$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa File: 26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa (raw, json) Hash identifier: Pr0GnRXoC7LL/RL66BJhYPR56vA6U6KRhfooeONbEpA= Subject key identifier: 3C:56:F8:27:A2:0B:6A:C8:02:32:14:9D:25:A5:2E:B7:6F:CB:E5:9D Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1C4119BE27CBA7B0C9A00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396971 IP address blocks: 173.242.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c4:11:9b:e2:7c:ba:7b:0c:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b3d470d6-b1de-4601-a269-ea7840e61949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:f3:96:02:c3:fb:12:e4:bd:be:01:0b:aa: 83:56:ba:b9:9e:aa:94:47:1e:f5:41:68:91:be:8b: 7b:de:fd:db:de:da:12:b3:28:2d:f6:9a:89:d1:fd: 0c:77:83:d2:d7:75:98:9f:4a:64:90:2e:b4:45:17: 8f:d5:e6:fe:db:c2:b0:3c:5d:1f:7f:62:cc:50:74: 62:fb:1a:a5:be:79:de:77:4e:3d:7a:ee:2d:8a:62: a2:33:4e:6b:72:f8:06:50:da:bb:b5:4e:0d:da:34: 17:31:4f:c6:46:26:f0:e4:09:a9:4f:cc:7e:3b:a0: 5c:e1:4d:a5:05:43:26:f0:76:6b:98:4c:6b:9f:d5: 2b:9e:71:63:0f:d4:74:ae:d7:70:8f:92:13:5e:cd: 21:d8:1f:0b:77:0a:d3:bd:a7:b2:36:66:00:8a:94: 72:04:bf:79:ab:92:51:5a:bc:da:d9:b6:93:fd:ec: 20:2d:9f:66:87:d3:4d:b1:42:d6:f5:0f:16:0c:8e: f2:9d:6b:8d:ae:f7:f8:d9:59:6a:fd:34:9b:07:4e: 63:91:83:13:45:8f:c3:1d:28:78:f4:cb:64:04:61: 74:26:72:37:ca:fc:a1:ed:64:46:6d:26:14:5c:84: 86:eb:40:ab:a8:0f:6c:f4:4c:64:11:58:6c:10:73: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:F8:27:A2:0B:6A:C8:02:32:14:9D:25:A5:2E:B7:6F:CB:E5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/26a63c31-2b9b-36a3-82cf-760f36ca89a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 173.242.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:47:1c:fe:e4:6c:56:40:a9:18:a2:14:85:c8:77:5d:2b:8c: 8b:7c:2a:a7:ab:02:04:e9:81:68:c5:f8:23:42:16:80:d7:7e: 86:f6:35:fa:8a:41:db:f5:2c:7a:09:cd:12:92:46:08:38:11: c4:19:ad:48:46:6c:34:1f:4b:c3:3d:55:b1:2f:2e:0f:6d:ea: 96:b1:f7:6d:32:65:34:49:ee:c5:0c:40:d0:81:8d:6a:36:93: f7:cc:a4:b8:86:de:73:b9:10:cc:6d:bc:68:e1:ef:4c:04:3c: db:0f:35:75:ec:50:cd:41:d4:73:2c:05:7d:bc:7f:47:65:1b: 2b:18:ea:47:59:ff:8b:e4:8a:13:7f:e6:27:ab:cc:c0:f0:16: cb:e3:b8:a8:31:5e:46:72:ec:f8:bc:64:a7:6b:05:38:21:fa: 5a:3e:11:d6:e7:df:27:ea:b6:97:32:3b:3c:84:e3:6e:4b:5a: fc:66:58:34:e8:31:c8:03:cb:87:cc:56:93:51:23:47:01:40: 06:dd:f1:74:20:d9:01:2c:23:8c:01:b0:59:80:01:06:dc:fb: 3b:86:1f:b1:ae:64:b5:1b:83:dc:6f:48:d1:e5:04:34:4d:6c: a0:e9:1a:02:20:42:9c:5d:30:8a:78:e1:ec:42:d4:81:31:62: 2a:ae:64:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cQRm+J8unsMmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjNkNDcwZDYtYjFkZS00NjAxLWEyNjktZWE3ODQwZTYxOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvDzlgLD+xLkvb4BC6qDVrq5nqqURx71QWiR vot73v3b3toSsygt9pqJ0f0Md4PS13WYn0pkkC60RReP1eb+28KwPF0ff2LMUHRi +xqlvnned049eu4timKiM05rcvgGUNq7tU4N2jQXMU/GRibw5AmpT8x+O6Bc4U2l BUMm8HZrmExrn9UrnnFjD9R0rtdwj5ITXs0h2B8LdwrTvaeyNmYAipRyBL95q5JR Wrza2baT/ewgLZ9mh9NNsULW9Q8WDI7ynWuNrvf42Vlq/TSbB05jkYMTRY/DHSh4 9MtkBGF0JnI3yvyh7WRGbSYUXISG60CrqA9s9ExkEVhsEHPI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxW+CeiC2rIAjIUnSWlLrdvy+WdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjZhNjNjMzEtMmI5Yi0z NmEzLTgyY2YtNzYwZjM2Y2E4OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfJvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdHHP7kbFZAqRiiFIXId10rjIt8KqerAgTpgWjF+CNCFoDXfob2NfqK Qdv1LHoJzRKSRgg4EcQZrUhGbDQfS8M9VbEvLg9t6pax920yZTRJ7sUMQNCBjWo2 k/fMpLiG3nO5EMxtvGjh70wEPNsPNXXsUM1B1HMsBX28f0dlGysY6kdZ/4vkihN/ 5ierzMDwFsvjuKgxXkZy7Pi8ZKdrBTgh+lo+Edbn3yfqtpcyOzyE425LWvxmWDTo McgDy4fMVpNRI0cBQAbd8XQg2QEsI4wBsFmAAQbc+zuGH7GuZLUbg9xvSNHlBDRN bKDpGgIgQpxdMIp44exC1IExYiquZAg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:55 2025 by rpki-client