$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/44b251b2-4ccd-3896-b0f2-61689eb8f24e.roa File: 44b251b2-4ccd-3896-b0f2-61689eb8f24e.roa (raw, json) Hash identifier: mEYiVTZIUzEth1nSeENhKtfRK5atvy7FEJFDT3yoWog= Subject key identifier: F8:F9:D6:B3:41:4F:31:D6:6D:40:A5:A6:5A:77:AB:F1:AF:8C:43:AC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B21CC4001BCC750FFE174D0BC Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/44b251b2-4ccd-3896-b0f2-61689eb8f24e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 401728 IP address blocks: 66.186.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:40:01:bc:c7:50:ff:e1:74:d0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=9b1596a6-6d3a-4eae-b172-48b83a817e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:0b:02:1b:93:03:5a:9f:07:04:69:50:c5: 6b:54:57:90:2e:60:40:79:00:21:cd:89:7b:10:79: 12:e1:d3:62:dd:f7:2e:cd:6e:1a:71:d5:0c:72:60: 9e:a5:37:7d:92:19:fc:d0:2d:7f:24:3a:79:c1:83: 57:ff:60:92:39:4f:25:7c:55:91:5b:bd:22:15:f2: 9a:ad:0e:dc:4a:ee:b2:27:97:cd:93:96:f4:59:f7: ed:73:74:a4:ca:3e:26:37:2f:70:be:c5:c5:9a:35: 12:5f:dc:36:59:4d:39:a3:8b:45:19:9a:e1:6f:3a: 17:ae:ce:49:d2:75:d7:4f:24:cd:40:a3:6e:e8:99: 6a:20:69:f2:c7:d4:42:e8:15:30:aa:0d:24:8d:a5: 13:6e:d9:06:c6:75:84:bc:43:42:5c:9f:24:5c:1f: 50:ad:0f:14:5a:f8:db:86:01:a8:9a:f0:b6:e3:74: 5e:82:35:bd:34:a0:6b:67:74:13:20:53:ec:9f:85: 59:8e:dd:68:b2:dc:4d:bf:54:05:28:f3:e2:4f:b9: cb:88:e6:54:d6:d8:cd:e2:85:86:20:30:33:40:7c: a1:db:44:58:b6:b0:1a:fa:8f:cb:b1:ae:e6:2c:2b: e6:19:bb:9d:d2:fe:3e:9e:b1:94:1f:1f:cb:d4:ee: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F9:D6:B3:41:4F:31:D6:6D:40:A5:A6:5A:77:AB:F1:AF:8C:43:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/44b251b2-4ccd-3896-b0f2-61689eb8f24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:da:cd:cb:a3:ba:84:9e:a9:a0:fb:23:bd:13:d7:0e:c0:d5: df:0e:7f:6b:59:16:f7:0b:cc:d2:cd:b8:2f:f4:d1:66:48:a5: aa:0e:0e:fc:b3:a4:73:d5:1f:85:94:6c:54:85:a7:19:b0:73: 6b:d0:1f:be:a5:07:cc:90:ee:b0:37:66:28:0c:aa:d3:61:22: 7e:f8:ab:fc:a2:f7:3b:1d:aa:5d:10:10:c2:ef:d3:87:cc:f4: 59:bf:fa:d2:5d:91:c9:9e:d4:0e:48:4f:99:09:ac:fa:7c:d8: f3:12:d1:6f:51:97:77:c3:9a:84:00:9f:58:65:57:61:25:04: 82:f4:8b:01:ee:bf:c5:26:57:10:96:24:0e:68:d0:ab:19:47: 80:98:56:10:c7:c1:c4:95:bf:27:9d:ff:6b:4e:fd:9d:46:7c: 97:e6:43:05:da:71:b7:3b:55:ca:42:68:21:fd:4e:e5:8e:8a: e9:ab:9b:91:9d:b6:be:03:58:63:7d:04:40:86:c8:77:05:b3: 7e:2b:4e:85:f0:f6:a6:3f:d5:66:44:b4:59:62:f0:a6:8d:f5: 2e:fa:4c:62:c8:b4:0d:a9:f8:46:d4:19:96:5f:e2:f8:ed:94: 11:ab:0f:c8:7a:79:e5:2b:ac:43:44:91:2d:57:97:30:d0:eb: 7c:11:65:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzEABvMdQ/+F00LwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OWIxNTk2YTYtNmQzYS00ZWFlLWIxNzItNDhiODNhODE3ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9oLAhuTA1qfBwRpUMVrVFeQLmBAeQAhzYl7 EHkS4dNi3fcuzW4acdUMcmCepTd9khn80C1/JDp5wYNX/2CSOU8lfFWRW70iFfKa rQ7cSu6yJ5fNk5b0Wfftc3Skyj4mNy9wvsXFmjUSX9w2WU05o4tFGZrhbzoXrs5J 0nXXTyTNQKNu6JlqIGnyx9RC6BUwqg0kjaUTbtkGxnWEvENCXJ8kXB9QrQ8UWvjb hgGomvC243RegjW9NKBrZ3QTIFPsn4VZjt1ostxNv1QFKPPiT7nLiOZU1tjN4oWG IDAzQHyh20RYtrAa+o/Lsa7mLCvmGbud0v4+nrGUHx/L1O5fnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj51rNBTzHWbUClplp3q/GvjEOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDRiMjUxYjItNGNjZC0z ODk2LWIwZjItNjE2ODllYjhmMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrqxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfazcujuoSeqaD7I70T1w7A1d8Of2tZFvcLzNLNuC/00WZIpaoODvyz pHPVH4WUbFSFpxmwc2vQH76lB8yQ7rA3ZigMqtNhIn74q/yi9zsdql0QEMLv04fM 9Fm/+tJdkcme1A5IT5kJrPp82PMS0W9Rl3fDmoQAn1hlV2ElBIL0iwHuv8UmVxCW JA5o0KsZR4CYVhDHwcSVvyed/2tO/Z1GfJfmQwXacbc7VcpCaCH9TuWOiumrm5Gd tr4DWGN9BECGyHcFs34rToXw9qY/1WZEtFli8KaN9S76TGLItA2p+EbUGZZf4vjt lBGrD8h6eeUrrENEkS1XlzDQ63wRZeo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:39:11 2025 by rpki-client