$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa File: c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa (raw, json) Hash identifier: ZX9Zrmk3YhM9OsXKxKA6p94z5RKmHeU+dqdVN6npr+4= Subject key identifier: 0C:27:A0:B2:B1:86:61:D7:F5:03:42:FA:E1:48:8A:34:AE:86:4D:09 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584F3E47EDCD33466311D4F25B80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 216.224.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:cd:33:46:63:11:d4:f2:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b3fcd6a2-9cd7-4fc2-bc03-e1d33131cb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:f7:b3:1f:67:38:16:36:54:fc:4e:ca:15: 72:3d:8f:de:d2:48:7c:be:b5:c0:f3:f5:ac:85:9b: 74:9c:38:01:7f:16:36:69:7c:df:14:e0:41:dc:2f: 41:57:40:d8:2e:ff:44:91:ca:5b:4b:78:58:c0:9d: ef:04:20:6d:6a:3f:f0:42:b6:fb:a1:4e:f0:f2:53: 38:4b:04:58:81:e2:28:3b:d4:72:5b:f3:70:12:e5: c3:b6:45:31:7c:55:24:c7:40:3f:be:0f:1b:45:11: 0c:a2:c6:d6:91:32:bd:c0:e9:cc:c0:f2:90:ea:90: 8c:ad:03:2f:83:07:c2:22:0a:a4:92:e4:45:a5:55: ca:65:69:41:dd:d9:22:cf:47:2e:c9:b8:84:13:c5: b0:d0:1a:d2:c5:72:d2:0a:38:f4:a5:14:91:53:0b: fe:4c:07:e9:af:ee:a1:a3:7f:1b:ce:56:fe:4e:e5: c2:59:5c:95:21:e8:98:b5:4a:85:86:e7:72:36:77: bf:28:85:4d:7d:5f:28:f8:85:87:50:82:b4:02:e8: 59:2d:f0:5a:92:64:cd:0d:92:14:de:91:1f:e8:95: 94:98:64:a5:30:16:f8:68:5e:ba:27:30:da:c0:fc: 7b:f6:3b:c6:be:44:df:c0:81:40:fd:dc:0e:1d:91: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:27:A0:B2:B1:86:61:D7:F5:03:42:FA:E1:48:8A:34:AE:86:4D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:81:eb:bc:be:24:7d:b0:82:b0:c0:4a:24:1d:87:b8:69:35: 77:33:6d:14:51:bc:ce:1a:37:b9:64:9a:6d:01:71:36:34:64: fd:a7:fa:07:29:5a:03:c9:58:48:6d:59:45:1f:f4:ce:86:d9: 88:3e:f4:5e:f3:1e:d3:06:c0:52:a2:1e:43:eb:c7:32:9d:90: 11:a1:de:f2:e5:d9:7d:8e:c8:e0:4d:e2:9f:fa:8b:5d:2b:52: 97:95:c0:a4:7c:d0:92:6d:71:9a:49:dc:71:29:b2:92:e2:d0: 5b:08:78:80:73:ff:c8:69:24:67:06:dd:20:27:fd:af:5b:1d: 24:3a:2e:5e:8a:35:f6:34:a7:7e:26:76:52:3c:fd:a2:88:17: 34:a8:83:24:9c:c7:fc:59:fd:50:53:97:17:8e:9d:ee:61:24: c5:99:36:fc:db:52:19:47:dd:48:7d:73:16:3f:d8:a3:53:9e: ab:43:b6:c7:6a:d1:ce:8d:6b:71:15:d1:6e:8e:ca:ba:df:f8: b9:cd:f7:2f:a3:d4:cf:ea:cd:57:49:32:1d:f4:ef:30:41:00: 31:8f:1a:86:de:c1:89:42:50:f6:96:2b:1f:6e:f6:2a:90:45: 96:46:10:a6:df:48:68:24:4a:80:90:19:40:3f:75:f9:9e:0e: 8d:fb:35:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+3NM0ZjEdTyW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YjNmY2Q2YTItOWNkNy00ZmMyLWJjMDMtZTFkMzMxMzFjYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK/3sx9nOBY2VPxOyhVyPY/e0kh8vrXA8/Ws hZt0nDgBfxY2aXzfFOBB3C9BV0DYLv9EkcpbS3hYwJ3vBCBtaj/wQrb7oU7w8lM4 SwRYgeIoO9RyW/NwEuXDtkUxfFUkx0A/vg8bRREMosbWkTK9wOnMwPKQ6pCMrQMv gwfCIgqkkuRFpVXKZWlB3dkiz0cuybiEE8Ww0BrSxXLSCjj0pRSRUwv+TAfpr+6h o38bzlb+TuXCWVyVIeiYtUqFhudyNne/KIVNfV8o+IWHUIK0AuhZLfBakmTNDZIU 3pEf6JWUmGSlMBb4aF66JzDawPx79jvGvkTfwIFA/dwOHZHi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwnoLKxhmHX9QNC+uFIijSuhk0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvYzlmZTdhMjQtNGY5MC0z MmUxLTlhYmYtM2UyNDdjOTAyYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGB67y+JH2wgrDASiQdh7hpNXczbRRRvM4aN7lkmm0BcTY0ZP2n+gcp WgPJWEhtWUUf9M6G2Yg+9F7zHtMGwFKiHkPrxzKdkBGh3vLl2X2OyOBN4p/6i10r UpeVwKR80JJtcZpJ3HEpspLi0FsIeIBz/8hpJGcG3SAn/a9bHSQ6Ll6KNfY0p34m dlI8/aKIFzSogyScx/xZ/VBTlxeOne5hJMWZNvzbUhlH3Uh9cxY/2KNTnqtDtsdq 0c6Na3EV0W6Oyrrf+LnN9y+j1M/qzVdJMh307zBBADGPGobewYlCUPaWKx9u9iqQ RZZGEKbfSGgkSoCQGUA/dfmeDo37NfU= -----END CERTIFICATE-----Generated at Mon Sep 21 18:32:18 2026 by rpki-client