$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json) Hash identifier: 3+yvRwdBQdzA4zIH+WqHBWvdEX514W0XJ0abk0aW8S4= Subject key identifier: C9:37:AB:B1:80:F4:53:55:3D:70:E2:E9:1E:6F:46:AB:F1:72:1B:24 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584E9BE51DAE80D9E048DF92E400 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:1d:ae:80:d9:e0:48:df:92:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=4a30360f-e299-4159-b23a-e9a5a3f2a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:db:52:cc:54:92:b5:4d:cc:95:75:e7:38: dc:41:64:b7:fa:e8:bd:c2:16:e3:48:24:28:9e:fc: 2e:27:1a:39:d4:d5:fe:b0:10:e8:58:eb:23:e9:4f: c8:0d:95:2f:2b:20:19:e6:f6:d2:b8:24:6e:4c:de: 87:d8:f9:cd:cc:c7:b8:fd:30:7f:c1:d3:e9:16:b9: 0d:00:99:04:c1:73:34:66:dd:84:01:5c:58:04:06: 09:7b:b0:7e:b0:25:74:d3:7c:77:24:05:09:00:95: 6c:95:c0:2b:88:5a:f0:3c:0c:4e:2f:a0:50:0f:da: 85:f8:a0:2e:39:f3:b5:01:5d:d3:ec:53:20:c9:0c: 84:a1:2f:db:e1:68:97:df:11:1b:1b:e0:88:4b:f7: 76:85:32:fd:c6:2f:99:64:65:10:c8:d7:10:89:52: c5:f4:ac:13:d4:b6:fa:c6:d5:49:77:75:60:bc:de: 66:7e:f0:ca:e8:f1:2e:5a:e7:7d:a2:8f:56:9d:85: cb:32:97:6b:56:eb:82:dd:1c:e2:0f:51:cc:02:92: ac:c2:46:03:79:08:b0:1b:5d:78:fa:85:c1:dd:53: 30:57:42:3e:20:04:c4:dc:63:0b:20:9d:20:86:65: 3b:a9:2f:78:de:88:c9:28:69:17:37:d4:aa:1b:1d: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:37:AB:B1:80:F4:53:55:3D:70:E2:E9:1E:6F:46:AB:F1:72:1B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f8:dd:16:cc:2f:b3:b9:62:5d:96:83:9e:7b:90:d4:a8:e8: 08:6b:30:62:4c:63:b2:64:69:ad:d5:a8:19:3e:0d:8f:0d:b7: 2d:78:67:90:88:8b:00:37:f7:64:1e:06:d3:34:6f:35:d5:9e: 0a:bf:49:6c:09:3c:d8:a3:37:a3:64:83:dd:98:63:55:a9:0b: 1d:fc:de:3d:31:32:f8:80:3f:79:18:65:b4:bf:86:0d:b4:b4: fa:d2:63:95:bd:e8:d9:eb:9c:c4:b5:0c:64:d4:97:7b:3d:b4: 23:fe:81:48:1c:d8:df:a0:18:c8:da:85:9c:c1:74:3b:38:b9: ff:a7:9e:eb:7e:b9:7a:1c:70:e3:9f:f6:0a:cf:6b:46:b9:e4: c5:e1:e1:e7:8c:97:ec:e0:82:9c:04:12:45:20:43:04:03:6d: 58:b5:b0:00:a6:03:10:52:49:1d:76:14:f3:61:df:c8:5c:00: 0d:d9:b9:ae:a6:18:a9:5a:b6:f6:54:9a:98:bb:5d:cd:92:6c: 6e:7d:f2:62:58:cc:d7:1d:0d:40:b4:39:fb:5c:65:ad:2c:22: ce:d3:d6:ba:e5:80:61:f8:34:82:b6:27:bb:51:73:d4:e4:87: 21:cf:a9:5d:a3:d4:7b:7e:a6:a6:19:8a:2d:be:66:8f:e0:a2: d8:cc:ca:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R2ugNngSN+S5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NGEzMDM2MGYtZTI5OS00MTU5LWIyM2EtZTlhNWEzZjJhNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEDbUsxUkrVNzJV15zjcQWS3+ui9whbjSCQo nvwuJxo51NX+sBDoWOsj6U/IDZUvKyAZ5vbSuCRuTN6H2PnNzMe4/TB/wdPpFrkN AJkEwXM0Zt2EAVxYBAYJe7B+sCV003x3JAUJAJVslcAriFrwPAxOL6BQD9qF+KAu OfO1AV3T7FMgyQyEoS/b4WiX3xEbG+CIS/d2hTL9xi+ZZGUQyNcQiVLF9KwT1Lb6 xtVJd3VgvN5mfvDK6PEuWud9oo9WnYXLMpdrVuuC3RziD1HMApKswkYDeQiwG114 +oXB3VMwV0I+IATE3GMLIJ0ghmU7qS943ojJKGkXN9SqGx07cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk3q7GA9FNVPXDi6R5vRqvxchskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZhNGQ2OTYtMjc2Zi0z NmFjLTkxMzEtMTVkZGRkOGJjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz43RbML7O5Yl2Wg557kNSo6AhrMGJMY7Jkaa3VqBk+DY8Nty14Z5CI iwA392QeBtM0bzXVngq/SWwJPNijN6Nkg92YY1WpCx383j0xMviAP3kYZbS/hg20 tPrSY5W96NnrnMS1DGTUl3s9tCP+gUgc2N+gGMjahZzBdDs4uf+nnut+uXoccOOf 9grPa0a55MXh4eeMl+zggpwEEkUgQwQDbVi1sACmAxBSSR12FPNh38hcAA3Zua6m GKlatvZUmpi7Xc2SbG598mJYzNcdDUC0OftcZa0sIs7T1rrlgGH4NIK2J7tRc9Tk hyHPqV2j1Ht+pqYZii2+Zo/gotjMykA= -----END CERTIFICATE-----Generated at Wed Jul 29 14:00:35 2026 by rpki-client