$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/530a0a38-fd61-3504-8e9e-15bb4399b92f.roa File: 530a0a38-fd61-3504-8e9e-15bb4399b92f.roa (raw, json) Hash identifier: p4Un4M455iCy61PGG2kQCo4YRn22VKrm/mkC6jarsDs= Subject key identifier: 1C:EF:2B:D5:A0:73:18:F7:74:B5:9C:B9:C4:D8:57:DA:78:54:5F:8A Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F5337EA7AFE145970E68F5E60 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/530a0a38-fd61-3504-8e9e-15bb4399b92f.roa Signing time: Mon 28 Sep 2026 13:00:12 +0000 ROA not before: Mon 28 Sep 2026 13:00:12 +0000 ROA not after: Sun 27 Dec 2026 14:00:12 +0000 asID: 834 IP address blocks: 216.83.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:37:ea:7a:fe:14:59:70:e6:8f:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 28 13:00:12 2026 GMT Not After : Dec 27 14:00:12 2026 GMT Subject: CN=565647e7-d0f3-46e9-b2ed-c1c3a2f13129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:34:b9:78:0b:ef:19:bc:42:3e:37:58:7e: 74:d0:e1:d3:67:c7:d9:6a:ad:72:1e:9c:c6:06:5a: 02:af:f9:db:35:b3:54:23:a9:9b:df:ac:be:fc:20: 65:d4:8f:34:7a:7c:f4:c1:d7:d9:ba:c2:fc:7a:33: b2:32:a4:e5:31:03:d4:0c:e9:4e:a3:3a:bf:be:4f: 32:ad:27:bd:d7:fa:c3:e9:ba:b7:07:8b:ff:d0:d2: 4c:21:ae:34:07:cc:f4:4f:2f:8f:73:53:d1:55:11: 4f:d8:e3:5d:3e:7f:25:e1:27:7c:e2:3a:28:0f:9c: 7f:a8:e6:21:9f:51:6a:e7:b5:ff:22:41:ed:b4:21: 47:b9:12:53:df:bb:a0:3a:d5:92:c6:e3:13:49:83: a7:91:5d:72:ab:57:6b:97:aa:a7:88:29:3f:9e:d1: 43:c7:48:42:c0:da:fc:32:14:7f:5e:50:59:d5:85: 29:02:88:8f:bd:53:ab:e2:03:99:56:04:d3:5c:4c: fc:72:ad:01:04:cf:ff:bd:a1:80:22:b7:40:4c:17: 65:f0:c1:2a:45:e5:9a:f6:14:d7:9a:90:c6:90:93: 8b:50:2e:e2:2a:18:77:f6:eb:2d:26:76:45:de:4b: 31:b8:a5:e6:16:b1:9f:e1:61:d9:9a:c4:f2:6c:a6: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EF:2B:D5:A0:73:18:F7:74:B5:9C:B9:C4:D8:57:DA:78:54:5F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/530a0a38-fd61-3504-8e9e-15bb4399b92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f1:c3:2c:94:3d:56:5f:a6:a6:8d:14:31:f2:dc:88:6c:67: 40:e6:c9:2f:b5:b2:62:47:d1:61:9c:cf:e9:b7:d8:b3:f5:91: c2:aa:23:fb:2c:8b:14:02:35:f1:9d:88:76:7d:85:ec:b8:4f: 0e:4c:a2:c5:83:02:c6:0b:0a:f4:69:af:fc:a0:6b:27:d2:46: 34:1d:1e:25:56:c6:0f:e0:af:15:08:1a:60:8e:a7:7d:4a:6f: 5f:15:78:a7:da:48:ac:6f:cb:b9:a4:83:07:b4:f6:17:ef:1b: 28:51:c3:b4:f4:c4:5b:8e:2b:72:47:75:91:a0:3d:ba:dd:4f: 1f:57:26:2c:52:81:a0:40:46:9b:75:a4:b2:8d:a8:6d:b7:64: b0:57:bc:02:45:90:bd:d9:fe:4d:c4:ca:2a:29:38:f4:54:6b: 4b:21:e7:44:f1:b0:0e:89:b9:ae:9e:f4:77:69:76:a9:0a:15: d4:37:cf:7a:2f:06:f2:06:f3:0c:df:34:9e:1a:b7:eb:4a:77: 17:18:bf:25:30:f8:64:c7:5d:87:0c:35:69:ed:92:c0:a4:7a: 9b:5c:f7:91:ab:19:be:30:02:b4:74:b7:6b:2e:07:b6:76:fc: 82:b7:2a:31:df:e2:4f:ef:36:40:c6:00:3d:cb:62:d2:51:63: 5b:ff:b3:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TN+p6/hRZcOaPXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyODEzMDAxMloXDTI2MTIyNzE0MDAxMlowLzEtMCsGA1UEAxMk NTY1NjQ3ZTctZDBmMy00NmU5LWIyZWQtYzFjM2EyZjEzMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhU0uXgL7xm8Qj43WH500OHTZ8fZaq1yHpzG BloCr/nbNbNUI6mb36y+/CBl1I80enz0wdfZusL8ejOyMqTlMQPUDOlOozq/vk8y rSe91/rD6bq3B4v/0NJMIa40B8z0Ty+Pc1PRVRFP2ONdPn8l4Sd84jooD5x/qOYh n1Fq57X/IkHttCFHuRJT37ugOtWSxuMTSYOnkV1yq1drl6qniCk/ntFDx0hCwNr8 MhR/XlBZ1YUpAoiPvVOr4gOZVgTTXEz8cq0BBM//vaGAIrdATBdl8MEqReWa9hTX mpDGkJOLUC7iKhh39ustJnZF3ksxuKXmFrGf4WHZmsTybKZPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzvK9Wgcxj3dLWcucTYV9p4VF+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNTMwYTBhMzgtZmQ2MS0z NTA0LThlOWUtMTViYjQzOTliOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELxwyyUPVZfpqaNFDHy3IhsZ0DmyS+1smJH0WGcz+m32LP1kcKqI/ss ixQCNfGdiHZ9hey4Tw5MosWDAsYLCvRpr/ygayfSRjQdHiVWxg/grxUIGmCOp31K b18VeKfaSKxvy7mkgwe09hfvGyhRw7T0xFuOK3JHdZGgPbrdTx9XJixSgaBARpt1 pLKNqG23ZLBXvAJFkL3Z/k3EyiopOPRUa0sh50TxsA6Jua6e9HdpdqkKFdQ3z3ov BvIG8wzfNJ4at+tKdxcYvyUw+GTHXYcMNWntksCkeptc95GrGb4wArR0t2suB7Z2 /IK3KjHf4k/vNkDGAD3LYtJRY1v/s/k= -----END CERTIFICATE-----Generated at Thu Oct 8 13:33:40 2026 by rpki-client