$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9a5ad79f-1053-375d-9905-45762cdf981f.roa File: 9a5ad79f-1053-375d-9905-45762cdf981f.roa (raw, json) Hash identifier: H2yVHw1vWV2sKZMCXzuYrW1Pns2Te5JNh1KhdYOrBzU= Subject key identifier: 8E:01:A6:29:6E:F6:98:CF:FE:AE:B6:F6:82:33:B2:63:E0:FD:9F:D8 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584AAA07308151670CE68D527980 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9a5ad79f-1053-375d-9905-45762cdf981f.roa Signing time: Mon 28 Jul 2025 03:22:40 +0000 ROA not before: Mon 28 Jul 2025 03:22:40 +0000 ROA not after: Sun 26 Oct 2025 03:22:40 +0000 asID: 51082 IP address blocks: 216.224.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:aa:07:30:81:51:67:0c:e6:8d:52:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 28 03:22:40 2025 GMT Not After : Oct 26 03:22:40 2025 GMT Subject: CN=06fecf5d-e43b-4bc2-a0e5-c84423e555b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:e6:92:1d:9f:3d:24:eb:b6:e2:ca:59:75: df:a2:1d:0e:bf:a6:7b:60:8a:e0:c3:0d:58:28:ec: e1:f1:3d:0a:d6:cd:df:ed:0e:93:22:82:02:7d:74: 3b:20:da:3e:23:24:9d:62:a1:14:0b:7b:65:8d:77: 54:3b:c2:88:57:93:37:c6:f9:0c:ad:95:f2:04:2a: e8:f6:74:0c:20:57:9a:fb:67:c8:8a:1c:59:33:7b: 7f:f5:6b:84:63:69:3c:1c:d0:24:fc:67:78:cc:d8: db:9b:7e:7c:14:f6:99:46:1b:30:1b:46:35:5c:52: 07:6c:b9:e4:71:59:27:3e:0b:fd:55:14:d1:e0:a1: c2:04:e3:98:be:19:42:eb:d0:96:fe:33:1d:a7:4c: 36:a4:d6:51:80:ff:43:39:ee:68:d1:93:9e:5c:50: 67:73:e4:f7:b3:52:d1:88:99:60:98:90:66:ea:c9: 8e:2b:fe:4a:0f:d5:5b:af:18:41:e4:89:9e:21:5a: 1c:70:27:78:08:8c:b5:83:65:c7:4b:45:6e:1a:8f: 19:f1:fc:a2:cf:da:01:4c:f1:78:9a:65:bd:eb:c6: 0a:e5:17:4e:a1:ac:06:44:cc:20:d9:44:c3:b5:12: 84:01:5f:d0:6f:5e:d2:9e:33:38:a6:7d:b6:95:53: f9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:01:A6:29:6E:F6:98:CF:FE:AE:B6:F6:82:33:B2:63:E0:FD:9F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9a5ad79f-1053-375d-9905-45762cdf981f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6e:15:30:80:e7:75:ad:b2:ec:dc:a4:9e:9c:25:cc:16:9e: 91:6a:9d:43:ed:45:e0:02:58:47:39:6d:4a:30:72:31:36:c9: 20:17:db:50:a0:75:3a:80:d5:4a:0a:e6:2f:81:32:cc:50:f1: f5:fb:45:68:91:e0:e0:33:92:6e:57:43:50:41:2c:34:22:83: d8:a9:53:e0:bc:22:3b:74:16:d2:cf:59:33:b8:a6:ea:5a:4c: 49:8e:c8:cf:b4:c3:02:43:2d:fb:eb:68:11:5d:79:da:8d:c9: 72:2d:2c:6f:12:b3:14:20:f0:30:bf:f1:08:e2:fa:94:e8:98: e1:d3:00:39:5c:a3:d7:58:2e:8f:8f:38:6b:ab:af:cb:2d:d1: 3c:d9:ae:e1:a8:eb:a7:d0:3c:22:fb:d3:d0:66:5e:42:c0:67: 98:63:cc:04:19:ec:e7:7a:77:0e:80:29:78:e5:8b:fd:68:8e: 2c:da:2c:e1:b1:b9:55:bb:b0:e3:9d:9c:58:de:a5:e6:f7:fb: 05:bc:ff:bc:6a:47:01:bc:2f:77:25:fe:ee:be:90:32:9f:70: f6:0b:6d:fd:f5:ad:12:c7:ad:81:02:d8:19:29:56:cd:89:34: 5b:93:d8:27:5d:91:f1:6c:57:d3:38:2a:eb:bb:40:3a:92:a1: c7:d1:a6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqqBzCBUWcM5o1SeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcyODAzMjI0MFoXDTI1MTAyNjAzMjI0MFowLzEtMCsGA1UEAxMk MDZmZWNmNWQtZTQzYi00YmMyLWEwZTUtYzg0NDIzZTU1NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Hmkh2fPSTrtuLKWXXfoh0Ov6Z7YIrgww1Y KOzh8T0K1s3f7Q6TIoICfXQ7INo+IySdYqEUC3tljXdUO8KIV5M3xvkMrZXyBCro 9nQMIFea+2fIihxZM3t/9WuEY2k8HNAk/Gd4zNjbm358FPaZRhswG0Y1XFIHbLnk cVknPgv9VRTR4KHCBOOYvhlC69CW/jMdp0w2pNZRgP9DOe5o0ZOeXFBnc+T3s1LR iJlgmJBm6smOK/5KD9VbrxhB5ImeIVoccCd4CIy1g2XHS0VuGo8Z8fyiz9oBTPF4 mmW968YK5RdOoawGRMwg2UTDtRKEAV/Qb17SnjM4pn22lVP5MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4Bpilu9pjP/q629oIzsmPg/Z/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWE1YWQ3OWYtMTA1My0z NzVkLTk5MDUtNDU3NjJjZGY5ODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1uFTCA53WtsuzcpJ6cJcwWnpFqnUPtReACWEc5bUowcjE2ySAX21Cg dTqA1UoK5i+BMsxQ8fX7RWiR4OAzkm5XQ1BBLDQig9ipU+C8Ijt0FtLPWTO4pupa TEmOyM+0wwJDLfvraBFdedqNyXItLG8SsxQg8DC/8Qji+pTomOHTADlco9dYLo+P OGurr8st0TzZruGo66fQPCL709BmXkLAZ5hjzAQZ7Od6dw6AKXjli/1ojizaLOGx uVW7sOOdnFjepeb3+wW8/7xqRwG8L3cl/u6+kDKfcPYLbf31rRLHrYEC2BkpVs2J NFuT2CddkfFsV9M4Kuu7QDqSocfRptA= -----END CERTIFICATE-----Generated at Mon Aug 4 08:22:14 2025 by rpki-client