$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa File: 1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa (raw, json) Hash identifier: 8NYaqT7hXX9v1uxZCyjSEGUBnF+dC41fIA75y3WwnVM= Subject key identifier: 99:EF:8F:5B:AE:99:AF:43:65:1C:93:8B:B4:13:0D:6C:56:81:2E:BE Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4D11DCAAC2307F648F507200 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 62929 IP address blocks: 216.234.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:dc:aa:c2:30:7f:64:8f:50:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=c8f55683-692a-499b-b5dd-3696a9b640a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:58:fb:db:de:28:ac:bb:92:81:e7:a1:7c: b8:9d:7d:2f:cd:b2:61:e8:f3:7b:74:f7:8c:e4:92: 9d:16:fd:b8:15:cf:66:8e:07:35:84:38:57:b1:09: 66:8a:26:91:68:32:3b:89:42:7c:b4:70:06:6d:0b: 21:37:c6:3b:88:f6:56:9f:4a:79:e0:e8:0f:d8:15: 64:38:f5:5d:a0:f1:18:12:cf:57:f9:e4:ec:f9:ac: ea:5d:3d:67:d6:c9:4d:92:f9:a5:b2:2f:1b:c7:e1: ea:90:3c:65:d1:20:ed:e7:58:72:1e:cc:10:6f:98: 83:13:9d:70:d2:de:ae:f2:69:00:fc:7b:98:7c:6a: 5b:2a:72:a9:4a:07:39:b0:3d:14:c2:04:ba:91:5b: 56:0b:71:16:37:75:f0:40:f6:d7:92:4a:32:06:e5: 02:af:8d:03:11:e9:7c:01:47:5a:39:12:79:98:16: 5c:db:15:7a:4b:c3:45:c3:a4:08:e2:c9:34:bb:0a: 6b:46:5d:cc:15:7a:e2:ef:60:62:2f:90:27:4f:6f: 98:f2:6c:40:7c:da:b2:ba:67:64:1a:61:6c:54:f1: 58:54:b7:98:25:93:ee:e9:82:92:21:c4:66:a2:88: 81:0e:b3:ad:c1:62:50:ac:eb:62:38:22:93:62:4a: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:8F:5B:AE:99:AF:43:65:1C:93:8B:B4:13:0D:6C:56:81:2E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.234.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b4:bb:f6:f4:ed:90:fe:1b:ca:7d:ea:f1:e4:4c:e1:42:e1: ee:90:04:45:ec:bd:69:6b:f4:51:c4:40:c4:b3:ff:e6:cf:3a: 9d:1a:fc:1b:46:ff:8c:47:e9:0f:b9:17:04:17:2a:40:35:eb: 0f:13:44:4a:c7:66:35:ef:f2:4d:f9:fb:36:72:1a:cd:ea:ff: 56:43:3a:ce:35:34:d2:20:6b:ae:2b:ca:a4:7c:34:b1:31:46: d6:7b:02:e8:be:ef:6e:6d:de:19:73:70:19:40:d1:bd:22:9e: 9a:fe:a9:89:59:e3:e4:40:a5:2c:bc:b1:c7:d6:7b:89:92:f5: c4:2d:a5:97:49:a4:00:d7:fd:e1:90:42:d4:2b:43:15:b1:ce: 81:0f:98:8a:03:e5:03:bc:59:5c:cc:96:66:56:cf:ad:88:ea: b1:a5:25:a5:34:96:82:21:34:f3:ff:8e:45:ff:d6:28:df:c8: 23:32:9f:e5:c1:91:4e:f2:89:0a:4f:73:53:72:21:26:51:d7: d2:b4:60:87:9f:22:b4:7d:ae:da:a1:ea:bf:a1:a6:1c:bd:a9: 52:da:2a:1c:0c:0b:cd:af:36:84:40:18:94:ce:10:45:83:5e: 4f:58:76:fc:0b:e1:c5:b0:0a:5f:d0:4d:8a:6f:e1:a4:89:84: e9:85:88:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdyqwjB/ZI9QcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YzhmNTU2ODMtNjkyYS00OTliLWI1ZGQtMzY5NmE5YjY0MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl5Y+9veKKy7koHnoXy4nX0vzbJh6PN7dPeM 5JKdFv24Fc9mjgc1hDhXsQlmiiaRaDI7iUJ8tHAGbQshN8Y7iPZWn0p54OgP2BVk OPVdoPEYEs9X+eTs+azqXT1n1slNkvmlsi8bx+HqkDxl0SDt51hyHswQb5iDE51w 0t6u8mkA/HuYfGpbKnKpSgc5sD0UwgS6kVtWC3EWN3XwQPbXkkoyBuUCr40DEel8 AUdaORJ5mBZc2xV6S8NFw6QI4sk0uwprRl3MFXri72BiL5AnT2+Y8mxAfNqyumdk GmFsVPFYVLeYJZPu6YKSIcRmooiBDrOtwWJQrOtiOCKTYko6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnvj1uuma9DZRyTi7QTDWxWgS6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWUxYzM4ODktOWEzYi0z MmY3LWE2ZjAtNWJkY2VhMTk0ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK0u/b07ZD+G8p96vHkTOFC4e6QBEXsvWlr9FHEQMSz/+bPOp0a/BtG /4xH6Q+5FwQXKkA16w8TRErHZjXv8k35+zZyGs3q/1ZDOs41NNIga64ryqR8NLEx RtZ7Aui+725t3hlzcBlA0b0inpr+qYlZ4+RApSy8scfWe4mS9cQtpZdJpADX/eGQ QtQrQxWxzoEPmIoD5QO8WVzMlmZWz62I6rGlJaU0loIhNPP/jkX/1ijfyCMyn+XB kU7yiQpPc1NyISZR19K0YIefIrR9rtqh6r+hphy9qVLaKhwMC82vNoRAGJTOEEWD Xk9YdvwL4cWwCl/QTYpv4aSJhOmFiFk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:31:44 2025 by rpki-client