$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa File: 5d5e9cfa-65df-3536-bd71-8854db468e18.roa (raw, json) Hash identifier: X50kO3r+jEiOEx5G428bErAUPELTbhA4NOIbxQnsERs= Subject key identifier: ED:9A:21:BB:BF:83:DF:40:B3:FA:0A:CB:94:20:29:BC:5E:F7:53:32 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1BE49AA28BD6C3CE69880 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 216.59.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:be:49:aa:28:bd:6c:3c:e6:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=cb360990-9190-47c6-b6f8-49c557d2f253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:e5:3a:f1:a8:6b:74:19:b9:ab:17:d0:03: 1c:dd:c4:90:b3:0c:53:86:bc:af:48:a4:5f:f6:61: 12:8f:3f:47:38:6d:64:71:07:9d:2f:71:83:4d:38: 71:ba:a4:eb:70:53:74:b2:f3:c1:06:e4:1c:be:14: 6e:c0:71:60:3e:cf:0c:00:ea:b9:93:5f:12:9c:3d: 16:6a:ed:72:58:f6:c2:83:e1:02:a5:4a:e7:32:92: bd:1f:56:5f:0b:35:81:5e:6b:d4:4d:0f:0d:35:ac: 9f:28:2a:67:f4:e6:25:5e:3a:a5:40:34:17:40:1a: b3:60:14:6c:92:ba:f0:e4:c4:b1:be:8f:a1:0e:da: c8:4e:09:9e:a1:69:e1:d3:af:66:d2:d7:53:8e:d3: 20:50:d6:12:e7:38:62:86:c7:95:dc:d7:cb:c1:4e: db:25:78:34:75:9f:a7:9a:25:68:11:4a:29:2b:72: b6:97:4d:bb:6c:08:a0:89:9c:f1:27:cc:31:c9:ee: 9d:2b:e0:67:89:61:73:d7:25:cf:6f:1c:49:e7:1f: c5:8b:fb:46:9c:39:18:4b:76:20:ad:ab:76:e9:3b: 03:ca:1f:59:87:ec:2d:95:b4:63:5e:77:5d:ff:86: 2a:ed:b1:9f:6c:7b:e7:69:79:ee:b0:9b:9a:e5:c9: 12:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:21:BB:BF:83:DF:40:B3:FA:0A:CB:94:20:29:BC:5E:F7:53:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bf:9e:90:92:a0:06:f4:b5:15:77:0d:cb:d7:15:db:1b:a1: d3:54:dc:7f:e3:22:9a:1f:bf:47:73:ce:8c:67:8f:73:52:24: bb:16:90:5c:b4:ed:e9:fd:bd:dd:96:3b:c7:bb:46:17:ec:3b: ab:78:75:c9:28:f8:cd:3d:01:5f:96:54:aa:d0:ff:63:7f:5f: b0:e2:70:74:23:8e:76:03:b6:df:d0:15:1c:f0:5d:a1:41:18: 81:36:99:06:6a:7e:26:af:b4:38:2c:42:2a:04:84:e6:8d:f4: fc:8d:3b:e5:1c:76:58:1a:0b:6f:fe:53:74:e6:53:65:dd:10: b0:ac:03:7f:3e:b8:75:2a:fe:a2:39:ff:5f:c6:0c:dc:74:4c: a0:08:b7:57:57:1a:5c:53:92:3d:14:74:f2:69:1d:60:d3:30: 5b:92:77:32:dd:3c:70:a2:ee:0d:e7:5d:ed:2c:84:86:ad:90: ad:bc:05:32:b9:cb:7a:cf:47:7d:7f:17:07:e6:a9:b7:54:f2: ab:5a:2b:50:ed:45:43:b0:1c:a7:90:0c:31:0b:6a:b3:a1:22: 21:36:05:17:2d:6e:0e:3a:63:e1:29:83:86:82:43:35:57:1f: 8f:d5:6a:82:c3:9a:c1:d6:0d:25:52:45:1c:18:7b:a0:2e:dd: 87:9e:5b:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b5Jqii9bDzmmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2IzNjA5OTAtOTE5MC00N2M2LWI2ZjgtNDljNTU3ZDJmMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUzlOvGoa3QZuasX0AMc3cSQswxThryvSKRf 9mESjz9HOG1kcQedL3GDTThxuqTrcFN0svPBBuQcvhRuwHFgPs8MAOq5k18SnD0W au1yWPbCg+ECpUrnMpK9H1ZfCzWBXmvUTQ8NNayfKCpn9OYlXjqlQDQXQBqzYBRs krrw5MSxvo+hDtrITgmeoWnh069m0tdTjtMgUNYS5zhihseV3NfLwU7bJXg0dZ+n miVoEUopK3K2l027bAigiZzxJ8wxye6dK+BniWFz1yXPbxxJ5x/Fi/tGnDkYS3Yg rat26TsDyh9Zh+wtlbRjXndd/4Yq7bGfbHvnaXnusJua5ckSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2aIbu/g99As/oKy5QgKbxe91MyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNWQ1ZTljZmEtNjVkZi0z NTM2LWJkNzEtODg1NGRiNDY4ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6/npCSoAb0tRV3DcvXFdsbodNU3H/jIpofv0dzzoxnj3NSJLsWkFy0 7en9vd2WO8e7RhfsO6t4dcko+M09AV+WVKrQ/2N/X7DicHQjjnYDtt/QFRzwXaFB GIE2mQZqfiavtDgsQioEhOaN9PyNO+UcdlgaC2/+U3TmU2XdELCsA38+uHUq/qI5 /1/GDNx0TKAIt1dXGlxTkj0UdPJpHWDTMFuSdzLdPHCi7g3nXe0shIatkK28BTK5 y3rPR31/FwfmqbdU8qtaK1DtRUOwHKeQDDELarOhIiE2BRctbg46Y+Epg4aCQzVX H4/VaoLDmsHWDSVSRRwYe6Au3YeeWyw= -----END CERTIFICATE-----Generated at Sat Oct 11 01:07:44 2025 by rpki-client