$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa File: 94a2875f-a39b-3088-a9de-af1c7a12722a.roa (raw, json) Hash identifier: VACI8FMzo9skMb6uHyFbnW1fh5lz0IeHBWqnSoouAqA= Subject key identifier: 29:7D:13:D7:64:91:F0:0F:EA:92:5A:A5:CB:90:D9:E1:2F:D8:10:67 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584AECC1497705180469A44957A0 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 1273 IP address blocks: 216.239.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:49:77:05:18:04:69:a4:49:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=69b4e89e-036c-40be-af65-3e690b76b962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6c:f5:75:d3:13:a9:45:fc:ab:77:7a:f6:33: 4e:0c:b7:74:3a:2b:96:30:4c:5a:d8:f5:eb:7a:dc: 94:8d:6a:23:0a:1e:09:69:60:63:1a:c9:91:74:d0: d9:70:6a:fa:b9:23:c4:d2:7a:6d:4c:cd:7d:9f:41: e4:93:64:56:a8:6b:13:b6:0d:ea:38:25:3e:42:f6: dc:b8:29:27:1d:52:24:0c:1e:a9:3a:8b:f4:13:a0: b4:8d:20:05:96:1b:80:ae:a9:92:fa:81:35:82:f9: 04:c8:25:74:f5:82:84:a5:62:a6:0d:14:c7:44:50: 33:01:d5:eb:f9:80:fa:17:c0:fc:2d:a3:fe:05:7d: 55:e0:0c:54:1a:8b:7f:fb:a6:ca:cf:1d:57:94:46: 14:7f:60:b5:63:51:4b:a5:7b:41:e7:8c:43:16:10: c7:15:ce:ed:39:8f:76:a1:50:a7:e2:c9:1e:a0:3f: 2a:4f:42:9c:bc:1f:7a:6f:8b:79:83:36:45:63:31: f8:ab:3a:96:80:55:b3:b4:db:56:70:27:e0:e8:84: dd:70:3b:24:03:a3:ce:db:8e:99:3a:29:00:8d:18: 83:1b:38:71:d8:c5:5f:23:2c:93:c9:62:9d:24:a6: 1f:34:63:0c:55:40:5f:cb:a8:5d:6f:56:04:f4:30: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7D:13:D7:64:91:F0:0F:EA:92:5A:A5:CB:90:D9:E1:2F:D8:10:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/94a2875f-a39b-3088-a9de-af1c7a12722a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 216.239.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:db:b3:63:20:ba:0a:6d:9d:2e:d1:3b:53:b2:1d:76:54:91: f4:b7:d0:29:a3:bf:db:20:d4:cc:1c:39:d3:30:85:8a:3d:d0: 7c:e8:85:5e:82:40:19:6a:f9:f9:03:d7:d5:72:0e:02:a9:6f: 64:36:c4:33:62:f0:d7:bb:4a:21:9f:44:0e:d1:05:06:2e:1d: 1a:be:cc:2f:3d:5a:eb:27:ff:8a:b6:6a:db:14:c3:86:92:0d: 7d:58:ff:a1:1a:ce:95:ac:69:08:a0:04:d2:d8:19:51:e6:f3: 23:36:27:2d:73:e8:e7:86:44:78:4e:c0:a7:5a:83:b5:5a:20: 13:fc:b6:01:d1:c2:40:9d:81:dd:53:f4:6b:f4:e7:84:48:27: 3e:89:7c:d9:33:64:83:7b:f5:9b:3d:ce:f8:85:3a:58:e6:a5: b8:23:b6:0d:a3:39:48:bc:d7:b2:09:ff:81:e3:fd:f2:71:e6: dc:cd:54:88:ab:0d:6e:e4:b2:ec:04:0c:cc:f5:63:35:77:a2: ff:ef:09:92:6e:1b:bd:a5:7b:35:ab:c1:96:fe:ec:ed:b1:42: e2:31:e1:e9:04:38:be:f1:eb:c2:7a:95:d1:e8:e7:11:09:bd: 86:33:ca:de:14:27:db:4d:4b:8f:dd:11:d8:31:71:49:c8:56: 1e:16:4a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUl3BRgEaaRJV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjliNGU4OWUtMDM2Yy00MGJlLWFmNjUtM2U2OTBiNzZiOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2z1ddMTqUX8q3d69jNODLd0OiuWMExa2PXr etyUjWojCh4JaWBjGsmRdNDZcGr6uSPE0nptTM19n0Hkk2RWqGsTtg3qOCU+Qvbc uCknHVIkDB6pOov0E6C0jSAFlhuArqmS+oE1gvkEyCV09YKEpWKmDRTHRFAzAdXr +YD6F8D8LaP+BX1V4AxUGot/+6bKzx1XlEYUf2C1Y1FLpXtB54xDFhDHFc7tOY92 oVCn4skeoD8qT0KcvB96b4t5gzZFYzH4qzqWgFWztNtWcCfg6ITdcDskA6PO246Z OikAjRiDGzhx2MVfIyyTyWKdJKYfNGMMVUBfy6hdb1YE9DCxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl9E9dkkfAP6pJapcuQ2eEv2BBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvOTRhMjg3NWYtYTM5Yi0z MDg4LWE5ZGUtYWYxYzdhMTI3MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2O/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTbs2MgugptnS7RO1OyHXZUkfS30Cmjv9sg1MwcOdMwhYo90HzohV6C QBlq+fkD19VyDgKpb2Q2xDNi8Ne7SiGfRA7RBQYuHRq+zC89Wusn/4q2atsUw4aS DX1Y/6EazpWsaQigBNLYGVHm8yM2Jy1z6OeGRHhOwKdag7VaIBP8tgHRwkCdgd1T 9Gv054RIJz6JfNkzZIN79Zs9zviFOljmpbgjtg2jOUi817IJ/4Hj/fJx5tzNVIir DW7ksuwEDMz1YzV3ov/vCZJuG72lezWrwZb+7O2xQuIx4ekEOL7x68J6ldHo5xEJ vYYzyt4UJ9tNS4/dEdgxcUnIVh4WSic= -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:40 2025 by rpki-client