$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa File: 1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa (raw, json) Hash identifier: jkNFXK+ng6duxgYbm4zF32vpFVDvwvpyiuvCTW3J06k= Subject key identifier: 03:91:A0:D6:F1:FA:ED:29:02:0D:42:32:7E:A8:56:7C:A2:A2:0C:6C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B3DB70196200827135CCFE000 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 15320 IP address blocks: 216.238.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:01:96:20:08:27:13:5c:cf:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b0e6075c-3d3c-47b1-8a15-506da0c68d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:c2:a7:bb:c3:00:ae:d1:ac:7b:5c:1b:c1: dd:ec:41:49:ee:f6:13:e0:9f:e7:bb:b8:70:cf:d6: 05:a6:66:f3:8d:1a:b6:54:1e:ab:b0:10:25:87:b2: f3:50:d6:ff:1d:1d:9d:e8:13:de:00:8d:b4:92:34: 2c:0d:f8:2a:03:52:9e:74:b3:00:0b:e0:69:36:ea: f3:68:5c:69:01:26:6a:41:b7:d6:1e:1c:ac:ae:fd: 32:57:31:90:7c:ab:59:6b:29:3e:d2:53:4c:d7:60: f2:4b:cf:8e:15:40:03:59:cf:cb:5b:d3:2b:e9:46: 7c:e8:da:b4:e9:80:b0:08:33:96:85:5b:fe:da:1f: b3:a7:1d:33:74:08:aa:f2:40:3d:33:81:dd:1a:50: 92:0d:7b:af:f4:b4:0b:4c:31:fd:32:e5:de:5b:a2: 91:97:9b:d4:b5:ec:3d:d3:9b:03:0a:41:e9:98:f9: f1:15:46:05:cf:7c:ea:88:fe:71:85:d4:05:2a:33: 11:1d:91:f3:63:4d:5f:e8:5f:26:ba:cd:bc:9f:4a: 5d:2e:5e:f0:7b:54:e7:47:af:c3:bf:f2:6f:49:84: b0:d6:d4:50:b5:80:7d:fc:8e:e1:3c:40:75:88:9c: 2c:62:fd:ec:bb:2c:31:71:9b:11:c1:c6:2b:d8:f9: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:A0:D6:F1:FA:ED:29:02:0D:42:32:7E:A8:56:7C:A2:A2:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:ac:e8:18:14:8f:47:bb:df:ef:f2:70:ca:1c:45:87:00: 45:f2:66:69:40:8f:61:a4:fb:30:51:ef:41:50:f6:7b:ba:61: fa:2d:5f:21:89:b4:f1:88:c4:d8:21:3c:96:0c:aa:17:b4:b4: 9d:96:eb:22:cf:00:5b:12:9c:97:e2:20:00:df:b2:bf:a3:82: 5c:93:ec:b7:2d:02:fd:4e:99:fe:34:4c:e3:04:17:9e:70:44: 08:d9:29:f5:ca:e2:bc:9b:11:05:1a:89:03:0f:7d:41:fd:b1: e6:c4:26:1e:91:7c:b3:60:a6:2a:f9:db:e7:82:71:1b:6a:05: d2:88:ab:34:de:21:38:dc:5d:d5:51:f1:1b:cc:0d:bd:43:87: f2:65:17:df:0e:cc:a3:07:69:5b:d5:2c:67:ec:c6:6f:74:7b: 22:42:39:c4:62:f1:40:5b:98:90:05:d7:c6:46:cb:ae:b0:a8: f9:eb:05:74:26:49:90:6c:4e:87:74:9f:dd:02:59:c3:c8:07: fb:a0:f3:13:ac:20:a0:95:5c:24:79:a2:dd:52:96:7b:c3:f2: 0b:e6:77:47:84:67:51:39:d3:c2:cf:f3:e1:55:26:b1:11:4a: 49:83:0d:eb:e4:c4:a0:de:aa:52:fc:4d:94:22:d8:92:c8:44: 5d:df:ff:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twGWIAgnE1zP4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjBlNjA3NWMtM2QzYy00N2IxLThhMTUtNTA2ZGEwYzY4ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRrCp7vDAK7RrHtcG8Hd7EFJ7vYT4J/nu7hw z9YFpmbzjRq2VB6rsBAlh7LzUNb/HR2d6BPeAI20kjQsDfgqA1KedLMAC+BpNurz aFxpASZqQbfWHhysrv0yVzGQfKtZayk+0lNM12DyS8+OFUADWc/LW9Mr6UZ86Nq0 6YCwCDOWhVv+2h+zpx0zdAiq8kA9M4HdGlCSDXuv9LQLTDH9MuXeW6KRl5vUtew9 05sDCkHpmPnxFUYFz3zqiP5xhdQFKjMRHZHzY01f6F8mus28n0pdLl7we1TnR6/D v/JvSYSw1tRQtYB9/I7hPEB1iJwsYv3suywxcZsRwcYr2PnNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAORoNbx+u0pAg1CMn6oVnyiogxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWU0NjAwZjgtMWQxZC0z NzE3LTg2YjctMmNlZWUzMTA1YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2O6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKirOgYFI9Hu9/v8nDKHEWHAEXyZmlAj2Gk+zBR70FQ9nu6YfotXyGJ tPGIxNghPJYMqhe0tJ2W6yLPAFsSnJfiIADfsr+jglyT7LctAv1Omf40TOMEF55w RAjZKfXK4rybEQUaiQMPfUH9sebEJh6RfLNgpir52+eCcRtqBdKIqzTeITjcXdVR 8RvMDb1Dh/JlF98OzKMHaVvVLGfsxm90eyJCOcRi8UBbmJAF18ZGy66wqPnrBXQm SZBsTod0n90CWcPIB/ug8xOsIKCVXCR5ot1SlnvD8gvmd0eEZ1E508LP8+FVJrER SkmDDevkxKDeqlL8TZQi2JLIRF3f/00= -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:27 2025 by rpki-client