$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa File: 8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa (raw, json) Hash identifier: QOAZ7mJD3rmUqt2VBXTPyvd106zWOIgsCZWkzhugY2E= Subject key identifier: F3:AB:35:95:9A:81:2F:33:E9:BA:C0:4D:0B:2C:38:15:14:A8:2A:E4 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1C3EC32893C6C89496D80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 66.186.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c3:ec:32:89:3c:6c:89:49:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3e859415-40b8-4ad2-99a3-78f5f3da4a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:1c:cd:ed:e1:9a:a5:0d:02:5a:57:d9:67: 71:71:14:07:71:65:6f:0a:e6:12:47:ab:00:b8:51: 98:58:82:de:3a:03:c3:6a:d6:0d:47:59:1a:fb:45: d7:9e:23:b2:cf:0a:45:1b:db:68:4f:dc:06:bc:4e: c7:bb:bc:55:1f:ec:46:7a:d5:32:d6:82:45:7a:5f: 03:99:bb:64:3a:c9:ef:bc:84:b4:4a:41:5c:13:74: 6d:75:67:3a:f8:02:cd:3e:e4:51:1d:17:7e:84:39: 69:cb:26:1e:02:95:54:54:c7:c5:36:b5:9e:ab:76: 57:92:fb:39:e0:e4:6b:50:ae:d0:7d:f1:83:dc:01: ef:ed:f9:02:ae:47:13:8d:52:92:60:2a:29:f6:2d: fa:e6:56:c3:00:61:ec:aa:fd:ba:dd:97:78:9a:70: b4:dc:45:b9:25:18:45:44:37:75:ec:5d:3b:e4:59: 25:d4:0c:0a:28:43:49:3c:16:b8:e8:51:72:93:6e: 65:34:61:9b:75:82:6b:95:48:42:7e:cc:22:81:51: e0:5d:99:04:9a:8a:b1:e3:b1:94:7d:9b:1f:b9:79: 4b:9a:1a:c9:2b:83:c3:20:81:88:86:41:85:f6:2f: 4a:e1:4e:51:e5:37:5a:87:32:90:b7:44:7a:b2:8f: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:35:95:9A:81:2F:33:E9:BA:C0:4D:0B:2C:38:15:14:A8:2A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8a46c52b-8413-34ff-a9a0-85514b7c1c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.186.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:28:7b:51:71:d4:48:bc:d1:93:f2:15:ad:b5:ea:1b:66:91: f1:03:99:30:58:fe:0f:fc:9d:28:66:8f:63:2e:53:c2:77:7e: 20:77:2c:bc:47:1b:94:f9:50:69:f2:c2:31:30:d6:3e:5b:66: b8:6a:04:a3:c5:c7:35:b8:c6:2c:8f:b6:c6:a0:40:ed:18:97: 7d:ef:ff:3f:64:93:99:4b:65:cd:4b:3f:da:1c:1f:05:95:24: 78:56:ed:59:80:66:3b:19:2e:ce:57:d6:8c:6d:36:34:27:22: 89:ec:8a:a1:0e:74:1d:d9:9d:62:1f:8e:d5:cb:ab:f0:34:21: 17:77:e8:38:1a:b0:1d:52:f7:0c:f0:c2:21:cd:de:5b:51:62: f8:f8:c5:6f:82:2d:be:11:95:08:e5:ba:88:2c:f4:4c:d4:21: 7a:5d:f0:23:b0:3b:20:f9:eb:5a:d5:bf:97:9a:20:5e:86:82: ca:52:22:01:5f:02:8d:0a:11:0e:0f:c2:fd:b3:46:12:ff:1f: a6:42:06:93:99:12:75:bb:a6:7b:15:a6:ef:b7:4a:ff:b9:d9: e4:31:98:a0:6f:73:fa:e5:19:36:ca:29:a9:59:54:53:72:cb: 07:f8:83:ea:26:78:d1:f3:2f:7a:c3:31:37:b6:f5:5d:c2:cd: f6:a4:47:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cPsMok8bIlJbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2U4NTk0MTUtNDBiOC00YWQyLTk5YTMtNzhmNWYzZGE0YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcwcze3hmqUNAlpX2WdxcRQHcWVvCuYSR6sA uFGYWILeOgPDatYNR1ka+0XXniOyzwpFG9toT9wGvE7Hu7xVH+xGetUy1oJFel8D mbtkOsnvvIS0SkFcE3RtdWc6+ALNPuRRHRd+hDlpyyYeApVUVMfFNrWeq3ZXkvs5 4ORrUK7QffGD3AHv7fkCrkcTjVKSYCop9i365lbDAGHsqv263Zd4mnC03EW5JRhF RDd17F075Fkl1AwKKENJPBa46FFyk25lNGGbdYJrlUhCfswigVHgXZkEmoqx47GU fZsfuXlLmhrJK4PDIIGIhkGF9i9K4U5R5TdahzKQt0R6so8dcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOrNZWagS8z6brATQssOBUUqCrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOGE0NmM1MmItODQxMy0z NGZmLWE5YTAtODU1MTRiN2MxYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIoe1Fx1Ei80ZPyFa216htmkfEDmTBY/g/8nShmj2MuU8J3fiB3LLxH G5T5UGnywjEw1j5bZrhqBKPFxzW4xiyPtsagQO0Yl33v/z9kk5lLZc1LP9ocHwWV JHhW7VmAZjsZLs5X1oxtNjQnIonsiqEOdB3ZnWIfjtXLq/A0IRd36DgasB1S9wzw wiHN3ltRYvj4xW+CLb4RlQjluogs9EzUIXpd8COwOyD561rVv5eaIF6GgspSIgFf Ao0KEQ4Pwv2zRhL/H6ZCBpOZEnW7pnsVpu+3Sv+52eQxmKBvc/rlGTbKKalZVFNy ywf4g+omeNHzL3rDMTe29V3CzfakR+4= -----END CERTIFICATE-----Generated at Sat Oct 11 01:04:45 2025 by rpki-client