$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa File: e15131cc-650e-3c36-9991-f449603d4fc4.roa (raw, json) Hash identifier: Vme4vyAjj2J94aZKB2XfJyd+qFaSYpZtbGtB+EXOVUw= Subject key identifier: 3A:AE:40:B4:04:45:6B:B7:52:91:C4:F6:CA:58:53:B2:94:63:C4:8D Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B80B7700C56F2AD7C052D5B94 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 21547 IP address blocks: 72.12.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:70:0c:56:f2:ad:7c:05:2d:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=854bee5c-4344-44a4-aef7-6b95ce05ac32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:36:af:83:dc:ec:90:ca:83:f1:8d:15:53: 99:9c:a4:84:90:60:8e:7d:c2:c4:7c:37:80:2f:c0: 3d:a4:b5:6e:da:51:66:ba:00:ee:9a:65:39:fc:3a: 71:6f:9c:20:15:dd:23:ae:45:78:e4:3a:27:95:56: 12:cb:ae:72:38:fb:b0:92:0f:ca:1f:4a:f0:58:aa: 5b:46:ae:d2:11:1c:06:1e:a2:ff:64:1e:3f:ff:60: d4:fe:2e:bb:64:2a:23:65:1e:3f:82:2d:a0:91:1a: 20:93:05:82:ab:f8:d8:e3:72:c0:37:c2:2e:22:63: 9f:61:fe:48:13:01:d3:e5:95:72:80:73:88:03:85: 16:37:7d:6c:80:11:fe:00:10:6f:bc:06:12:6a:64: b9:94:1f:93:d4:ca:d5:d0:ae:7d:d0:8e:18:ff:43: f5:8b:8c:dd:59:e8:27:ac:22:a4:78:ab:b5:11:80: 88:b5:8b:71:79:f1:27:a2:89:9d:d9:d3:1f:ad:b6: 2b:16:1d:85:e6:99:25:96:eb:20:7b:f3:cc:9d:ad: 8e:ba:82:0f:1c:14:e0:bf:ae:59:2a:b0:92:44:0e: af:1b:a5:8d:45:19:c2:e4:30:5b:39:94:e0:92:cf: ab:64:1b:4b:c0:b9:92:78:48:da:98:2a:78:21:ba: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:40:B4:04:45:6B:B7:52:91:C4:F6:CA:58:53:B2:94:63:C4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 72.12.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6f:53:aa:aa:ac:8f:f4:9d:72:fe:b0:42:7d:ca:36:d6:53: 9f:c1:cb:61:ed:dc:b6:16:b5:54:e5:87:dd:f6:e9:a9:a3:99: 9a:8e:86:ae:97:33:49:23:6e:80:a6:a9:d8:6f:6f:52:0c:62: ff:ea:f7:7d:0e:12:66:a7:8a:c2:8b:09:d5:b2:84:21:82:01: a7:fa:b3:3b:2d:2b:0f:99:94:12:35:13:7b:19:78:77:5b:4e: 76:b5:2f:ee:98:a9:06:c5:55:87:7e:6d:59:1a:da:cc:78:b5: 06:6f:72:58:ef:b8:9f:01:4a:75:50:84:c5:04:d2:d4:22:c7: ef:22:b8:9e:5f:0b:99:08:e2:03:73:71:35:bf:82:5e:9c:2c: f5:41:d2:1a:db:a2:5b:47:85:14:8c:8c:c3:cf:4b:52:6f:5c: 0a:eb:35:60:cc:a0:f1:09:1d:98:e7:5d:89:67:4d:86:1e:2a: f6:34:f5:36:56:bf:c6:e5:3b:d9:64:d3:25:5a:e7:37:35:39: e7:95:8c:37:b8:08:bb:31:1c:b7:f5:72:3e:af:14:0a:75:bb: b8:58:4c:38:05:9e:f9:0e:eb:0c:21:2f:c2:c4:3c:4b:35:dd: 1e:67:e7:67:83:b5:a4:ae:95:6d:b5:85:2d:8e:20:16:b0:97: 5b:55:7b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3AMVvKtfAUtW5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ODU0YmVlNWMtNDM0NC00NGE0LWFlZjctNmI5NWNlMDVhYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjg2r4Pc7JDKg/GNFVOZnKSEkGCOfcLEfDeA L8A9pLVu2lFmugDummU5/Dpxb5wgFd0jrkV45DonlVYSy65yOPuwkg/KH0rwWKpb Rq7SERwGHqL/ZB4//2DU/i67ZCojZR4/gi2gkRogkwWCq/jY43LAN8IuImOfYf5I EwHT5ZVygHOIA4UWN31sgBH+ABBvvAYSamS5lB+T1MrV0K590I4Y/0P1i4zdWegn rCKkeKu1EYCItYtxefEnoomd2dMfrbYrFh2F5pkllusge/PMna2OuoIPHBTgv65Z KrCSRA6vG6WNRRnC5DBbOZTgks+rZBtLwLmSeEjamCp4IbrApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDquQLQERWu3UpHE9spYU7KUY8SNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTE1MTMxY2MtNjUwZS0z YzM2LTk5OTEtZjQ0OTYwM2Q0ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVvU6qqrI/0nXL+sEJ9yjbWU5/By2Ht3LYWtVTlh9326amjmZqOhq6X M0kjboCmqdhvb1IMYv/q930OEmanisKLCdWyhCGCAaf6szstKw+ZlBI1E3sZeHdb Tna1L+6YqQbFVYd+bVka2sx4tQZvcljvuJ8BSnVQhMUE0tQix+8iuJ5fC5kI4gNz cTW/gl6cLPVB0hrboltHhRSMjMPPS1JvXArrNWDMoPEJHZjnXYlnTYYeKvY09TZW v8blO9lk0yVa5zc1OeeVjDe4CLsxHLf1cj6vFAp1u7hYTDgFnvkO6wwhL8LEPEs1 3R5n52eDtaSulW21hS2OIBawl1tVe1g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:10 2025 by rpki-client