$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa File: 9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa (raw, json) Hash identifier: 6GFpfrrlVruGzc698dc7JyOkxVumOSgKjKq/YkhqjF8= Subject key identifier: C9:39:8E:90:8F:99:8F:FF:1A:E2:55:30:4D:7F:BF:39:E1:EE:80:48 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584CAE5732428B2280A56CE48E40 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 211373 IP address blocks: 216.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:32:42:8b:22:80:a5:6c:e4:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f84ad02a-e0c7-4b50-b96c-9418a98fef10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:83:d9:19:d4:c3:e6:5b:89:4f:9d:3d:a5: d5:72:a1:1e:af:0f:10:2b:7a:f2:e0:e9:bd:3a:ab: c5:4a:21:51:ce:61:51:73:3f:de:ae:44:d3:9e:54: 29:59:a1:69:b1:8d:41:9c:c6:45:8c:79:fe:7c:84: 52:bd:b5:67:06:0a:6c:bf:7f:36:53:92:0a:d4:bf: 21:ae:3e:b9:ac:91:b3:73:37:7f:ff:2b:fc:46:53: b7:c6:4e:70:11:72:69:cf:a2:20:7d:e2:95:ec:93: 71:ad:9d:a6:3d:37:98:ae:8f:a7:a9:a2:81:4b:99: ea:6d:72:1e:80:d3:d3:c0:db:8c:8d:62:67:6a:f8: dd:57:4a:ee:14:91:74:4e:01:b8:da:5a:0e:9c:85: ec:7f:d0:c3:02:7c:94:45:38:f9:e0:c4:03:e4:f2: 49:22:49:15:7e:17:3b:41:a2:89:c7:68:01:7f:06: 8e:2a:f9:8d:13:12:6b:c4:63:4c:38:25:80:42:2e: 0e:98:46:cc:1e:ea:74:b5:64:f1:8b:b8:92:5f:1c: 47:fb:f3:5d:61:1b:42:23:69:c9:c2:76:b7:f2:ec: 56:d8:a9:e4:b5:35:69:6d:b3:3a:31:1f:0d:98:f6: e0:da:d2:78:0a:4b:78:26:30:27:b2:b7:24:e0:be: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:39:8E:90:8F:99:8F:FF:1A:E2:55:30:4D:7F:BF:39:E1:EE:80:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:31:3c:13:5c:f5:fd:78:14:a9:d9:90:8a:18:5b:88:65:1f: c3:f5:d0:1e:5b:45:a9:eb:4e:4c:f1:31:a8:a1:04:68:c0:20: ad:a6:da:cd:90:62:6e:9e:c5:76:c0:d8:f0:2e:ba:c8:5a:f3: c6:4a:33:c4:6a:5d:e5:79:fb:fa:57:34:48:d2:28:f6:52:17: 12:5f:55:dd:0b:ed:f1:01:bf:51:e5:70:7c:39:e7:89:bc:c1: f9:79:37:19:07:71:e7:b5:57:14:de:11:8b:3e:13:ba:65:ff: 0d:38:1b:f6:0d:f6:32:66:a0:fa:23:6e:d7:9c:b1:2b:3b:cd: 22:66:5a:b3:5b:14:6c:d8:12:1a:24:b7:a9:cf:60:44:a5:8a: 75:ef:de:cb:74:88:dc:1f:eb:4c:6a:46:d6:96:99:02:89:85: 3d:18:be:98:00:ea:96:d8:80:31:ad:cd:bc:4b:1c:e2:27:c7: d6:0c:d4:ce:16:cd:9d:e7:91:e4:94:3f:7d:6b:68:a8:72:0b: fc:9e:1f:ab:b4:4e:66:7b:82:43:2a:27:bd:9c:4d:80:b4:44: bf:48:e5:93:ea:19:06:22:68:73:f0:c4:b0:3a:51:e3:38:62: 4f:89:b5:07:12:86:6b:75:ff:e3:77:a9:5e:de:bf:d9:ff:02: 56:ff:16:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzJCiyKApWzkjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Zjg0YWQwMmEtZTBjNy00YjUwLWI5NmMtOTQxOGE5OGZlZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWD2RnUw+ZbiU+dPaXVcqEerw8QK3ry4Om9 OqvFSiFRzmFRcz/erkTTnlQpWaFpsY1BnMZFjHn+fIRSvbVnBgpsv382U5IK1L8h rj65rJGzczd//yv8RlO3xk5wEXJpz6IgfeKV7JNxrZ2mPTeYro+nqaKBS5nqbXIe gNPTwNuMjWJnavjdV0ruFJF0TgG42loOnIXsf9DDAnyURTj54MQD5PJJIkkVfhc7 QaKJx2gBfwaOKvmNExJrxGNMOCWAQi4OmEbMHup0tWTxi7iSXxxH+/NdYRtCI2nJ wna38uxW2KnktTVpbbM6MR8NmPbg2tJ4Ckt4JjAnsrck4L6pqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk5jpCPmY//GuJVME1/vznh7oBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWM3NjhlMDMtZDdhOC0z ZDgxLTg0ODYtZWY0ZjVjM2E5YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8xPBNc9f14FKnZkIoYW4hlH8P10B5bRanrTkzxMaihBGjAIK2m2s2Q Ym6exXbA2PAuusha88ZKM8RqXeV5+/pXNEjSKPZSFxJfVd0L7fEBv1HlcHw554m8 wfl5NxkHcee1VxTeEYs+E7pl/w04G/YN9jJmoPojbtecsSs7zSJmWrNbFGzYEhok t6nPYESlinXv3st0iNwf60xqRtaWmQKJhT0YvpgA6pbYgDGtzbxLHOInx9YM1M4W zZ3nkeSUP31raKhyC/yeH6u0TmZ7gkMqJ72cTYC0RL9I5ZPqGQYiaHPwxLA6UeM4 Yk+JtQcShmt1/+N3qV7ev9n/Alb/FmQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:53 2026 by rpki-client