$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa File: 4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa (raw, json) Hash identifier: YDEwYjm+sXjtkBELbMP2c4FHDFRktzSw7bGrPR87IWQ= Subject key identifier: 68:C3:BA:39:3F:3B:2C:0B:7E:A7:D5:F3:17:98:86:ED:05:7A:54:FD Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1C3D9C1E5BA29CB44AE40 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 66.152.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c3:d9:c1:e5:ba:29:cb:44:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7ae3d592-1aca-498c-9332-0af5cd59c13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:ed:db:87:e2:ca:d2:d8:0b:c2:7d:57:f0: ab:27:8b:06:5b:0b:e3:1b:7e:55:15:c4:fc:12:c9: 8f:1d:be:e5:ae:6a:4f:57:74:78:9a:e3:a2:59:14: f8:6d:5b:49:28:ae:98:b8:4c:20:c0:69:72:c7:60: 3a:ab:70:ec:7a:3d:51:be:98:ae:3b:01:61:a3:1a: b0:25:b2:7f:88:de:f4:fe:6c:18:fe:48:88:df:84: 83:5c:1d:9b:50:0c:1e:0d:83:9a:fe:4e:65:52:2a: a3:3a:45:3e:fe:ec:ab:2e:e7:8e:d2:fa:1a:81:bc: c0:5e:ad:f4:dd:a2:eb:f0:36:7a:b1:e9:b0:80:fb: 03:74:39:29:11:eb:ad:35:15:37:01:90:15:8a:66: 0f:e8:50:ef:62:de:c9:5e:7a:7b:79:80:89:f0:79: 23:86:9f:c2:c4:39:9c:91:f3:8d:72:f5:4c:09:b2: e2:ba:e4:85:2b:30:b3:30:ed:60:40:c6:65:c2:f3: 3c:d6:81:fb:93:d8:26:d9:52:cc:11:f0:c9:63:bc: a6:54:e5:da:97:a5:ab:d8:6e:29:c1:dc:a6:1d:a0: 5e:33:ca:62:44:3f:a0:65:08:f9:e6:e9:f7:9d:c5: a7:e8:ca:0a:9c:fd:cd:95:1a:cf:f4:82:b0:95:fd: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C3:BA:39:3F:3B:2C:0B:7E:A7:D5:F3:17:98:86:ED:05:7A:54:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/4ef9d33c-e886-3e1d-a950-68feaa9a9ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:10:d9:84:f1:fa:42:69:b3:23:19:5c:5a:90:39:80:93: 5e:f7:a5:ed:17:53:bf:7b:f4:82:aa:32:41:8f:41:9f:01:e1: 0d:7e:08:ec:49:15:68:a9:51:73:e5:7f:24:72:80:88:e2:4c: a1:b0:46:19:ef:b4:00:12:54:9e:3d:d5:95:a8:55:bb:ec:1b: c7:ae:19:d7:75:a9:cf:cb:04:86:54:9c:d8:ff:56:70:7a:e0: 12:df:ed:d3:5e:d2:c7:54:ff:85:11:94:99:28:b6:e7:9c:75: 03:27:6f:a2:86:36:15:92:03:c7:a7:d5:0e:bf:5b:f7:bf:aa: e7:3d:a1:d2:ee:f6:94:32:0a:07:55:87:a5:82:cf:70:0b:1c: da:af:1d:e5:ca:27:30:5e:55:12:29:34:6b:0a:bc:53:90:eb: ce:39:be:a7:f4:eb:b7:7f:46:fc:72:ef:b8:c1:0c:97:ec:91: d7:dc:6d:55:68:8b:0a:b2:f7:1a:56:64:47:94:8e:5c:2e:88: d3:09:ce:4b:c0:42:06:db:31:1f:bb:bd:a4:9a:91:7e:ab:b8: 60:72:0b:65:35:2b:5b:e0:4f:37:b5:7e:76:56:62:6a:fd:e7: 7e:c3:10:64:37:f2:f5:18:03:4f:6d:4f:87:05:a2:90:b7:4e: 61:c9:01:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cPZweW6KctErkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2FlM2Q1OTItMWFjYS00OThjLTkzMzItMGFmNWNkNTljMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJLt24fiytLYC8J9V/CrJ4sGWwvjG35VFcT8 EsmPHb7lrmpPV3R4muOiWRT4bVtJKK6YuEwgwGlyx2A6q3Dsej1RvpiuOwFhoxqw JbJ/iN70/mwY/kiI34SDXB2bUAweDYOa/k5lUiqjOkU+/uyrLueO0voagbzAXq30 3aLr8DZ6semwgPsDdDkpEeutNRU3AZAVimYP6FDvYt7JXnp7eYCJ8Hkjhp/CxDmc kfONcvVMCbLiuuSFKzCzMO1gQMZlwvM81oH7k9gm2VLMEfDJY7ymVOXal6Wr2G4p wdymHaBeM8piRD+gZQj55un3ncWn6MoKnP3NlRrP9IKwlf3QxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjDujk/OywLfqfV8xeYhu0FelT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNGVmOWQzM2MtZTg4Ni0z ZTFkLWE5NTAtNjhmZWFhOWE5Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQphgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAWENmE8fpCabMjGVxakDmAk173pe0XU7979IKqMkGPQZ8B4Q1+COxJ FWipUXPlfyRygIjiTKGwRhnvtAASVJ491ZWoVbvsG8euGdd1qc/LBIZUnNj/VnB6 4BLf7dNe0sdU/4URlJkotuecdQMnb6KGNhWSA8en1Q6/W/e/quc9odLu9pQyCgdV h6WCz3ALHNqvHeXKJzBeVRIpNGsKvFOQ6845vqf067d/Rvxy77jBDJfskdfcbVVo iwqy9xpWZEeUjlwuiNMJzkvAQgbbMR+7vaSakX6ruGByC2U1K1vgTze1fnZWYmr9 537DEGQ38vUYA09tT4cFopC3TmHJASw= -----END CERTIFICATE-----Generated at Sat Oct 11 01:13:24 2025 by rpki-client