$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa File: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (raw, json) Hash identifier: A6x4eN6H6b1KgiXruhlZX3XLpmo7WLlqgfWJO2k5gCk= Subject key identifier: FE:E3:0C:0D:06:C9:2F:82:96:28:17:55:F6:FA:E2:56:BE:03:CE:94 Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389 Certificate serial: 010D0C9F4328584EA7885AEEF7BA6D069F008680 Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 4540 IP address blocks: 142.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5a:ee:f7:ba:6d:06:9f:00:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff1a08e-9692-475a-9b04-916530111389 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8e872768-7bda-4862-8c0b-436f8488c4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:b9:f1:bf:96:07:60:15:ab:02:5d:cc:08: f6:97:44:08:f0:84:92:27:82:f5:85:87:a1:73:70: b6:71:b1:15:31:14:90:55:c8:28:e5:b6:42:a1:b5: b4:c7:3c:14:1c:8b:d3:68:74:cc:f3:8b:55:56:cf: 7c:90:8a:08:00:1a:fa:00:17:bb:5e:cf:29:8e:08: ed:75:4c:04:d1:04:79:a3:2f:01:8d:f9:05:06:54: e6:8a:2f:7e:3c:14:c2:b3:55:6e:0e:45:6a:3a:2b: 76:e7:a0:59:16:cf:76:98:3e:09:3d:03:94:f0:5f: 1c:e9:b8:52:a2:de:79:65:f2:9b:44:20:c2:e4:de: 64:a5:9a:75:6c:36:c4:fc:15:01:7d:a6:66:13:5d: f1:b8:fd:0a:72:f1:32:42:0f:48:63:dc:32:61:32: e6:3a:58:11:15:36:75:7a:57:12:ae:b3:1d:28:b1: 23:6f:9a:c1:93:e4:53:a8:c9:1a:a2:49:f2:e5:a5: 4e:51:3e:fc:3f:22:f2:fb:ea:4a:2a:57:a0:5b:5b: fb:bb:73:d7:e6:7b:79:ac:09:49:0f:7f:54:cd:48: 04:fb:25:be:e6:dc:09:b3:11:7f:65:fc:3d:d8:0f: 82:ae:26:e9:f2:dd:7b:54:23:16:47:96:ef:8b:f3: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:0C:0D:06:C9:2F:82:96:28:17:55:F6:FA:E2:56:BE:03:CE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl X509v3 Authority Key Identifier: keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer sbgp-ipAddrBlock: critical IPv4: 142.249.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:bf:1b:46:ef:f6:72:9c:27:97:71:19:da:dc:84:3c:25:a5: f2:21:3c:53:67:af:0f:43:62:c2:67:16:b5:6f:db:66:a1:11: f9:b0:a0:69:0c:4c:f1:fc:42:3e:e8:b5:86:03:6c:c4:25:35: c9:1f:7d:50:d6:c9:51:01:4f:a8:df:ba:63:c6:0e:d9:52:74: 17:30:3e:11:5d:cf:da:9c:9f:4c:72:ee:ac:ce:40:77:4d:c4: b9:fa:0b:47:9b:dd:46:aa:65:c1:13:8c:b6:78:20:13:27:b3: f0:03:e3:cd:0c:0f:91:fc:c2:bd:1c:32:14:5f:17:c9:c8:2b: e4:95:ff:4d:7b:b3:8b:08:d1:22:2d:9a:24:37:8a:45:1f:d3: f4:2a:64:30:fa:b8:02:57:c9:f6:dd:13:4d:6e:b9:aa:6c:03: 21:5d:8f:7d:0d:1c:25:7d:a7:e4:9a:4c:18:fd:92:a0:57:fa: ad:69:99:8e:8e:88:ad:b4:20:49:a1:a5:98:3e:4d:d8:5d:f5: dc:66:78:b8:ba:55:d8:d0:16:77:eb:3c:46:f0:ce:10:1a:6d: 8d:d0:8c:00:75:75:8e:34:c4:82:99:b4:d7:6e:07:db:e2:4e: 7f:fc:7e:7a:b0:84:ec:e2:0f:0f:33:86:be:f0:75:c8:58:58: 1d:80:f5:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFru97ptBp8AhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTEx Mzg5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGU4NzI3NjgtN2JkYS00ODYyLThjMGItNDM2Zjg0ODhjNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCO58b+WB2AVqwJdzAj2l0QI8ISSJ4L1hYeh c3C2cbEVMRSQVcgo5bZCobW0xzwUHIvTaHTM84tVVs98kIoIABr6ABe7Xs8pjgjt dUwE0QR5oy8BjfkFBlTmii9+PBTCs1VuDkVqOit256BZFs92mD4JPQOU8F8c6bhS ot55ZfKbRCDC5N5kpZp1bDbE/BUBfaZmE13xuP0KcvEyQg9IY9wyYTLmOlgRFTZ1 elcSrrMdKLEjb5rBk+RTqMkaokny5aVOUT78PyLy++pKKlegW1v7u3PX5nt5rAlJ D39UzUgE+yW+5twJsxF/Zfw92A+Cribp8t17VCMWR5bvi/MiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7jDA0GyS+CligXVfb64la+A86UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYx YTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvZjcxZGRjZDEtYmFkMS0z NTQ0LTk2ZWMtMWE1NzJiZWVlMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2ZmMWEwOGUtOTY5Mi00NzVhLTli MDQtOTE2NTMwMTExMzg5L2NmZjFhMDhlLTk2OTItNDc1YS05YjA0LTkxNjUzMDEx MTM4OS5jcmwwHwYDVR0jBBgwFoAU/7vAmoVMMQwbnO/bc4IcyxC59LEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1 MzAxMTEzODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK/G0bv9nKcJ5dxGdrchDwlpfIhPFNnrw9DYsJnFrVv22ahEfmwoGkM TPH8Qj7otYYDbMQlNckffVDWyVEBT6jfumPGDtlSdBcwPhFdz9qcn0xy7qzOQHdN xLn6C0eb3UaqZcETjLZ4IBMns/AD480MD5H8wr0cMhRfF8nIK+SV/017s4sI0SIt miQ3ikUf0/QqZDD6uAJXyfbdE01uuapsAyFdj30NHCV9p+SaTBj9kqBX+q1pmY6O iK20IEmhpZg+Tdhd9dxmeLi6VdjQFnfrPEbwzhAabY3QjAB1dY40xIKZtNduB9vi Tn/8fnqwhOziDw8zhr7wdchYWB2A9c8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:40:16 2026 by rpki-client