$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa File: ae47f75a-300c-3406-a4a2-962217f89fec.roa (raw, json) Hash identifier: UFcjWzh+ZvmvwQIpnUDJ3j54E2z47U1fk08pfJCS9GA= Subject key identifier: B2:2B:17:71:6B:C1:3E:91:56:21:39:F7:C5:4C:2D:51:F6:99:DD:81 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584AFC1BF95025F876014FCD4B80 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 394018 IP address blocks: 199.5.26.0/24 maxlen: 24 2001:500:a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f9:50:25:f8:76:01:4f:cd:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=20afa116-620c-421b-9e1e-32b6b79a5cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:94:31:47:26:58:44:44:b0:11:dc:56:4d:a9: 32:3c:a9:6a:27:55:9c:11:11:6a:69:b2:b8:11:c2: 8f:05:05:8d:5c:09:1c:78:da:c1:7a:42:40:ba:04: 47:34:86:9f:89:92:9a:85:2f:c3:c6:8e:4b:58:cb: 79:36:05:62:1b:2a:cd:ea:dd:d7:73:3b:2e:ee:67: 3c:c3:3a:ae:1d:68:b8:3c:e5:ad:ec:71:70:06:6b: 9e:a9:a3:a8:87:77:61:76:42:3a:ae:e4:b9:1f:87: 76:d5:41:a7:51:b3:4d:d0:b7:b6:1f:30:bd:f3:cb: 69:1f:8e:3a:38:c0:ea:37:5c:ad:d3:9e:c2:27:64: 33:72:41:75:ea:c3:85:da:f5:2e:a3:33:66:60:4f: 00:e1:58:8d:f2:50:3a:51:6f:fe:b6:04:ab:24:80: e8:42:96:45:65:7b:d2:b5:40:8e:aa:6c:21:11:d0: 9b:c6:5e:4d:03:9f:8f:7b:d2:b5:75:d6:f5:45:78: a8:c4:15:56:e8:7d:04:cb:b7:75:fc:17:08:e0:62: 7b:2e:61:05:1c:d6:e6:f9:bf:92:ae:7b:c1:17:54: de:b6:8d:1f:06:10:48:52:da:9c:04:9e:f9:8a:64: 8b:55:c0:a5:37:90:21:21:84:27:d4:52:a1:99:2b: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:17:71:6B:C1:3E:91:56:21:39:F7:C5:4C:2D:51:F6:99:DD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ae47f75a-300c-3406-a4a2-962217f89fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 199.5.26.0/24 IPv6: 2001:500:a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c3:11:ce:eb:97:be:e8:ed:e4:4b:88:99:e1:8b:a0:b7:b9: b1:f9:c9:18:0f:9b:7a:b2:b6:80:e0:5d:2f:e1:74:59:4e:9a: 65:8c:32:4e:4d:4d:f2:9f:55:ed:41:62:15:71:54:11:52:7f: fb:20:ad:52:84:9b:2f:a6:0a:41:61:63:02:54:47:33:98:8e: ae:11:c4:3a:b3:48:66:5c:a5:ce:04:1b:62:4d:21:58:50:2a: 98:55:56:e1:da:2a:96:38:d9:a0:97:1b:39:92:b4:4e:ea:f5: dd:03:e0:6a:50:3d:37:47:f4:f7:0e:e6:af:18:4d:cd:04:cf: f8:2e:05:66:5d:29:28:44:a8:48:2b:78:be:d6:da:05:84:cf: 9b:c3:a5:b5:39:3a:e3:6c:62:a7:98:3d:f8:83:19:eb:65:a0: e7:b2:cf:24:19:60:3e:1f:ab:9b:23:c0:3c:e3:23:b7:57:d2: 0a:b6:a2:13:8e:61:0d:1b:de:fc:06:5e:93:e7:f5:6d:44:cc: f9:bb:c1:2d:12:d7:4f:d2:b9:b3:e9:16:bb:c0:28:0d:58:51: 10:44:da:5e:23:74:e1:de:46:46:9b:fd:29:ec:3a:4d:70:c1: 60:3e:3b:0e:85:32:ee:1d:d3:37:7c:46:f5:13:74:ae:90:36: 0b:38:36:f8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEr8G/lQJfh2AU/NS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjBhZmExMTYtNjIwYy00MjFiLTllMWUtMzJiNmI3OWE1Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85QxRyZYRESwEdxWTakyPKlqJ1WcERFqabK4 EcKPBQWNXAkceNrBekJAugRHNIafiZKahS/Dxo5LWMt5NgViGyrN6t3Xczsu7mc8 wzquHWi4POWt7HFwBmueqaOoh3dhdkI6ruS5H4d21UGnUbNN0Le2HzC988tpH446 OMDqN1yt057CJ2QzckF16sOF2vUuozNmYE8A4ViN8lA6UW/+tgSrJIDoQpZFZXvS tUCOqmwhEdCbxl5NA5+Pe9K1ddb1RXioxBVW6H0Ey7d1/BcI4GJ7LmEFHNbm+b+S rnvBF1Teto0fBhBIUtqcBJ75imSLVcClN5AhIYQn1FKhmSviKQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLIrF3FrwT6RViE598VMLVH2md2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvYWU0N2Y3NWEtMzAwYy0z NDA2LWE0YTItOTYyMjE3Zjg5ZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxwUaMA8E AgACMAkDBwAgAQUAAKkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAncMRzuuXvujt5EuImeGLoLe5sfnJGA+b erK2gOBdL+F0WU6aZYwyTk1N8p9V7UFiFXFUEVJ/+yCtUoSbL6YKQWFjAlRHM5iO rhHEOrNIZlylzgQbYk0hWFAqmFVW4doqljjZoJcbOZK0Tur13QPgalA9N0f09w7m rxhNzQTP+C4FZl0pKESoSCt4vtbaBYTPm8OltTk642xip5g9+IMZ62Wg57LPJBlg Ph+rmyPAPOMjt1fSCraiE45hDRve/AZek+f1bUTM+bvBLRLXT9K5s+kWu8AoDVhR EETaXiN04d5GRpv9Kew6TXDBYD47DoUy7h3TN3xG9RN0rpA2Czg2+A== -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:44 2025 by rpki-client