$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa File: 1dd583f8-9804-34c8-ae29-0206a0aff754.roa (raw, json) Hash identifier: ZNU2lW+6p5APsXDW0sroL9zcTubBewSEPgIJwODVy/0= Subject key identifier: 89:10:4E:6B:78:61:C5:7B:77:03:18:40:3E:FE:EA:BE:3F:28:93:5F Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B3987078F4BC34C93D3C5C000 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 5738 IP address blocks: 209.198.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:07:8f:4b:c3:4c:93:d3:c5:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=ba8fb719-c044-40b5-b9c9-e5cbc6e7ddde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:88:c8:90:15:42:bf:db:7c:d7:24:0e:85: b0:71:f1:c2:99:80:ea:10:fa:f3:46:3c:d1:e0:40: 7c:86:28:1b:77:cd:32:61:7c:76:bb:93:66:bd:eb: f6:9a:bf:00:4d:f8:71:8d:93:b8:78:48:4c:08:ff: a7:0c:cb:70:ce:59:ff:39:f1:fc:4c:bc:6d:9b:14: 21:47:ea:81:a9:b0:20:c2:e4:b3:33:6e:0c:27:91: 13:58:3c:5f:e7:83:63:30:6a:95:67:2f:bc:41:d5: b9:e2:f0:e6:78:5e:0f:75:a1:fa:1c:37:50:be:5f: 18:84:d7:56:bc:7e:8c:8f:99:bf:89:42:cf:be:b9: 5d:96:14:60:22:8f:79:4e:6c:92:0e:bc:c4:68:b8: 25:12:95:a9:e1:3c:48:02:3b:de:2a:36:e7:49:f9: 1d:87:9e:b8:fd:d3:56:58:29:c8:9b:39:08:11:e3: c3:68:48:ad:1d:60:8c:df:5f:5b:1e:f5:fb:7c:db: b7:27:ac:3e:84:01:02:3f:7f:07:ff:1f:62:21:01: 17:d7:af:5b:5b:a7:a5:8c:69:3f:3d:b7:47:79:4b: 57:fb:95:7e:09:c5:b1:14:e3:13:4f:fb:a7:a9:85: 51:38:d6:2e:ac:34:81:22:cd:e7:17:66:eb:1a:dd: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:10:4E:6B:78:61:C5:7B:77:03:18:40:3E:FE:EA:BE:3F:28:93:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1dd583f8-9804-34c8-ae29-0206a0aff754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ce:fd:3b:db:f0:05:49:e1:8b:b7:9f:e9:e4:08:9d:fa:cc: aa:b4:35:7a:0b:b7:27:a6:c2:54:5b:62:af:1e:b3:ba:a0:7a: 22:6e:15:20:33:cd:3f:53:e0:3b:8f:2f:36:5b:2e:29:e4:b8: 4c:1d:19:58:b2:10:f4:7c:d3:8a:a8:62:fa:d7:23:78:ed:e0: dc:2d:5f:59:2f:8e:94:d7:7d:68:7a:ae:05:9d:39:77:57:e3: cc:9d:aa:27:5d:93:5f:bc:f7:dc:2e:c2:ac:94:5c:50:b8:97: 50:67:7b:98:3d:9e:f8:b5:79:bd:3e:ab:94:1b:69:15:71:ef: 67:dc:25:2c:a1:a6:f4:34:6b:db:29:de:e6:78:49:0e:71:e2: 50:df:52:e9:e5:5e:c5:c5:cf:3d:20:98:c4:00:99:17:ea:80: a6:46:dc:a5:d0:2e:61:77:8f:9c:b4:95:ed:f2:4d:22:cb:4f: e8:d7:14:85:ae:41:0a:01:bc:ac:be:04:d2:b2:4c:fd:1f:dc: 09:86:aa:82:47:22:70:34:ef:77:fa:ae:d1:6f:67:72:ab:b2: ef:8b:90:9f:4d:d1:a4:34:af:bc:a7:20:db:6f:98:5e:cc:73: 01:0d:20:b4:54:7a:cb:5b:71:b7:bf:73:fa:98:de:05:9b:bb: b6:f3:fb:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwePS8NMk9PFwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YmE4ZmI3MTktYzA0NC00MGI1LWI5YzktZTVjYmM2ZTdkZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqeIyJAVQr/bfNckDoWwcfHCmYDqEPrzRjzR 4EB8higbd80yYXx2u5Nmvev2mr8ATfhxjZO4eEhMCP+nDMtwzln/OfH8TLxtmxQh R+qBqbAgwuSzM24MJ5ETWDxf54NjMGqVZy+8QdW54vDmeF4PdaH6HDdQvl8YhNdW vH6Mj5m/iULPvrldlhRgIo95TmySDrzEaLglEpWp4TxIAjveKjbnSfkdh564/dNW WCnImzkIEePDaEitHWCM319bHvX7fNu3J6w+hAECP38H/x9iIQEX169bW6eljGk/ PbdHeUtX+5V+CcWxFOMTT/unqYVRONYurDSBIs3nF2brGt2w2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkQTmt4YcV7dwMYQD7+6r4/KJNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWRkNTgzZjgtOTgwNC0z NGM4LWFlMjktMDIwNmEwYWZmNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXO/Tvb8AVJ4Yu3n+nkCJ36zKq0NXoLtyemwlRbYq8es7qgeiJuFSAz zT9T4DuPLzZbLinkuEwdGViyEPR804qoYvrXI3jt4NwtX1kvjpTXfWh6rgWdOXdX 48ydqiddk1+899wuwqyUXFC4l1Bne5g9nvi1eb0+q5QbaRVx72fcJSyhpvQ0a9sp 3uZ4SQ5x4lDfUunlXsXFzz0gmMQAmRfqgKZG3KXQLmF3j5y0le3yTSLLT+jXFIWu QQoBvKy+BNKyTP0f3AmGqoJHInA073f6rtFvZ3Krsu+LkJ9N0aQ0r7ynINtvmF7M cwENILRUestbcbe/c/qY3gWbu7bz+70= -----END CERTIFICATE-----Generated at Sat Oct 11 08:36:37 2025 by rpki-client