$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa File: 71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa (raw, json) Hash identifier: k5/0FziDnijKOdnO7qb8fKulaSOXnmvXdBE/pdwT2eY= Subject key identifier: C8:32:7E:F2:C5:A4:65:BE:0F:10:7D:EC:61:A6:9D:5F:A8:4A:C8:0B Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584BA0D26F7B8AA31C4503223A80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20001 IP address blocks: 216.224.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6f:7b:8a:a3:1c:45:03:22:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c5166e35-d2f0-4892-9133-5e9997769209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:ce:a1:49:e8:38:18:ff:ff:03:e6:70:f4: f6:5f:99:b0:b2:39:d4:f5:ea:8d:4e:77:2f:2e:c4: d7:36:3f:9a:bf:3b:52:e9:f1:56:d9:1b:99:6f:dc: d7:bd:2f:f0:01:3e:67:db:a6:bc:89:e4:93:6e:e9: f3:9c:79:b7:f6:f5:18:b0:c0:a3:e8:61:c5:4a:49: 28:ff:b7:30:f9:d7:26:50:b6:33:da:b7:f1:42:49: cd:62:9d:a4:78:a4:9b:4f:72:5a:f4:51:47:f7:d0: 30:21:8c:50:09:63:0d:1e:fd:a3:78:d9:43:c1:74: 66:56:61:99:9a:9a:ff:e7:9e:6f:6b:3e:70:a1:1b: 53:4f:79:c4:93:e3:b5:92:da:d6:5a:c2:1b:67:9e: 61:11:c2:d5:0d:d2:0d:7e:87:30:63:ce:0a:27:60: a3:ae:4c:fb:bd:1c:78:e0:d9:d0:ae:ea:2a:73:3a: 84:39:0c:00:ba:84:61:cb:20:fd:5c:67:f9:20:7d: f1:ea:6e:44:96:78:3d:c7:b9:ec:21:73:8b:8f:d1: ba:e2:e2:03:57:11:b7:e2:51:33:9f:ba:13:54:af: 6c:ea:c0:50:ae:c5:c8:2c:ff:59:63:32:26:bd:22: b7:e3:04:33:9f:65:d0:ac:bd:f7:73:1b:54:ba:6a: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:32:7E:F2:C5:A4:65:BE:0F:10:7D:EC:61:A6:9D:5F:A8:4A:C8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/71ecd9ec-2b15-3e1e-907f-25aa017c573e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:39:8b:2a:0e:b0:15:38:33:1d:37:f1:ad:ba:a0:1c:9d:01: df:b9:8e:99:c9:2f:6a:44:bf:f0:98:22:ed:7d:6a:a5:35:04: cd:eb:f7:ce:44:8a:11:49:23:79:56:ff:a1:f5:85:fb:bb:aa: f4:d8:46:fe:1e:2e:21:b7:e2:76:f1:3f:0f:cc:7e:fa:19:21: ad:f3:51:73:17:78:56:a9:af:23:f4:a0:f2:47:bd:0f:46:d0: 3f:68:b1:82:29:4c:71:ef:51:3e:4d:91:ef:0a:0b:22:40:4a: 34:bd:d6:7a:39:68:b1:df:04:1a:e0:d3:f6:cd:dd:6d:cb:cb: 96:86:f1:ea:64:9f:73:06:35:17:62:3b:2c:87:c1:aa:d4:d5: 2f:dd:f4:be:06:c7:cb:3a:b6:64:03:ed:30:e1:13:93:bd:35: ff:07:6d:38:1b:c1:c8:54:3a:0a:44:cd:e8:c1:84:07:d4:e8: 43:64:e3:67:cc:8a:6a:be:7a:4c:bb:a6:8d:2b:58:b5:3a:34: d0:fe:06:4d:0b:69:76:30:37:d9:67:33:7a:cb:03:ed:9e:5d: 52:35:2c:58:7f:f8:3d:f9:8a:48:cb:59:e1:5a:71:e8:d5:df: 54:12:ab:f6:6f:89:36:bc:9e:ca:a3:e3:3c:94:e3:d7:20:81: fa:0e:0f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m97iqMcRQMiOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzUxNjZlMzUtZDJmMC00ODkyLTkxMzMtNWU5OTk3NzY5MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmrOoUnoOBj//wPmcPT2X5mwsjnU9eqNTncv LsTXNj+avztS6fFW2RuZb9zXvS/wAT5n26a8ieSTbunznHm39vUYsMCj6GHFSkko /7cw+dcmULYz2rfxQknNYp2keKSbT3Ja9FFH99AwIYxQCWMNHv2jeNlDwXRmVmGZ mpr/555vaz5woRtTT3nEk+O1ktrWWsIbZ55hEcLVDdINfocwY84KJ2Cjrkz7vRx4 4NnQruoqczqEOQwAuoRhyyD9XGf5IH3x6m5Elng9x7nsIXOLj9G64uIDVxG34lEz n7oTVK9s6sBQrsXILP9ZYzImvSK34wQzn2XQrL33cxtUumptBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgyfvLFpGW+DxB97GGmnV+oSsgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNzFlY2Q5ZWMtMmIxNS0z ZTFlLTkwN2YtMjVhYTAxN2M1NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB85iyoOsBU4Mx038a26oBydAd+5jpnJL2pEv/CYIu19aqU1BM3r985E ihFJI3lW/6H1hfu7qvTYRv4eLiG34nbxPw/MfvoZIa3zUXMXeFapryP0oPJHvQ9G 0D9osYIpTHHvUT5Nke8KCyJASjS91no5aLHfBBrg0/bN3W3Ly5aG8epkn3MGNRdi OyyHwarU1S/d9L4Gx8s6tmQD7TDhE5O9Nf8HbTgbwchUOgpEzejBhAfU6ENk42fM imq+eky7po0rWLU6NND+Bk0LaXYwN9lnM3rLA+2eXVI1LFh/+D35ikjLWeFacejV 31QSq/ZviTa8nsqj4zyU49cggfoOD5o= -----END CERTIFICATE-----Generated at Wed Nov 5 04:53:56 2025 by rpki-client