$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa File: 53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa (raw, json) Hash identifier: 3ZHK1+5A7TBdFgiMApL6SZpwDfieaTR6j8UuBTPcbhk= Subject key identifier: 5F:6C:92:1B:F7:0E:E9:FC:49:41:F7:DD:37:C9:0A:AD:EC:08:42:04 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B5F37224FC2821887704D65B0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 13536 IP address blocks: 209.198.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:22:4f:c2:82:18:87:70:4d:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=62cf6b67-117b-4a17-854f-2ca63b9d7ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:be:df:2b:83:d4:13:3d:b0:07:39:d1:68: ae:6e:9d:de:ae:89:7a:c0:cf:56:45:25:ae:13:ab: cc:1b:0e:21:79:e8:f8:cb:8f:93:99:89:6e:7e:92: d7:5b:99:d2:08:28:82:88:0a:8c:6b:f5:b9:ad:c4: c8:16:16:b2:2d:ca:ea:44:de:53:a5:b4:f9:68:ae: 98:e4:eb:4b:5d:5e:5e:0b:74:32:67:0c:52:5b:5c: 51:5a:5d:96:0a:c8:2d:03:49:6b:6c:94:12:ee:5e: 6e:98:fc:e8:7d:45:47:73:cd:af:59:37:3b:f7:c3: 52:8b:a7:d3:d5:bb:f6:d8:dc:54:d9:cf:92:9c:b0: f9:39:39:9d:38:e6:ae:19:98:7e:6e:c7:46:56:42: bb:2b:72:2d:ff:7f:bf:bc:0b:f1:bc:35:c7:56:59: 6c:02:aa:8a:a8:fc:e9:0e:4a:6b:b5:95:c9:bc:b6: 8d:e1:f7:ce:83:62:3f:42:89:59:a7:eb:3c:3f:34: 00:ce:03:c6:0e:1b:c9:be:5f:de:53:d7:bb:ec:28: 89:f0:34:af:32:96:23:73:a1:b2:ca:c1:64:ce:70: c5:dc:cd:04:f1:18:2c:50:fc:39:30:cf:83:75:84: c4:fb:b1:f1:1e:5f:f3:c1:ed:e9:56:89:65:b7:f6: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6C:92:1B:F7:0E:E9:FC:49:41:F7:DD:37:C9:0A:AD:EC:08:42:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1a:cc:34:0d:a2:9a:1a:8b:4f:f6:a9:f2:51:ff:ff:44:8d: bf:25:9f:30:27:25:54:ae:06:54:80:82:5d:82:45:11:07:99: fd:3b:79:1a:95:26:83:52:33:b3:53:f2:cf:b3:de:c4:73:7c: fb:91:00:43:33:da:d8:33:0c:6e:d1:03:6b:ad:7c:24:7b:59: 47:bc:e6:74:dc:96:65:71:bb:32:68:4f:34:62:ee:be:e2:ed: 22:c2:86:84:fa:b4:af:8b:86:4e:ef:be:b4:cf:f7:f2:c5:03: 43:3c:06:4b:f9:09:4c:6d:d8:f6:39:6a:f0:6d:29:dc:9d:f2: 39:24:4a:ad:3a:8b:ea:61:28:64:f1:38:56:94:a9:6e:77:31: e3:31:7a:d2:da:b6:51:a2:c2:54:95:5b:5d:7d:d9:88:0c:cc: e2:ef:ac:fc:5d:09:b5:37:44:a3:f5:ea:12:4e:f9:46:1d:8f: 97:9c:c8:9c:17:f0:ef:05:97:e3:5a:11:48:f8:64:84:0b:7d: 63:bc:78:b0:b2:0b:e3:77:e1:a3:d5:42:e6:ff:27:1b:54:71: 4d:6f:7d:b1:92:3d:23:6a:1a:ee:de:90:94:ec:80:77:a5:65: b6:69:0f:ab:15:a2:2f:f3:24:01:b5:06:11:b2:5a:36:13:f4: 42:21:0a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyJPwoIYh3BNZbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjJjZjZiNjctMTE3Yi00YTE3LTg1NGYtMmNhNjNiOWQ3ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxC+3yuD1BM9sAc50Wiubp3erol6wM9WRSWu E6vMGw4heej4y4+TmYlufpLXW5nSCCiCiAqMa/W5rcTIFhayLcrqRN5TpbT5aK6Y 5OtLXV5eC3QyZwxSW1xRWl2WCsgtA0lrbJQS7l5umPzofUVHc82vWTc798NSi6fT 1bv22NxU2c+SnLD5OTmdOOauGZh+bsdGVkK7K3It/3+/vAvxvDXHVllsAqqKqPzp DkprtZXJvLaN4ffOg2I/QolZp+s8PzQAzgPGDhvJvl/eU9e77CiJ8DSvMpYjc6Gy ysFkznDF3M0E8RgsUPw5MM+DdYTE+7HxHl/zwe3pVollt/bRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9skhv3Dun8SUH33TfJCq3sCEIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNTNhMmYxN2YtMDk0MS0z ZTIyLWIzMzktMmE2OWE3ZTVkYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoazDQNopoai0/2qfJR//9Ejb8lnzAnJVSuBlSAgl2CRREHmf07eRqV JoNSM7NT8s+z3sRzfPuRAEMz2tgzDG7RA2utfCR7WUe85nTclmVxuzJoTzRi7r7i 7SLChoT6tK+Lhk7vvrTP9/LFA0M8Bkv5CUxt2PY5avBtKdyd8jkkSq06i+phKGTx OFaUqW53MeMxetLatlGiwlSVW1192YgMzOLvrPxdCbU3RKP16hJO+UYdj5ecyJwX 8O8Fl+NaEUj4ZIQLfWO8eLCyC+N34aPVQub/JxtUcU1vfbGSPSNqGu7ekJTsgHel ZbZpD6sVoi/zJAG1BhGyWjYT9EIhCm8= -----END CERTIFICATE-----Generated at Sat Oct 11 01:01:46 2025 by rpki-client