$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa File: 3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa (raw, json) Hash identifier: Xdb0KkKGGP4aJ/dBu5cLd2fqigmpQCjxbXmsP83QkOY= Subject key identifier: AB:3F:64:91:BB:6D:99:29:75:DA:2A:2C:14:60:D1:21:C4:3A:67:9F Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BA4C6567736E77B7AC326AE80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa Signing time: Sat 25 Oct 2025 22:59:54 +0000 ROA not before: Sat 25 Oct 2025 22:59:54 +0000 ROA not after: Fri 23 Jan 2026 23:59:54 +0000 asID: 9304 IP address blocks: 216.224.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:c6:56:77:36:e7:7b:7a:c3:26:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 25 22:59:54 2025 GMT Not After : Jan 23 23:59:54 2026 GMT Subject: CN=a3bcbf46-e915-4eef-94df-ddb328823ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:be:1a:d0:2f:77:31:b1:ee:7e:8c:b2:b5: b5:cd:c2:8d:79:6e:d4:6a:a3:b5:74:dc:06:cc:bc: b2:39:51:60:ed:05:2a:b3:c1:01:36:75:d5:5b:f3: c4:77:6b:4a:c4:39:50:4b:ee:cd:b2:0c:28:6f:5e: c4:d6:ab:1e:65:27:6a:b3:ba:d1:c5:41:8b:0d:01: b5:63:6c:c0:8b:7e:84:ad:35:c9:06:33:24:94:86: f4:ce:7d:a4:d8:fb:4a:05:bf:91:c2:42:79:ac:73: 22:76:88:1d:75:3b:2a:7c:6d:1e:b4:6c:c3:91:a1: ba:cb:fa:77:d7:cb:10:dc:ee:c5:21:6c:b7:b9:d6: fc:dc:53:9b:05:42:8b:cb:c2:4c:60:1a:37:28:aa: 8d:3f:da:99:58:a9:e1:77:d1:65:13:74:68:09:51: b4:77:5d:08:23:2c:81:6f:25:1b:e2:67:67:58:6e: 91:39:b0:71:e7:d9:c9:da:ab:ba:c6:d3:05:e0:b8: 1c:48:b2:7c:7f:ca:60:cd:5c:b8:3f:74:0f:1a:73: b6:38:d0:b1:e6:f3:e7:c1:2e:e2:fc:fc:6e:91:68: 58:6f:90:5f:2b:2b:6c:9c:01:bb:be:4f:61:4f:2c: 34:5f:c2:d4:68:fa:74:43:b6:30:23:4d:4b:5a:94: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3F:64:91:BB:6D:99:29:75:DA:2A:2C:14:60:D1:21:C4:3A:67:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3dc8ae1e-c720-3774-b614-4b7b661a0b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c6:1c:7b:71:7a:b1:49:96:cd:92:ae:30:eb:d8:32:a5:8c: a7:d2:ea:f6:24:3b:10:b2:7f:75:11:00:bb:08:cf:18:c8:0c: 72:fb:6d:fc:97:7a:23:69:d6:1b:06:1c:5e:b5:eb:38:6d:28: 31:fb:23:e7:64:f3:1e:05:96:39:13:73:3c:3c:d6:b7:69:9a: 50:c2:4a:ce:75:ad:da:c9:a6:dd:6b:08:7b:3f:d5:29:f9:fd: bc:d4:64:1f:9e:d4:3a:38:bf:37:e6:28:07:68:19:91:78:ae: a1:26:8a:52:f9:5b:de:15:fa:bf:cf:c4:19:59:11:eb:05:39: 64:b2:f0:b4:df:61:e3:91:cd:ca:4d:54:94:21:3a:41:7e:02: 3c:b0:ed:5d:e1:c2:9f:9c:6a:07:31:ae:4a:99:69:c9:22:03: e4:fa:fa:bd:eb:e3:2a:f3:9a:0b:d0:8b:03:6a:3c:21:43:ad: 04:0a:30:21:bc:0d:e7:b1:e8:2b:20:17:d9:01:5c:1f:4a:f8: c8:04:87:35:04:b6:dd:07:bd:d1:6c:80:f4:38:02:b2:c1:a5: c0:fb:b3:ee:c6:08:51:6d:76:65:ec:bd:ad:15:88:97:81:32: 26:77:bc:ca:01:ea:f7:95:fa:fd:5f:3f:82:88:80:91:b7:ba: 88:8a:f3:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEukxlZ3Nud7esMmroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAyNTIyNTk1NFoXDTI2MDEyMzIzNTk1NFowLzEtMCsGA1UEAxMk YTNiY2JmNDYtZTkxNS00ZWVmLTk0ZGYtZGRiMzI4ODIzZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgce+GtAvdzGx7n6MsrW1zcKNeW7UaqO1dNwG zLyyOVFg7QUqs8EBNnXVW/PEd2tKxDlQS+7Nsgwob17E1qseZSdqs7rRxUGLDQG1 Y2zAi36ErTXJBjMklIb0zn2k2PtKBb+RwkJ5rHMidogddTsqfG0etGzDkaG6y/p3 18sQ3O7FIWy3udb83FObBUKLy8JMYBo3KKqNP9qZWKnhd9FlE3RoCVG0d10IIyyB byUb4mdnWG6RObBx59nJ2qu6xtMF4LgcSLJ8f8pgzVy4P3QPGnO2ONCx5vPnwS7i /PxukWhYb5BfKytsnAG7vk9hTyw0X8LUaPp0Q7YwI01LWpTqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs/ZJG7bZkpddoqLBRg0SHEOmefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2RjOGFlMWUtYzcyMC0z Nzc0LWI2MTQtNGI3YjY2MWEwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXGHHtxerFJls2SrjDr2DKljKfS6vYkOxCyf3URALsIzxjIDHL7bfyX eiNp1hsGHF616zhtKDH7I+dk8x4FljkTczw81rdpmlDCSs51rdrJpt1rCHs/1Sn5 /bzUZB+e1Do4vzfmKAdoGZF4rqEmilL5W94V+r/PxBlZEesFOWSy8LTfYeORzcpN VJQhOkF+Ajyw7V3hwp+cagcxrkqZackiA+T6+r3r4yrzmgvQiwNqPCFDrQQKMCG8 Deex6CsgF9kBXB9K+MgEhzUEtt0HvdFsgPQ4ArLBpcD7s+7GCFFtdmXsva0ViJeB MiZ3vMoB6veV+v1fP4KIgJG3uoiK82E= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:19 2025 by rpki-client