$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa File: 3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa (raw, json) Hash identifier: KC0HtOu8vxdbRDNeNFUya6KWUVn71RJFsR8m9EYKxWU= Subject key identifier: 37:32:2B:FF:3D:4C:2D:99:90:98:23:73:E2:30:83:EA:B5:D7:BF:DE Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BA0D2417D22734652B9F3B900 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 11427 IP address blocks: 216.224.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:41:7d:22:73:46:52:b9:f3:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=91696bb5-d3be-4e7c-8f8a-408cc37de239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:bf:1b:43:75:44:d8:99:bf:84:b6:a1:6a: 6c:ae:52:f4:ab:00:7f:0a:c1:ae:3d:0b:b1:83:9f: 52:dd:f4:e4:2b:53:98:fa:18:c2:5e:0a:21:64:c0: e2:78:89:96:cd:9d:90:a1:c9:3e:52:b7:6a:fa:3e: 98:64:bc:0b:ad:f8:54:6b:dc:9c:a2:88:d4:5b:fe: b4:16:da:45:99:e5:d7:fe:f2:42:0c:26:fd:4e:de: 9b:a5:6b:0a:be:ad:69:87:31:33:4a:2b:aa:31:38: 3f:e5:bf:03:25:37:03:82:ee:30:39:cd:76:31:f1: f0:1a:29:cb:17:37:d8:aa:e7:ea:66:2a:06:16:95: 54:95:c8:a3:3b:93:3a:03:86:41:e9:e5:2d:cf:03: 32:d2:52:07:33:c4:72:03:e9:72:f5:9a:61:2d:82: 66:28:5e:bb:90:cf:57:1f:3f:46:43:08:c3:ee:a6: 86:07:52:fd:8c:c5:e1:d1:b4:42:5a:7e:67:6c:79: ea:ce:e9:21:f1:fe:6d:7e:7e:6f:b4:fc:0f:ce:04: 93:b9:78:c6:5f:91:16:5a:a2:fb:c8:b6:81:a8:12: 06:11:fc:77:18:81:fb:94:3a:22:02:46:68:74:c0: ef:b8:4e:e3:b5:a7:9f:e3:1a:31:86:63:ce:a2:d2: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:2B:FF:3D:4C:2D:99:90:98:23:73:E2:30:83:EA:B5:D7:BF:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fd7aca8-ab55-31fa-a3b8-a3809f5d08a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f2:b3:99:8a:d4:46:41:66:21:2c:47:d8:19:b4:d1:a1:75: 67:7b:8e:7e:8b:a2:6b:79:a2:a4:54:62:95:fe:b9:cc:3d:8d: 4c:22:37:52:79:21:ba:62:66:55:74:51:6b:58:aa:55:67:b5: 56:a7:46:9f:cc:d1:a9:8d:ae:57:c7:3b:e1:de:71:d3:a9:5d: 0f:24:f3:4f:5c:85:72:aa:59:ff:17:ec:9d:06:6e:f1:88:7e: d9:8a:6a:e5:03:46:21:79:4a:bb:93:ce:cf:d3:07:e6:e0:74: b2:c8:21:88:e6:9f:88:8c:cc:67:95:8f:a8:e0:35:84:dc:02: 7b:59:42:a8:b9:72:5e:19:8d:71:31:c9:ad:6b:7f:58:d5:51: ed:86:c6:d0:d8:b8:4e:c5:fb:c2:76:dd:6d:84:50:ea:03:50: 62:e4:3c:b8:b9:03:d0:be:f4:5f:08:90:4d:de:10:0b:ac:cc: 14:1c:28:3e:75:28:58:1a:14:a9:1a:26:7c:71:66:09:68:60: 2b:b7:23:8c:29:2c:f1:9c:52:a0:4a:4b:a1:9c:c9:82:01:f0: d8:aa:01:74:2a:37:cf:33:cb:e8:f6:c9:78:57:d7:0c:3b:80: 52:22:67:7d:ab:ff:ab:c5:37:7d:8f:32:f8:a0:fe:3e:06:17: 3a:e0:e5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kF9InNGUrnzuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTE2OTZiYjUtZDNiZS00ZTdjLThmOGEtNDA4Y2MzN2RlMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcu/G0N1RNiZv4S2oWpsrlL0qwB/CsGuPQux g59S3fTkK1OY+hjCXgohZMDieImWzZ2Qock+Urdq+j6YZLwLrfhUa9ycoojUW/60 FtpFmeXX/vJCDCb9Tt6bpWsKvq1phzEzSiuqMTg/5b8DJTcDgu4wOc12MfHwGinL FzfYqufqZioGFpVUlcijO5M6A4ZB6eUtzwMy0lIHM8RyA+ly9ZphLYJmKF67kM9X Hz9GQwjD7qaGB1L9jMXh0bRCWn5nbHnqzukh8f5tfn5vtPwPzgSTuXjGX5EWWqL7 yLaBqBIGEfx3GIH7lDoiAkZodMDvuE7jtaef4xoxhmPOotJxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcyK/89TC2ZkJgjc+Iwg+q117/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZkN2FjYTgtYWI1NS0z MWZhLWEzYjgtYTM4MDlmNWQwOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrys5mK1EZBZiEsR9gZtNGhdWd7jn6Lomt5oqRUYpX+ucw9jUwiN1J5 IbpiZlV0UWtYqlVntVanRp/M0amNrlfHO+HecdOpXQ8k809chXKqWf8X7J0GbvGI ftmKauUDRiF5SruTzs/TB+bgdLLIIYjmn4iMzGeVj6jgNYTcAntZQqi5cl4ZjXEx ya1rf1jVUe2GxtDYuE7F+8J23W2EUOoDUGLkPLi5A9C+9F8IkE3eEAuszBQcKD51 KFgaFKkaJnxxZgloYCu3I4wpLPGcUqBKS6GcyYIB8NiqAXQqN88zy+j2yXhX1ww7 gFIiZ32r/6vFN32PMvig/j4GFzrg5Z4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:33 2025 by rpki-client