfdA6BiWr71+c3pRf k9lrmxO2lOnZWBIc4Ned3+HhEGFsVinSbuGOJu9gwMwM82nEfspwKa0OrnCiMevt Dl+z53/nkVbbgU2z13gqeUOKQaMdsoM3qn4xqrRdfe76TFBsg4BKQ5e6gaRHV7/s uUj4xj2HIgtW2sJKulHD4t0ZnsLXcLw1uTSMpKL1LvhYWAejZKTSQetjMIk4qQoJ qzc+HkUGkPvfOUZ2t+WPK/vu0xyS04IsFcPSKu2JSbJNRe/yvODWu1GRRtjpCQyb I56NTdVuoKEXAEydxK9nLeLCVFEoxW8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:04 2026 by rpki-client