$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa File: 3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa (raw, json) Hash identifier: oZSwz0ktznhiv9xhP/xRp11GHi9HDh7a3YSxaq+PY5U= Subject key identifier: B7:12:71:AF:94:2C:2D:8C:6F:8D:17:76:AD:53:60:65:C5:D8:50:89 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584D6515221CD253002C0DA14B50 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 9304 IP address blocks: 216.224.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:22:1c:d2:53:00:2c:0d:a1:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=0484ebbc-7bf1-4a1e-852a-0843a0012060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:b1:21:4a:11:dd:ee:54:42:bc:bc:dc:98: 69:59:c2:c9:fb:f5:7f:61:2f:04:86:c2:f7:c6:f8: 20:4b:a9:f0:38:ff:62:ca:14:9d:39:96:ac:c4:e1: 28:0b:e6:4d:49:64:4b:20:45:75:07:5f:cf:b5:41: 6d:56:6f:d3:e4:09:42:b6:e8:98:6f:b0:2d:9d:e0: fe:5e:e3:c2:55:50:f0:08:77:b0:d4:e0:b1:b5:4f: de:57:4c:f8:2f:90:69:3b:36:e4:0f:73:82:51:2d: da:b3:16:33:14:7d:56:7e:70:39:eb:f8:fd:a8:33: 07:22:c9:ff:f7:a4:a1:7a:cf:45:fb:68:3d:2b:f1: bb:0a:24:a9:f9:3a:3d:30:29:b8:71:7e:42:a8:91: b6:9e:2e:37:61:31:2a:7f:97:be:91:38:ba:99:90: 78:c7:9e:82:7c:8e:08:d0:2c:a1:00:f1:19:0f:0c: 74:d1:be:df:09:82:ab:a9:4f:fd:9a:3f:80:1f:fe: d4:1a:29:8e:d1:5d:f8:78:d3:39:e1:bc:0a:dd:b9: dd:7d:4b:b5:48:40:16:2c:25:7d:63:d9:2f:0d:c1: ac:b6:39:e5:8c:1f:f5:8f:c9:94:96:b1:b2:6e:fd: 10:1d:c9:75:79:66:ac:b3:a3:fc:2f:13:ca:a0:e3: 09:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:12:71:AF:94:2C:2D:8C:6F:8D:17:76:AD:53:60:65:C5:D8:50:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:09:23:fc:fd:ad:99:00:b3:24:63:6d:78:5f:66:42:b7: 1c:d6:a1:8d:79:b2:04:dc:28:20:c8:7c:cb:80:2c:53:eb:c4: 13:d9:60:29:58:09:24:27:7b:25:23:87:8f:37:58:ad:cf:0c: 1d:61:e6:09:65:d1:8c:d2:da:a0:67:13:90:bd:6e:8b:d8:1a: 72:45:75:4f:25:d4:e0:01:92:40:06:c3:5d:01:08:38:18:ca: dd:cc:3d:ac:62:dc:69:90:31:54:bb:d0:e3:7c:ff:5b:f3:64: dc:56:aa:e3:eb:ea:26:c7:7f:16:8f:a5:91:ae:1e:91:ad:95: 63:36:30:91:67:2f:d1:43:53:f7:6c:5c:8a:12:ee:bb:3e:81: 20:fd:c0:fa:07:e8:0c:a2:92:33:92:b5:9f:aa:34:20:55:68: c2:5a:a4:60:89:e5:61:32:b2:cc:b8:15:8f:67:0d:4b:1c:55: 6f:f7:2c:44:7c:0f:f1:f3:4c:a8:ed:d4:bf:59:3c:35:bc:f2: 79:d9:a9:4a:5a:bd:9c:ef:1a:2e:85:a7:6f:d8:f2:75:4c:f5: 38:b9:11:d8:a3:2b:c9:fd:8a:3c:e9:0b:e4:f5:9c:06:0c:68: a5:63:b2:a0:b1:fe:69:76:00:ff:5d:3a:70:23:4d:53:fe:94: a0:74:97:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSIc0lMALA2hS1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MDQ4NGViYmMtN2JmMS00YTFlLTg1MmEtMDg0M2EwMDEyMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgimxIUoR3e5UQry83JhpWcLJ+/V/YS8EhsL3 xvggS6nwOP9iyhSdOZasxOEoC+ZNSWRLIEV1B1/PtUFtVm/T5AlCtuiYb7AtneD+ XuPCVVDwCHew1OCxtU/eV0z4L5BpOzbkD3OCUS3asxYzFH1WfnA56/j9qDMHIsn/ 96Shes9F+2g9K/G7CiSp+To9MCm4cX5CqJG2ni43YTEqf5e+kTi6mZB4x56CfI4I 0CyhAPEZDwx00b7fCYKrqU/9mj+AH/7UGimO0V34eNM54bwK3bndfUu1SEAWLCV9 Y9kvDcGstjnljB/1j8mUlrGybv0QHcl1eWass6P8LxPKoOMJFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcSca+ULC2Mb40Xdq1TYGXF2FCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2RjOGFlMWUtYzcyMC0z Nzc0LWI2MTQtNGI3YjY2MWEwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOrCSP8/a2ZALMkY214X2ZCtxzWoY15sgTcKCDIfMuALFPrxBPZYClY CSQneyUjh483WK3PDB1h5gll0YzS2qBnE5C9bovYGnJFdU8l1OABkkAGw10BCDgY yt3MPaxi3GmQMVS70ON8/1vzZNxWquPr6ibHfxaPpZGuHpGtlWM2MJFnL9FDU/ds XIoS7rs+gSD9wPoH6AyikjOStZ+qNCBVaMJapGCJ5WEyssy4FY9nDUscVW/3LER8 D/HzTKjt1L9ZPDW88nnZqUpavZzvGi6Fp2/Y8nVM9Ti5EdijK8n9ijzpC+T1nAYM aKVjsqCx/ml2AP9dOnAjTVP+lKB0lww= -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:35 2026 by rpki-client