$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1093e51c-6943-386b-8ac7-fed177a2d38e.roa File: 1093e51c-6943-386b-8ac7-fed177a2d38e.roa (raw, json) Hash identifier: rvxiPK2E6PDOt/xcFz/vSHIgMqkvzfrfW7jtFVSNnZE= Subject key identifier: 77:62:98:C4:1C:CF:E7:94:FD:8B:61:AD:CD:A5:F2:B6:0B:13:B7:E8 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1BF3D0DCA40500DA26F84 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1093e51c-6943-386b-8ac7-fed177a2d38e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396971 IP address blocks: 216.27.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bf:3d:0d:ca:40:50:0d:a2:6f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e5359522-6a11-4c68-89be-f56d8b81e6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:2a:f8:9f:a2:82:45:e8:72:68:1a:89:ad: 15:1e:fe:c2:6e:35:fe:cf:77:2e:83:f0:43:40:9f: 02:39:20:bd:ca:1e:2c:23:f7:bf:a3:dd:e5:ad:03: 57:83:7e:10:c7:0d:eb:99:c8:bb:6f:68:fc:ae:08: 69:80:89:48:4e:6a:ca:b2:dd:61:4c:74:99:e6:d9: b7:9d:ab:f4:c4:00:9b:ff:9c:27:02:4c:f5:20:cb: ae:3b:e7:36:22:e3:86:cb:98:fc:db:5e:cb:44:42: be:fc:d1:e5:de:13:c1:68:e0:67:99:31:66:b3:da: e9:4e:dc:90:c0:ef:1c:54:c5:a8:0d:f4:98:d5:e8: 3a:7e:02:45:46:fa:d2:f8:b8:7f:6b:23:5a:6e:7d: dd:df:ea:44:92:6c:99:e5:94:53:ac:c2:58:14:7a: 96:fb:66:cf:2f:ea:67:9f:99:96:80:1f:ae:be:b5: a7:17:0b:a5:66:f5:ae:4a:da:7a:da:5d:bc:2e:04: 76:cf:09:74:ea:48:7b:c1:f3:9a:eb:41:88:71:72: 82:1e:98:42:a9:cd:5b:47:ba:37:2b:49:b5:f1:ec: d9:86:a4:2a:5e:12:eb:79:20:cc:d4:06:cf:ee:e7: ee:bf:fc:48:ed:9e:05:b6:89:8a:c8:f2:9c:f5:6c: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:62:98:C4:1C:CF:E7:94:FD:8B:61:AD:CD:A5:F2:B6:0B:13:B7:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1093e51c-6943-386b-8ac7-fed177a2d38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.27.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:16:0d:c2:ae:8a:0e:7f:5b:7c:e2:c8:c3:71:2e:b8:af:0b: f8:62:ca:8f:b4:aa:f2:29:5f:49:59:ee:51:5a:ce:50:13:50: df:2d:78:c8:c4:9d:ee:8e:c8:d4:dc:91:8f:59:92:d6:d7:d5: e5:d7:22:2f:1d:c1:09:8b:de:6e:70:b2:6b:b5:f6:23:6a:38: 61:31:6c:92:a8:8e:47:59:59:1b:6c:9d:8d:1e:9d:db:b0:57: 42:a7:75:c7:6c:5f:7b:44:96:5e:f8:a5:a5:32:4e:6e:b2:27: 3d:a4:90:cd:f7:a8:87:a2:cc:2c:2a:c3:51:d5:fe:37:7d:18: f3:eb:3d:f6:66:ff:4c:ca:39:e5:47:44:fa:c1:75:75:44:85: 2e:07:f7:44:1a:d2:ef:09:dc:53:86:d7:cc:0b:d9:05:76:08: 7d:07:0d:06:5a:ed:25:75:9a:a6:59:32:73:06:b3:44:13:4e: 31:3c:0d:f0:35:a5:42:bc:8e:47:c0:ba:8e:98:40:f7:00:f9: 01:2a:1f:4b:ad:69:77:b6:c5:2e:01:a9:c2:59:44:b0:35:34: fa:3b:65:20:76:2e:e3:8e:42:0d:b4:86:16:19:6b:fc:0f:30: cd:f5:f0:fc:3a:36:72:1f:11:5e:c0:43:75:5f:a1:66:f1:1a: 52:05:85:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b89DcpAUA2ib4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzNTk1MjItNmExMS00YzY4LTg5YmUtZjU2ZDhiODFlNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVkq+J+igkXocmgaia0VHv7CbjX+z3cug/BD QJ8COSC9yh4sI/e/o93lrQNXg34Qxw3rmci7b2j8rghpgIlITmrKst1hTHSZ5tm3 nav0xACb/5wnAkz1IMuuO+c2IuOGy5j8217LREK+/NHl3hPBaOBnmTFms9rpTtyQ wO8cVMWoDfSY1eg6fgJFRvrS+Lh/ayNabn3d3+pEkmyZ5ZRTrMJYFHqW+2bPL+pn n5mWgB+uvrWnFwulZvWuStp62l28LgR2zwl06kh7wfOa60GIcXKCHphCqc1bR7o3 K0m18ezZhqQqXhLreSDM1AbP7ufuv/xI7Z4FtomKyPKc9WzSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdimMQcz+eU/Ythrc2l8rYLE7foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMTA5M2U1MWMtNjk0My0z ODZiLThhYzctZmVkMTc3YTJkMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Bt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYWDcKuig5/W3ziyMNxLrivC/hiyo+0qvIpX0lZ7lFazlATUN8teMjE ne6OyNTckY9ZktbX1eXXIi8dwQmL3m5wsmu19iNqOGExbJKojkdZWRtsnY0enduw V0KndcdsX3tEll74paUyTm6yJz2kkM33qIeizCwqw1HV/jd9GPPrPfZm/0zKOeVH RPrBdXVEhS4H90Qa0u8J3FOG18wL2QV2CH0HDQZa7SV1mqZZMnMGs0QTTjE8DfA1 pUK8jkfAuo6YQPcA+QEqH0utaXe2xS4BqcJZRLA1NPo7ZSB2LuOOQg20hhYZa/wP MM318Pw6NnIfEV7AQ3VfoWbxGlIFhTc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:33:01 2025 by rpki-client