$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa File: 0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa (raw, json) Hash identifier: FjQhHyobRLaSJCsahBtiErG3ZdjFCmRZfqz7WvNhv44= Subject key identifier: 20:08:32:E2:E2:08:E2:94:F8:59:AC:C9:CD:6E:47:65:AA:3A:92:92 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4081B127F6C5314F37FD2180 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 21547 IP address blocks: 64.140.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:b1:27:f6:c5:31:4f:37:fd:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0a289fa4-51ec-4ce4-a418-ca555370013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:14:1a:75:6d:17:86:2a:bf:12:d9:6f:40: 31:60:18:82:d4:bc:54:f9:64:09:b3:89:05:cb:91: 29:b9:f8:a1:01:9b:89:5f:80:94:ee:c9:c6:ff:d5: 1d:78:43:a3:66:37:20:84:1b:31:92:d6:ea:fa:cf: 6f:f5:25:20:d9:66:d1:c8:03:ec:01:4d:d8:e2:f6: cd:d1:1e:34:ab:d6:b3:6e:a2:5e:b7:02:93:5f:09: 14:a5:fc:6a:19:d3:37:b7:20:d7:6a:63:6f:16:24: 10:2a:dc:f2:f9:89:3d:6f:64:ce:13:8a:06:c5:e2: a0:91:80:f2:5c:d9:a8:6b:0f:64:96:80:31:e9:e7: 16:63:41:d5:06:39:24:35:2a:fa:b0:00:cb:92:60: 54:56:0c:fd:f9:a3:e9:27:d2:10:61:15:b2:d4:c7: bd:ea:11:24:4b:d1:aa:37:f1:de:1e:9d:6e:24:f5: 3c:5d:32:cd:88:f3:f2:08:a9:be:91:ba:7a:a4:1a: f9:e3:07:82:0c:06:c5:13:95:1b:e8:2a:e4:ec:f4: a1:61:41:c1:b7:bd:ee:a1:db:0e:50:1e:54:a8:94: 78:d1:06:90:ad:3d:1c:22:4d:65:46:9b:3f:9f:8e: a4:e5:07:bc:d2:e3:29:9f:0e:23:d8:c2:b5:6b:d7: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:08:32:E2:E2:08:E2:94:F8:59:AC:C9:CD:6E:47:65:AA:3A:92:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:27:ba:03:3c:c5:5b:b7:4f:fb:cb:3e:ac:61:3d:b8:55:0b: 36:f0:9d:5d:04:1d:c3:16:5a:80:7e:08:66:8b:88:35:af:4c: 56:1b:c3:6c:fa:98:03:4e:6a:02:85:92:ab:d1:cf:df:69:8f: cd:52:5f:fb:b4:17:b6:10:28:e8:10:37:f4:36:7f:12:c0:23: 35:13:7c:8e:5d:e7:9b:d1:bc:59:7f:eb:44:b7:3b:33:a0:eb: 4e:ad:33:a3:25:4d:5a:60:39:ff:bd:5b:09:1c:4a:92:77:8b: 93:05:fc:81:26:20:b4:56:aa:23:5d:d9:88:af:42:41:58:9f: a3:d2:11:38:a5:85:45:2a:61:ae:a6:85:6d:a1:21:49:98:39: e3:5a:56:69:e5:c6:e1:09:bb:07:0d:1c:bb:a0:11:37:8a:b1: 1d:74:7e:26:29:45:17:b7:5f:92:2c:97:9a:83:c8:89:0e:24: ce:1b:8c:bc:03:f3:43:5d:a7:53:22:5e:0b:e0:6e:9e:95:08: 41:8e:96:9e:d2:42:cf:94:68:cd:48:91:f9:cd:43:0a:d9:6d: 89:27:6e:af:2a:bc:60:a5:45:8a:32:ae:cd:da:26:0e:43:09: 5d:76:1b:8f:7f:ee:94:78:2a:52:85:8e:4c:e4:18:85:6a:f7: 07:8f:37:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbEn9sUxTzf9IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGEyODlmYTQtNTFlYy00Y2U0LWE0MTgtY2E1NTUzNzAwMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlQUGnVtF4YqvxLZb0AxYBiC1LxU+WQJs4kF y5EpufihAZuJX4CU7snG/9UdeEOjZjcghBsxktbq+s9v9SUg2WbRyAPsAU3Y4vbN 0R40q9azbqJetwKTXwkUpfxqGdM3tyDXamNvFiQQKtzy+Yk9b2TOE4oGxeKgkYDy XNmoaw9kloAx6ecWY0HVBjkkNSr6sADLkmBUVgz9+aPpJ9IQYRWy1Me96hEkS9Gq N/HeHp1uJPU8XTLNiPPyCKm+kbp6pBr54weCDAbFE5Ub6Crk7PShYUHBt73uodsO UB5UqJR40QaQrT0cIk1lRps/n46k5Qe80uMpnw4j2MK1a9dSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAIMuLiCOKU+Fmsyc1uR2WqOpKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRiZDAzYTAtNWVkYS0z YmY1LWI5MDItYmQyZmEzZTMxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANknugM8xVu3T/vLPqxhPbhVCzbwnV0EHcMWWoB+CGaLiDWvTFYbw2z6 mANOagKFkqvRz99pj81SX/u0F7YQKOgQN/Q2fxLAIzUTfI5d55vRvFl/60S3OzOg 606tM6MlTVpgOf+9WwkcSpJ3i5MF/IEmILRWqiNd2YivQkFYn6PSETilhUUqYa6m hW2hIUmYOeNaVmnlxuEJuwcNHLugETeKsR10fiYpRRe3X5Isl5qDyIkOJM4bjLwD 80Ndp1MiXgvgbp6VCEGOlp7SQs+UaM1IkfnNQwrZbYknbq8qvGClRYoyrs3aJg5D CV12G49/7pR4KlKFjkzkGIVq9wePNxo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:33:13 2025 by rpki-client