$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa File: cb06c18f-321b-3017-a621-94bd297303bd.roa (raw, json) Hash identifier: 49vGTBFq3NclZeAeKm9uxdxBwTjloc6SuQ2Y2xbCyPo= Subject key identifier: 78:08:D1:98:DB:04:5A:2E:ED:E3:EC:40:FF:06:5A:48:7B:1A:5B:FA Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Certificate serial: 010D0C9F4328584B0E414E6E54987792B3DA7D80 Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 27644 IP address blocks: 192.124.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4e:6e:54:98:77:92:b3:da:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=1b6a1eee-9a57-448d-b8cc-25f3428eb9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7f:a1:12:10:f9:9b:1e:48:bf:84:48:e5:95: e0:7e:2d:be:c4:31:bf:42:83:1d:83:c3:eb:cb:a8: ef:b5:7a:52:8b:14:cb:b7:41:a9:e9:14:07:bd:d9: 11:f6:a3:d0:12:27:24:02:70:bb:3b:b7:1a:77:85: 54:22:43:f6:9c:3c:9e:1e:da:84:cc:14:f0:78:3a: da:01:8d:63:af:83:11:00:ae:8a:86:c8:03:c9:aa: 51:ca:25:86:cb:e0:c5:db:75:86:ac:b7:0e:47:21: c9:b6:62:45:66:a9:36:66:80:0a:67:56:44:31:00: e9:7e:45:43:3c:ea:c9:99:70:e1:cf:b2:5b:84:ad: 1d:4f:c3:80:8b:5f:9c:f3:b1:c0:62:a1:86:48:82: 0d:41:84:16:b0:cc:61:e3:c3:0a:96:e1:64:23:a0: 00:6f:b7:9c:21:d8:d2:e0:80:8f:8f:64:37:df:fc: 53:d4:02:d0:a3:4e:8c:6c:b2:ad:cc:af:4a:38:f9: 1c:f1:df:8a:ab:21:4e:4c:96:45:90:f2:5a:57:0e: 2e:7a:cc:07:d5:fb:1d:6f:99:5f:1d:49:53:1b:93: ad:03:1e:0a:35:b3:b7:f0:7a:2d:30:67:68:7e:0a: f0:d9:25:d2:44:ee:e4:10:3a:d1:fc:bd:a5:e3:eb: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:08:D1:98:DB:04:5A:2E:ED:E3:EC:40:FF:06:5A:48:7B:1A:5B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl X509v3 Authority Key Identifier: keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer sbgp-ipAddrBlock: critical IPv4: 192.124.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ab:1c:1b:d4:8e:4d:22:ba:15:a0:84:a1:3b:f6:24:f4:9c: fc:96:99:9f:bd:51:06:40:6f:7f:5a:ce:64:24:33:39:31:c0: e0:70:31:e5:03:36:27:98:84:9b:4b:5c:cc:de:01:88:86:81: 73:75:3f:35:b1:89:03:b6:f3:72:58:6f:37:ec:96:c0:86:69: 4d:da:5f:3d:fb:34:e4:ee:d7:48:b4:ef:20:93:de:16:56:1d: 2f:28:1d:fd:10:8d:38:cf:6c:7c:05:2a:85:21:e3:28:f7:0c: b8:98:62:4f:51:3f:7b:33:49:b2:51:a2:44:f9:6e:cb:81:e6: df:c9:83:0f:78:31:03:68:79:a0:18:9b:c7:38:37:1c:a4:94: 05:55:ac:00:5e:3e:de:d5:c9:aa:33:21:97:35:75:e2:e5:3d: fc:60:6f:72:c3:b9:c8:1f:02:9f:0a:57:22:48:11:d4:3c:6f: 5a:41:ab:1f:fe:bc:85:95:c7:81:a8:de:8d:2e:ff:c9:d9:e5: e5:40:72:b3:16:bb:d8:1a:81:a7:69:5f:f3:8c:9d:87:03:d0: db:bc:05:ba:fd:79:ad:72:2b:54:c1:ab:47:f3:dd:65:be:7c: aa:d6:89:1f:e8:24:ba:21:4a:52:8e:54:d9:73:42:a9:1b:46: 96:aa:11:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU5uVJh3krPafYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh YjU2MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWI2YTFlZWUtOWE1Ny00NDhkLWI4Y2MtMjVmMzQyOGViOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9n+hEhD5mx5Iv4RI5ZXgfi2+xDG/QoMdg8Pr y6jvtXpSixTLt0Gp6RQHvdkR9qPQEickAnC7O7cad4VUIkP2nDyeHtqEzBTweDra AY1jr4MRAK6KhsgDyapRyiWGy+DF23WGrLcORyHJtmJFZqk2ZoAKZ1ZEMQDpfkVD POrJmXDhz7JbhK0dT8OAi1+c87HAYqGGSIINQYQWsMxh48MKluFkI6AAb7ecIdjS 4ICPj2Q33/xT1ALQo06MbLKtzK9KOPkc8d+KqyFOTJZFkPJaVw4ueswH1fsdb5lf HUlTG5OtAx4KNbO38HotMGdofgrw2SXSRO7kEDrR/L2l4+vk8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgI0ZjbBFou7ePsQP8GWkh7Glv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2 MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvY2IwNmMxOGYtMzIxYi0z MDE3LWE2MjEtOTRiZDI5NzMwM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk OTNjM2FiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHyBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMarHBvUjk0iuhWghKE79iT0nPyWmZ+9UQZAb39azmQkMzkxwOBwMeUD NieYhJtLXMzeAYiGgXN1PzWxiQO283JYbzfslsCGaU3aXz37NOTu10i07yCT3hZW HS8oHf0QjTjPbHwFKoUh4yj3DLiYYk9RP3szSbJRokT5bsuB5t/Jgw94MQNoeaAY m8c4NxyklAVVrABePt7VyaozIZc1deLlPfxgb3LDucgfAp8KVyJIEdQ8b1pBqx/+ vIWVx4Go3o0u/8nZ5eVAcrMWu9gagadpX/OMnYcD0Nu8Bbr9ea1yK1TBq0fz3WW+ fKrWiR/oJLohSlKOVNlzQqkbRpaqEd8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:15 2025 by rpki-client