$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa File: 2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa (raw, json) Hash identifier: BdYL/kv0qjL3C7LQsLfrfIykubZ9d2XbhvygXzWHIfY= Subject key identifier: 31:1A:21:E8:A0:72:9E:CC:FB:CE:21:CE:C2:E3:70:F0:C4:54:D8:A1 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1BE6071FA16918F1CEE00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14477 IP address blocks: 216.59.69.0/24 maxlen: 24 216.59.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:be:60:71:fa:16:91:8f:1c:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f7208ca7-ec95-46b2-8fef-fc1bfd5ef891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:eb:c5:95:31:1c:84:97:bd:80:38:71:f5: 32:09:5c:e5:85:bc:26:4e:a9:ac:e0:60:9d:14:a6: 58:d7:40:67:2e:e6:d1:a5:03:1f:b6:e7:52:74:0f: 6d:87:ac:85:81:a9:67:61:a8:76:2f:44:58:6c:d7: 22:32:a0:5e:e5:4f:90:b1:cd:4e:4d:06:ca:5c:48: c3:95:11:c4:15:4d:12:87:0e:51:86:01:4d:b1:07: 5b:fb:ee:e4:49:11:75:26:ed:f9:e1:90:15:ff:15: 73:46:98:42:2a:4f:13:18:f2:14:1f:b8:50:36:be: f1:57:f0:cc:0d:49:2f:db:2f:88:0d:83:36:31:5c: 38:c6:70:38:0e:1d:23:c4:41:ea:66:16:8f:42:c0: 6f:fe:05:20:d6:c3:11:38:f6:a3:e5:26:f4:ec:5c: eb:68:b0:9a:ba:2c:b2:0f:c5:55:89:cf:08:f6:16: 0c:ed:3a:0b:1e:6d:62:65:b2:47:81:0f:8a:7f:3a: 2c:c8:4a:6a:9d:4c:fb:a0:39:4a:f0:94:be:05:cf: 87:b5:52:8e:78:dd:85:64:e6:11:fc:ef:48:8d:66: 4b:ed:da:84:1d:88:45:b5:c4:8b:97:54:67:75:f1: 7e:19:df:71:45:75:59:69:2a:fe:39:43:56:33:74: 0e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1A:21:E8:A0:72:9E:CC:FB:CE:21:CE:C2:E3:70:F0:C4:54:D8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2ff7164d-6098-3c3f-b325-e4b4aa2fb8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.69.0/24 216.59.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:05:c6:5f:5f:36:5c:e4:db:8e:16:8d:ad:76:c4:7c:6e:41: c4:c7:69:e6:bc:db:b3:87:21:fc:ee:c7:45:4d:0c:3b:0b:33: 39:2e:4c:96:10:ad:a1:d3:b4:59:83:1e:3f:c8:01:a2:96:4f: 15:b8:fe:5b:ad:2b:8d:22:fa:95:6c:29:4e:ef:c1:53:ef:83: a7:d8:a5:00:8d:e3:34:50:33:b3:35:83:17:3e:07:68:9f:42: f5:56:3d:47:df:58:97:82:8c:5c:a2:0c:83:d5:82:a6:3a:88: 86:53:fb:28:57:e1:51:5d:2c:fa:67:3e:cc:10:42:46:a8:57: d4:41:20:f8:70:52:d0:d1:c0:d0:6e:b0:6d:91:31:4f:0f:0d: d1:cc:72:f2:7d:2c:4f:6e:1d:c8:4a:c4:f3:b7:80:a4:be:9a: 82:c1:3b:91:49:7e:32:9b:ac:e5:89:95:e7:76:6f:27:02:5e: b7:a0:50:35:b3:39:0a:e6:b7:29:75:ea:cf:6d:67:a1:e7:1f: 53:25:ea:e5:a2:e5:ba:6d:55:e4:f9:f0:8d:e4:39:f7:af:b7: ae:5a:72:5f:c2:dc:3b:11:0c:94:64:25:16:39:54:47:20:12: 99:73:6c:e6:4a:c3:72:08:86:d9:91:86:4b:98:23:f0:3a:d9: f0:58:0e:7b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtI4b5gcfoWkY8c7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjcyMDhjYTctZWM5NS00NmIyLThmZWYtZmMxYmZkNWVmODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr/rxZUxHISXvYA4cfUyCVzlhbwmTqms4GCd FKZY10BnLubRpQMftudSdA9th6yFgalnYah2L0RYbNciMqBe5U+Qsc1OTQbKXEjD lRHEFU0Shw5RhgFNsQdb++7kSRF1Ju354ZAV/xVzRphCKk8TGPIUH7hQNr7xV/DM DUkv2y+IDYM2MVw4xnA4Dh0jxEHqZhaPQsBv/gUg1sMROPaj5Sb07FzraLCauiyy D8VVic8I9hYM7ToLHm1iZbJHgQ+KfzosyEpqnUz7oDlK8JS+Bc+HtVKOeN2FZOYR /O9IjWZL7dqEHYhFtcSLl1RndfF+Gd9xRXVZaSr+OUNWM3QOdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDEaIeigcp7M+84hzsLjcPDEVNihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMmZmNzE2NGQtNjA5OC0z YzNmLWIzMjUtZTRiNGFhMmZiOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2DtFAwQA 2DtHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMQFxl9fNlzk244Wja12xHxuQcTHaea827OHIfzux0VNDDsL MzkuTJYQraHTtFmDHj/IAaKWTxW4/lutK40i+pVsKU7vwVPvg6fYpQCN4zRQM7M1 gxc+B2ifQvVWPUffWJeCjFyiDIPVgqY6iIZT+yhX4VFdLPpnPswQQkaoV9RBIPhw UtDRwNBusG2RMU8PDdHMcvJ9LE9uHchKxPO3gKS+moLBO5FJfjKbrOWJled2bycC XregUDWzOQrmtyl16s9tZ6HnH1Ml6uWi5bptVeT58I3kOfevt65acl/C3DsRDJRk JRY5VEcgEplzbOZKw3IIhtmRhkuYI/A62fBYDns= -----END CERTIFICATE-----Generated at Sat Oct 11 08:33:38 2025 by rpki-client