$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/489d1913-d69c-318c-bf12-980648b16b99.roa File: 489d1913-d69c-318c-bf12-980648b16b99.roa (raw, json) Hash identifier: aSpwJpBJKyaCeGOtx/bwhbCBf7b7C2mhJm8jilmENYU= Subject key identifier: E3:BB:43:5B:79:EA:AE:EF:47:A8:EC:53:4A:85:82:C6:2E:4B:0B:C6 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4081AC936A327075CC356280 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/489d1913-d69c-318c-bf12-980648b16b99.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 13536 IP address blocks: 64.25.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ac:93:6a:32:70:75:cc:35:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=947e1b7c-d82c-4891-9c7e-8c70c40d0676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:bd:2d:5d:11:9d:f7:0e:85:d2:d0:7f:83: 0a:1f:02:14:6a:c3:5e:d3:92:80:d1:50:a0:ea:ab: 96:79:b9:40:80:ca:5a:13:58:f1:bd:99:0c:c7:59: 92:6f:82:71:69:6b:81:76:c4:a9:28:c4:bf:79:4c: e4:0a:e7:d9:06:11:bb:da:38:e8:d6:6e:5d:a7:7c: 5c:dc:fd:f8:73:f4:17:3a:9d:6d:f7:b8:45:05:fa: 62:6e:36:71:27:21:26:4c:59:aa:73:40:1c:bc:83: 8f:38:e8:77:11:1f:06:f1:cc:d3:65:20:b0:06:a9: fb:8b:78:b3:14:5e:d4:52:dc:3c:df:11:9a:ff:17: ba:9a:64:07:55:6c:70:9a:e6:d9:a4:a9:26:67:8d: 39:e7:3f:d1:07:3f:ca:d4:ca:87:00:a9:cf:4b:09: 39:cb:02:69:9d:10:67:b4:e6:d5:d2:f7:21:15:59: 2f:b9:db:3a:22:f7:97:04:ca:18:88:be:bf:b1:3f: 52:a7:e2:f6:2e:75:06:88:e0:af:3e:ab:37:c7:4a: 13:a2:77:5f:9d:b7:22:da:57:e0:e4:24:5d:a4:8e: f5:ed:76:d7:b2:74:c0:3a:21:e7:c9:15:96:4f:db: 5e:af:ed:e0:c1:aa:53:e7:c1:10:98:17:3e:1d:26: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:43:5B:79:EA:AE:EF:47:A8:EC:53:4A:85:82:C6:2E:4B:0B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/489d1913-d69c-318c-bf12-980648b16b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.25.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e1:6f:f1:da:7d:2b:c9:52:d9:28:07:fd:05:81:ad:92:b6: 67:c2:1a:26:dd:59:f3:17:fb:54:c3:18:62:0b:4c:eb:f3:d0: 15:09:3a:1f:3f:da:a2:03:f2:47:a0:11:49:fb:01:ba:ac:1a: ab:81:56:ca:9f:1f:d1:f2:ef:79:1d:ce:e0:97:0f:c6:22:12: 97:8f:58:2d:81:a9:29:3f:18:de:5b:26:76:57:03:17:6c:63: 16:89:24:62:d3:42:e8:82:9b:fd:62:fe:e3:75:51:f9:39:bc: 21:2c:e0:e7:a7:1f:95:94:6b:ad:09:ff:d2:fb:08:b5:11:94: 6c:2f:0f:45:b6:50:cb:8b:ba:6e:76:5e:c9:ae:07:b9:57:48: 35:fe:e7:bc:e8:29:cd:cf:a7:32:9d:6d:0b:a7:b1:54:c2:7f: af:7f:8c:0e:8f:3b:be:19:d5:dc:90:c0:18:f9:e0:ba:94:3c: c5:08:d7:39:46:83:60:2f:83:29:2f:57:dc:ac:b5:cf:1f:f0: c1:1e:34:e9:86:a9:ef:32:df:d2:87:ca:a8:6e:b3:3b:de:c1: 96:de:fa:6f:35:49:1e:24:47:ce:49:65:e8:bd:f7:20:52:0a: 33:07:11:08:97:8c:61:f3:64:d2:c3:df:fd:d7:fa:d3:cb:b1: bd:ea:d6:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgayTajJwdcw1YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OTQ3ZTFiN2MtZDgyYy00ODkxLTljN2UtOGM3MGM0MGQwNjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTa9LV0RnfcOhdLQf4MKHwIUasNe05KA0VCg 6quWeblAgMpaE1jxvZkMx1mSb4JxaWuBdsSpKMS/eUzkCufZBhG72jjo1m5dp3xc 3P34c/QXOp1t97hFBfpibjZxJyEmTFmqc0AcvIOPOOh3ER8G8czTZSCwBqn7i3iz FF7UUtw83xGa/xe6mmQHVWxwmubZpKkmZ4055z/RBz/K1MqHAKnPSwk5ywJpnRBn tObV0vchFVkvuds6IveXBMoYiL6/sT9Sp+L2LnUGiOCvPqs3x0oTondfnbci2lfg 5CRdpI717XbXsnTAOiHnyRWWT9ter+3gwapT58EQmBc+HSYEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO7Q1t56q7vR6jsU0qFgsYuSwvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDg5ZDE5MTMtZDY5Yy0z MThjLWJmMTItOTgwNjQ4YjE2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHhb/HafSvJUtkoB/0Fga2StmfCGibdWfMX+1TDGGILTOvz0BUJOh8/ 2qID8kegEUn7AbqsGquBVsqfH9Hy73kdzuCXD8YiEpePWC2BqSk/GN5bJnZXAxds YxaJJGLTQuiCm/1i/uN1Ufk5vCEs4OenH5WUa60J/9L7CLURlGwvD0W2UMuLum52 XsmuB7lXSDX+57zoKc3PpzKdbQunsVTCf69/jA6PO74Z1dyQwBj54LqUPMUI1zlG g2AvgykvV9ystc8f8MEeNOmGqe8y39KHyqhuszvewZbe+m81SR4kR85JZei99yBS CjMHEQiXjGHzZNLD3/3X+tPLsb3q1so= -----END CERTIFICATE-----Generated at Sat Oct 11 01:13:24 2025 by rpki-client