$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa File: 692ee817-17ab-3739-9d0c-1581ba0a4da5.roa (raw, json) Hash identifier: 8MJ6HcxPxvgA0ufzPccaM94Hglyq1IXWn5vka0nzGCs= Subject key identifier: C0:4E:3F:CB:23:B7:F5:A8:BD:20:81:7E:49:71:72:5A:1D:D2:1F:0C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B2CF6E9F8DA4658051E7F4A00 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 15320 IP address blocks: 173.242.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e9:f8:da:46:58:05:1e:7f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=0d500bcb-9a45-484b-9ae5-7abd518f1daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:11:c1:d8:dd:a8:9c:89:f0:d3:30:e1:c8: f7:ce:87:a6:f5:ab:af:0a:0e:27:7f:67:dd:f5:71: ab:b1:b1:48:75:13:3c:03:bc:c2:24:57:f5:c1:3a: 27:b1:bf:2b:42:ee:37:c0:e5:05:57:8e:c3:fd:ec: e3:22:ca:b8:9e:ec:22:1a:b9:a9:51:9c:75:dd:a8: 20:d7:b1:70:32:dc:fe:f6:a7:12:4c:0e:f4:2a:7b: 87:22:28:34:e0:26:15:df:37:cb:c7:2e:db:14:5b: d1:c7:6b:ff:4f:73:66:b6:59:0e:c8:31:40:ad:7d: 91:fb:85:cc:60:78:9a:29:87:58:0e:a1:60:ab:27: 6e:58:dc:3f:0f:4a:2b:83:38:4b:04:fe:b0:90:72: d4:ef:6f:43:f1:2c:55:1a:d0:8d:8a:25:12:30:06: 71:66:b3:d0:4d:01:45:b1:b3:b9:b5:f7:10:74:cd: 9b:b2:52:b5:95:ce:52:20:17:94:52:79:0d:d4:02: c4:c7:e8:67:ed:7c:79:70:2c:60:3d:cc:c6:89:5c: 93:68:b7:f6:7b:08:22:d6:45:97:9f:bc:4e:2e:f8: 0b:0d:8e:20:1b:e5:48:88:1f:84:02:f7:65:b0:59: 47:67:37:6f:b9:f9:73:f5:67:8c:42:2c:88:a6:72: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:3F:CB:23:B7:F5:A8:BD:20:81:7E:49:71:72:5A:1D:D2:1F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/692ee817-17ab-3739-9d0c-1581ba0a4da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 173.242.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5a:78:5b:44:30:01:15:ee:71:12:3f:4d:0b:1f:2b:10:ad: a4:2d:47:12:f9:da:00:71:71:07:96:77:1c:7e:ed:5d:c4:91: 8b:5e:35:98:56:fc:06:21:ba:c3:98:da:14:ad:80:17:45:a6: 5d:c1:20:77:69:10:fc:4d:b4:cc:9a:f5:97:22:48:76:af:57: 41:45:7f:8c:f2:37:61:32:6a:4a:93:3f:43:f3:ae:9b:85:ba: 5f:29:7a:0f:f6:e1:e3:f3:44:c2:cb:a9:f9:1a:d7:79:2b:90: 3b:ed:02:95:43:2f:9f:14:f4:89:7c:f7:20:8b:5a:4a:ce:05: 2e:66:11:09:a9:73:42:b8:5f:50:df:01:9f:88:25:39:a5:24: 7e:3c:55:68:f0:8a:55:62:aa:0a:e3:b1:78:4d:40:22:ac:fc: ef:1f:c1:64:c3:53:79:f3:c6:d3:58:56:0f:a6:c1:97:87:75: e4:eb:8c:54:bc:e0:23:04:79:75:fb:6b:d6:aa:1c:bf:8e:f9: d2:a0:4b:3d:fe:57:05:b1:9c:f8:5f:92:79:7d:64:20:b9:16: b6:31:15:b0:62:ee:d1:53:06:ad:2c:dc:2e:2a:8b:f1:5f:29: 5c:49:be:59:f9:78:aa:a9:93:c7:9b:52:a1:3d:83:ab:0c:90: 8e:a7:a6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9un42kZYBR5/SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MGQ1MDBiY2ItOWE0NS00ODRiLTlhZTUtN2FiZDUxOGYxZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKARwdjdqJyJ8NMw4cj3zoem9auvCg4nf2fd 9XGrsbFIdRM8A7zCJFf1wTonsb8rQu43wOUFV47D/ezjIsq4nuwiGrmpUZx13agg 17FwMtz+9qcSTA70KnuHIig04CYV3zfLxy7bFFvRx2v/T3NmtlkOyDFArX2R+4XM YHiaKYdYDqFgqyduWNw/D0orgzhLBP6wkHLU729D8SxVGtCNiiUSMAZxZrPQTQFF sbO5tfcQdM2bslK1lc5SIBeUUnkN1ALEx+hn7Xx5cCxgPczGiVyTaLf2ewgi1kWX n7xOLvgLDY4gG+VIiB+EAvdlsFlHZzdvuflz9WeMQiyIpnLO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBOP8sjt/WovSCBfklxclod0h8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNjkyZWU4MTctMTdhYi0z NzM5LTlkMGMtMTU4MWJhMGE0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdaeFtEMAEV7nESP00LHysQraQtRxL52gBxcQeWdxx+7V3EkYteNZhW /AYhusOY2hStgBdFpl3BIHdpEPxNtMya9ZciSHavV0FFf4zyN2EyakqTP0PzrpuF ul8peg/24ePzRMLLqfka13krkDvtApVDL58U9Il89yCLWkrOBS5mEQmpc0K4X1Df AZ+IJTmlJH48VWjwilViqgrjsXhNQCKs/O8fwWTDU3nzxtNYVg+mwZeHdeTrjFS8 4CMEeXX7a9aqHL+O+dKgSz3+VwWxnPhfknl9ZCC5FrYxFbBi7tFTBq0s3C4qi/Ff KVxJvln5eKqpk8ebUqE9g6sMkI6nptk= -----END CERTIFICATE-----Generated at Sat Oct 11 08:36:37 2025 by rpki-client