$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa File: cb642c56-30e9-38e3-a46b-763036ada939.roa (raw, json) Hash identifier: cExL/Rf7w4krK0N5BMMJhsNNeZ3+ceLUxxzA3QYnhwY= Subject key identifier: EE:DA:95:CD:CF:4A:14:E0:77:A6:01:54:8D:97:D9:A2:64:A1:A9:E3 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584DD4C084781512718608D2FB00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 834 IP address blocks: 216.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:84:78:15:12:71:86:08:d2:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=d8aa3d9b-5b5a-4399-be7e-57b8ee7a0b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:a7:59:14:d8:ce:d3:25:ff:bb:90:7a:fc: 4c:68:e4:ab:05:56:5d:90:d6:1c:9e:cf:75:a4:99: 0d:76:5a:0c:b1:e1:24:c7:4e:94:74:58:ec:5e:51: c5:27:42:8a:ef:bf:51:2f:d0:33:98:ad:64:13:f3: 60:bd:ad:39:30:73:af:d5:ba:c8:81:93:26:8f:57: dc:a6:e0:7e:e2:a4:0e:16:d6:07:8e:92:5e:27:cc: 39:08:1a:ff:5a:f0:54:51:43:46:92:20:8f:ad:c3: d2:0f:44:24:ef:ba:03:53:48:db:97:75:27:93:b6: 21:99:c8:a3:f9:70:eb:ea:7d:cb:67:c7:96:a2:2e: d9:d4:82:ff:cf:09:91:69:0e:e5:68:3c:ce:d5:d4: 9c:53:bf:01:17:fa:f7:91:bb:02:b9:b8:3c:ab:93: 94:b2:3c:71:4d:1c:57:02:83:a8:b5:5f:0a:94:32: 62:cf:4e:1b:70:b8:da:b9:30:90:43:a1:e7:ff:f9: 0a:69:f7:0b:28:85:cd:ab:a2:22:73:eb:6b:10:87: 67:82:08:cb:3e:50:87:75:fb:67:61:23:3f:e0:23: 77:3f:94:f8:24:81:a8:b7:3b:e6:9d:57:82:8f:48: 4f:0d:83:6c:a3:5d:e5:17:ac:f5:79:ba:44:45:4d: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:95:CD:CF:4A:14:E0:77:A6:01:54:8D:97:D9:A2:64:A1:A9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cb642c56-30e9-38e3-a46b-763036ada939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f1:86:a7:e7:f8:40:66:c7:a2:a7:d4:42:46:57:b1:18:ab: 28:ed:d9:a8:25:c3:9a:66:e6:a0:d8:4f:1d:6f:49:9b:c3:19: c8:38:b4:a2:37:52:e9:51:93:82:04:53:f3:f1:ac:ae:6e:79: 45:aa:c0:8b:10:50:e2:23:1d:12:47:fa:d2:3f:ac:cf:59:66: f0:9a:33:ee:ba:1c:fb:25:f8:14:5a:08:1c:c5:3d:f9:b3:0c: e8:1e:e9:ca:b0:82:da:2f:27:e3:87:83:d4:eb:12:72:f1:02: 4c:36:b6:69:cc:e6:31:59:76:51:70:9e:dc:43:96:1d:80:09: eb:0f:6f:28:cf:b6:92:85:93:11:53:2c:75:b5:02:c5:be:37: 39:1a:b9:1b:0b:b1:de:2a:7d:9b:da:3c:12:66:85:96:03:b5: 33:4a:83:b5:df:b4:2f:2c:86:72:cb:9e:54:2a:e3:06:f7:ef: 84:a9:c9:6e:b6:df:7a:bb:26:dd:93:1c:67:26:45:96:f5:31: ee:8c:20:e5:f7:54:a6:bb:22:4d:6a:12:c1:59:af:1d:4c:7e: 73:3c:81:0c:fa:88:cb:7c:e9:c2:3d:dd:3c:cf:d0:5b:b7:d4: 8c:6a:7a:44:42:8f:30:4f:73:1e:26:ba:98:df:58:fe:7f:14: 04:aa:53:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwIR4FRJxhgjS+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk ZDhhYTNkOWItNWI1YS00Mzk5LWJlN2UtNTdiOGVlN2EwYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhganWRTYztMl/7uQevxMaOSrBVZdkNYcns91 pJkNdloMseEkx06UdFjsXlHFJ0KK779RL9AzmK1kE/Ngva05MHOv1brIgZMmj1fc puB+4qQOFtYHjpJeJ8w5CBr/WvBUUUNGkiCPrcPSD0Qk77oDU0jbl3Unk7Yhmcij +XDr6n3LZ8eWoi7Z1IL/zwmRaQ7laDzO1dScU78BF/r3kbsCubg8q5OUsjxxTRxX AoOotV8KlDJiz04bcLjauTCQQ6Hn//kKafcLKIXNq6Iic+trEIdnggjLPlCHdftn YSM/4CN3P5T4JIGotzvmnVeCj0hPDYNso13lF6z1ebpERU1NNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7alc3PShTgd6YBVI2X2aJkoanjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2I2NDJjNTYtMzBlOS0z OGUzLWE0NmItNzYzMDM2YWRhOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPxhqfn+EBmx6Kn1EJGV7EYqyjt2aglw5pm5qDYTx1vSZvDGcg4tKI3 UulRk4IEU/PxrK5ueUWqwIsQUOIjHRJH+tI/rM9ZZvCaM+66HPsl+BRaCBzFPfmz DOge6cqwgtovJ+OHg9TrEnLxAkw2tmnM5jFZdlFwntxDlh2ACesPbyjPtpKFkxFT LHW1AsW+NzkauRsLsd4qfZvaPBJmhZYDtTNKg7XftC8shnLLnlQq4wb374SpyW62 33q7Jt2THGcmRZb1Me6MIOX3VKa7Ik1qEsFZrx1MfnM8gQz6iMt86cI93TzP0Fu3 1IxqekRCjzBPcx4mupjfWP5/FASqU9c= -----END CERTIFICATE-----Generated at Sat Jun 13 07:32:11 2026 by rpki-client