$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa File: 90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa (raw, json) Hash identifier: zquQkO2aqaVkrIH6VfgL+zkRO/E7doB/YfHQxYqFe2Q= Subject key identifier: 74:C5:99:C2:DB:72:BF:0A:67:11:32:32:75:B8:46:C9:9B:12:87:91 Certificate issuer: /CN=ac2e2011-65d2-4c1e-87c4-772ec37e8e19 Certificate serial: 010D0C9F4328584B7464C1C642182A91DB440880 Authority key identifier: EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa Signing time: Wed 08 Oct 2025 15:04:29 +0000 ROA not before: Wed 08 Oct 2025 15:04:29 +0000 ROA not after: Tue 06 Jan 2026 16:04:29 +0000 asID: 399348 IP address blocks: 169.197.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:64:c1:c6:42:18:2a:91:db:44:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2e2011-65d2-4c1e-87c4-772ec37e8e19 Validity Not Before: Oct 8 15:04:29 2025 GMT Not After : Jan 6 16:04:29 2026 GMT Subject: CN=514ecead-6ee0-4e41-ad08-85947e69d241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:9d:37:61:10:80:ae:b3:af:52:97:c1:5e: a7:1d:73:9a:07:8a:2d:e0:76:4c:e9:58:f7:61:b7: 97:b7:c5:0b:c9:8e:51:0a:21:7a:39:6e:90:ee:17: b5:1d:04:79:d1:db:fb:11:1a:0d:7d:46:dc:7d:6e: 44:52:43:9a:e4:31:17:ae:ad:5c:0f:f3:0d:dd:b0: 44:09:bc:a8:8a:51:52:ed:96:2b:03:9a:3e:ea:1d: 54:a7:4e:b5:1d:7a:40:0f:f9:6c:05:95:cc:fb:c7: 5d:ea:18:ab:04:05:c0:64:d4:35:d0:14:bf:a8:7e: 3d:53:28:79:d0:d8:51:31:19:40:f9:b3:89:c7:fd: e4:73:22:0b:cd:40:a2:64:8a:92:c8:b3:87:b1:d1: 03:4c:de:46:ae:e7:61:0c:78:79:fd:93:70:16:5a: 4b:3a:42:47:09:d4:bf:96:fd:e3:d7:11:a1:60:10: b5:21:0c:c3:d3:3f:f5:d3:f6:5c:a8:b7:29:cb:c0: 66:3d:67:3a:1d:98:9c:2e:db:6a:e6:5e:7a:34:02: 2b:a0:22:55:2e:28:c6:16:2e:15:c1:d3:51:fa:5e: 42:11:3f:46:86:c1:b2:a7:e4:e8:28:a0:be:5f:86: c9:76:0a:ca:4f:ee:27:0f:a7:c2:34:5d:2a:03:68: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:99:C2:DB:72:BF:0A:67:11:32:32:75:B8:46:C9:9B:12:87:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/90f41b4e-5b3c-394f-98b3-1d16a3ec11b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.crl X509v3 Authority Key Identifier: keyid:EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer sbgp-ipAddrBlock: critical IPv4: 169.197.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c7:77:c6:cb:91:8a:0a:44:8b:ed:c8:5d:20:9c:8e:85:87: bd:6e:98:af:71:35:f9:8e:11:2f:a2:4e:9b:6b:e9:8d:03:17: cf:2a:76:c7:61:03:73:c8:ee:f6:93:92:41:df:98:0c:f6:48: 10:7c:ee:e8:a0:54:8b:0d:6a:ca:e1:17:56:53:c2:7c:6e:0a: 94:ef:ad:6a:78:73:92:87:ff:69:0e:c5:2b:46:94:5c:2d:38: 96:96:3b:82:5f:17:4f:6d:7c:56:60:c3:bb:d5:83:30:75:63: 1f:cb:60:0f:ed:f8:63:d5:d4:d0:2d:a9:ea:2e:d9:a3:09:8e: 16:20:9e:3e:32:30:9b:2c:84:37:a1:f0:98:e6:14:98:2a:a5: f5:0c:5f:fc:63:5a:65:dd:c1:58:c7:9f:07:ca:60:7f:6e:7d: 19:a5:cb:b6:a7:7e:61:e8:41:a0:ea:11:0a:ee:49:7d:77:8f: b5:a4:50:1c:b0:8f:5b:80:d8:90:a4:f5:3e:3b:eb:22:f6:53: b0:9f:63:e4:cc:f8:51:21:24:34:e3:de:2b:67:c1:45:0a:d6: bb:23:40:25:94:c4:63:d7:47:e6:4a:14:8d:ec:db:dc:bf:7c: e4:57:dc:e1:b0:5b:3c:c9:64:e0:0d:db:8b:68:cf:41:58:96: dd:1f:5d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0ZMHGQhgqkdtECIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZTIwMTEtNjVkMi00YzFlLTg3YzQtNzcyZWMzN2U4 ZTE5MB4XDTI1MTAwODE1MDQyOVoXDTI2MDEwNjE2MDQyOVowLzEtMCsGA1UEAxMk NTE0ZWNlYWQtNmVlMC00ZTQxLWFkMDgtODU5NDdlNjlkMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtSdN2EQgK6zr1KXwV6nHXOaB4ot4HZM6Vj3 YbeXt8ULyY5RCiF6OW6Q7he1HQR50dv7ERoNfUbcfW5EUkOa5DEXrq1cD/MN3bBE CbyoilFS7ZYrA5o+6h1Up061HXpAD/lsBZXM+8dd6hirBAXAZNQ10BS/qH49Uyh5 0NhRMRlA+bOJx/3kcyILzUCiZIqSyLOHsdEDTN5GrudhDHh5/ZNwFlpLOkJHCdS/ lv3j1xGhYBC1IQzD0z/10/ZcqLcpy8BmPWc6HZicLttq5l56NAIroCJVLijGFi4V wdNR+l5CET9GhsGyp+ToKKC+X4bJdgrKT+4nD6fCNF0qA2hBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTFmcLbcr8KZxEyMnW4RsmbEoeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYzJl MjAxMS02NWQyLTRjMWUtODdjNC03NzJlYzM3ZThlMTkvOTBmNDFiNGUtNWIzYy0z OTRmLTk4YjMtMWQxNmEzZWMxMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWMyZTIwMTEtNjVkMi00YzFlLTg3 YzQtNzcyZWMzN2U4ZTE5L2FjMmUyMDExLTY1ZDItNGMxZS04N2M0LTc3MmVjMzdl OGUxOS5jcmwwHwYDVR0jBBgwFoAU7pgd+NHP41bYIVHfRxb3xUMFCyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYzJlMjAxMS02NWQyLTRjMWUtODdjNC03NzJl YzM3ZThlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqcWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfHd8bLkYoKRIvtyF0gnI6Fh71umK9xNfmOES+iTptr6Y0DF88qdsdh A3PI7vaTkkHfmAz2SBB87uigVIsNasrhF1ZTwnxuCpTvrWp4c5KH/2kOxStGlFwt OJaWO4JfF09tfFZgw7vVgzB1Yx/LYA/t+GPV1NAtqeou2aMJjhYgnj4yMJsshDeh 8JjmFJgqpfUMX/xjWmXdwVjHnwfKYH9ufRmly7anfmHoQaDqEQruSX13j7WkUByw j1uA2JCk9T476yL2U7CfY+TM+FEhJDTj3itnwUUK1rsjQCWUxGPXR+ZKFI3s29y/ fORX3OGwWzzJZOAN24toz0FYlt0fXfs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:00:53 2025 by rpki-client