$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa File: 219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa (raw, json) Hash identifier: xshT+SAaZ1vp72ojaCZ5gKfjkjjCr2HcjRGcBoMhjmk= Subject key identifier: C9:BE:AF:D8:CC:17:B3:23:CE:8B:AD:73:84:77:20:82:FA:13:7E:95 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B3DB703F5CFA763FD29442700 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 19802 IP address blocks: 216.238.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:03:f5:cf:a7:63:fd:29:44:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=911d6b5a-6bbc-4114-bd43-35ae3a3fe2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:3d:f3:a2:11:57:c6:c0:d5:52:c5:0e:75: e8:54:d7:62:03:3a:89:53:e4:81:5f:44:fa:74:6b: 03:94:69:52:f7:2e:9d:c9:cb:2c:56:d8:18:51:83: 31:bd:0b:02:ba:87:ba:ea:af:ee:73:08:e6:bf:59: 80:fd:7e:7d:5a:90:24:bd:7a:50:3b:5c:6f:4a:85: 80:e1:f2:ae:eb:d0:86:5c:15:31:de:10:f5:20:62: c3:6f:65:12:01:0c:d6:3a:ef:d3:d0:97:fa:ac:f1: 8b:f9:ae:67:a3:e9:44:09:da:8a:a1:f0:b2:f0:69: df:8a:ce:3a:70:07:2c:01:61:f0:d4:e5:00:61:ca: 80:b8:83:9c:76:cf:f3:ed:e8:05:f1:49:e2:4a:3e: b5:1e:63:3d:79:4e:bc:54:af:1d:c7:f7:0d:4f:96: 6f:91:39:26:ba:ed:7b:2a:06:b6:6a:d4:da:24:f4: e0:74:82:73:eb:7e:ed:02:de:3d:86:01:35:8f:89: 9d:47:4a:29:5c:4d:c5:09:df:24:81:0a:9d:bb:74: 88:fa:01:34:bc:77:36:6b:24:22:49:1a:59:8f:d1: 60:e1:6f:29:22:e5:6a:ea:43:a7:33:82:b0:5b:9f: 41:31:2f:14:d8:2c:b1:af:48:d0:d2:93:48:ea:6c: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:AF:D8:CC:17:B3:23:CE:8B:AD:73:84:77:20:82:FA:13:7E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/219d4596-5675-30ee-8c20-8bd6e69ec2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:09:c6:39:10:66:97:9b:31:01:99:9c:bf:2c:73:0e:f3:3f: f3:2c:93:f9:f6:cd:ed:e4:7c:47:5c:f0:ec:ba:dc:ff:26:7a: df:40:48:11:1e:5c:3e:96:2b:35:23:60:f9:b9:e8:93:5a:b2: 88:1d:9c:92:70:de:5f:cf:53:2b:3c:84:ee:c8:d7:e1:f1:02: 1d:b4:50:bc:66:00:db:b5:73:08:11:f8:dc:28:2e:36:15:39: 42:dd:02:85:09:6f:38:c6:4b:f0:e6:dd:24:f6:cd:b6:2e:7f: 3e:f5:96:c8:dc:0b:07:ba:4d:b7:66:c2:06:ef:6d:3d:78:b5: 7f:d3:75:61:f0:eb:cf:a0:bd:30:96:d2:8f:24:0b:58:70:71: 14:17:91:20:df:b3:72:4d:d0:86:aa:15:6a:16:41:84:91:ad: 4c:ef:44:5d:f0:35:a4:b7:3e:b2:d4:fd:9b:ee:80:59:c5:66: dd:38:e7:c0:28:1a:db:fc:7c:c7:97:4b:b7:f4:82:9b:30:c9: 8a:d3:6e:46:eb:69:91:7d:f6:1e:8b:c5:c2:02:8f:ca:da:79: a1:a3:a8:e6:3e:9c:9c:4c:b0:e9:2b:d0:a7:54:b4:25:fe:32: 3f:d0:ce:2d:fb:82:7a:3d:32:18:ba:cf:dd:a3:46:29:b3:2d: 37:92:9a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twP1z6dj/SlEJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTExZDZiNWEtNmJiYy00MTE0LWJkNDMtMzVhZTNhM2ZlMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1I986IRV8bA1VLFDnXoVNdiAzqJU+SBX0T6 dGsDlGlS9y6dycssVtgYUYMxvQsCuoe66q/ucwjmv1mA/X59WpAkvXpQO1xvSoWA 4fKu69CGXBUx3hD1IGLDb2USAQzWOu/T0Jf6rPGL+a5no+lECdqKofCy8Gnfis46 cAcsAWHw1OUAYcqAuIOcds/z7egF8UniSj61HmM9eU68VK8dx/cNT5ZvkTkmuu17 Kga2atTaJPTgdIJz637tAt49hgE1j4mdR0opXE3FCd8kgQqdu3SI+gE0vHc2ayQi SRpZj9Fg4W8pIuVq6kOnM4KwW59BMS8U2Cyxr0jQ0pNI6mwTqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm+r9jMF7Mjzoutc4R3IIL6E36VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjE5ZDQ1OTYtNTY3NS0z MGVlLThjMjAtOGJkNmU2OWVjMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMJxjkQZpebMQGZnL8scw7zP/Msk/n2ze3kfEdc8Oy63P8met9ASBEe XD6WKzUjYPm56JNasogdnJJw3l/PUys8hO7I1+HxAh20ULxmANu1cwgR+NwoLjYV OULdAoUJbzjGS/Dm3ST2zbYufz71lsjcCwe6TbdmwgbvbT14tX/TdWHw68+gvTCW 0o8kC1hwcRQXkSDfs3JN0IaqFWoWQYSRrUzvRF3wNaS3PrLU/ZvugFnFZt0458Ao Gtv8fMeXS7f0gpswyYrTbkbraZF99h6LxcICj8raeaGjqOY+nJxMsOkr0KdUtCX+ Mj/Qzi37gno9Mhi6z92jRimzLTeSmk8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:39:11 2025 by rpki-client