$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa File: 8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa (raw, json) Hash identifier: 1q/kPKV4uhouxPcQQOk+IctGn58LW+xhgHeu59FMsCE= Subject key identifier: 7D:8D:25:EF:FA:67:C9:46:BA:48:B0:9D:5D:D9:C2:73:46:78:63:AC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4D11D38A422B1CDC70ABDDA0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 13536 IP address blocks: 216.114.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d3:8a:42:2b:1c:dc:70:ab:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5f679b8e-985e-4951-a936-35a4fc5da210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:57:32:1d:e3:22:4b:9a:a2:8a:9c:49:29:ee: f6:8b:6a:4a:27:f6:b7:18:ff:99:c5:0d:2e:26:43: 37:e9:bb:80:e2:98:6b:09:98:38:5b:01:5d:b4:96: 3f:da:96:99:c9:33:af:b4:e5:e1:8d:13:58:7a:eb: ee:c1:2e:05:f4:3b:c5:8b:20:c9:d4:48:e0:9e:f0: 88:39:9a:de:8d:59:8d:ce:c5:7f:6d:bb:04:ce:d6: 4f:30:b1:3b:7e:7c:4a:39:05:f2:a9:56:51:a2:31: 61:02:b8:67:6f:7d:8a:c9:f0:f8:69:59:38:6c:8e: 07:aa:8e:51:db:d3:eb:90:64:24:c3:b5:61:8a:48: c7:59:c0:28:3c:27:74:fe:c4:95:59:a9:2e:25:c9: ab:1e:a5:a0:42:1b:59:33:e4:e9:52:ab:68:e7:63: 75:66:87:cc:48:3e:2b:9c:8d:15:3d:74:16:d3:95: 95:f3:b9:de:da:d2:12:bf:ea:11:13:90:35:a4:6e: 9f:9b:2e:09:74:ed:a4:f2:a4:a7:46:f6:8a:d1:c9: ed:31:d3:9e:0f:c8:0c:a6:e3:56:d8:e4:54:5b:7f: 22:fd:7f:53:4b:99:0f:43:a2:e1:fd:05:6d:c9:32: 38:c4:26:59:ad:f1:77:5f:9a:6b:35:72:54:01:0c: 2e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:25:EF:FA:67:C9:46:BA:48:B0:9D:5D:D9:C2:73:46:78:63:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a9:38:a4:41:a3:d1:20:e3:c9:39:4d:e1:c4:84:20:42:2a: a4:77:9b:72:7f:cd:4c:76:33:34:f5:7e:04:21:c2:05:97:91: 6a:16:ae:80:72:ed:26:5d:f3:36:ed:a6:a4:2e:39:78:bc:ab: dd:ae:60:6e:4a:c2:dc:a8:21:6f:fd:0c:10:ba:2b:ad:5c:73: 5e:9e:8f:a3:56:d0:cc:82:ff:92:65:eb:5d:a9:01:07:72:60: 6a:f8:3f:2a:d9:2a:ff:11:81:cd:66:88:dc:8c:b6:e2:26:62: 0b:a3:da:b5:dd:bd:d8:61:14:52:d0:55:b5:6a:4b:66:19:5d: 43:6c:e8:3e:19:fc:a8:22:5b:a9:6f:da:94:7f:82:0c:a1:7d: da:41:fd:d1:12:73:d6:06:ea:d0:3c:04:93:1a:5d:73:45:b1: 92:d8:00:d3:89:7c:5e:48:e8:a7:34:6a:54:8b:8e:26:70:95: 08:5e:a7:16:83:50:15:2b:ca:c8:51:12:62:89:11:01:a6:38: 68:cf:8e:47:ed:c1:52:34:38:55:d7:bc:05:ec:ce:ab:44:04: a4:10:2f:c9:11:8b:2b:9f:3e:7a:85:c6:1b:17:ad:73:f1:2f: 44:79:18:0b:26:23:6a:3c:21:f4:1a:80:37:a5:44:6b:5d:91: 70:77:cf:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdOKQisc3HCr3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWY2NzliOGUtOTg1ZS00OTUxLWE5MzYtMzVhNGZjNWRhMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVcyHeMiS5qiipxJKe72i2pKJ/a3GP+ZxQ0u JkM36buA4phrCZg4WwFdtJY/2paZyTOvtOXhjRNYeuvuwS4F9DvFiyDJ1EjgnvCI OZrejVmNzsV/bbsEztZPMLE7fnxKOQXyqVZRojFhArhnb32KyfD4aVk4bI4Hqo5R 29PrkGQkw7VhikjHWcAoPCd0/sSVWakuJcmrHqWgQhtZM+TpUqto52N1ZofMSD4r nI0VPXQW05WV87ne2tISv+oRE5A1pG6fmy4JdO2k8qSnRvaK0cntMdOeD8gMpuNW 2ORUW38i/X9TS5kPQ6Lh/QVtyTI4xCZZrfF3X5prNXJUAQwuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2NJe/6Z8lGukiwnV3ZwnNGeGOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOGRmN2I0ZDYtZDA1ZC0z NzU1LTk3MmEtM2NhM2NlMTliZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAepOKRBo9Eg48k5TeHEhCBCKqR3m3J/zUx2MzT1fgQhwgWXkWoWroBy 7SZd8zbtpqQuOXi8q92uYG5KwtyoIW/9DBC6K61cc16ej6NW0MyC/5Jl612pAQdy YGr4PyrZKv8Rgc1miNyMtuImYguj2rXdvdhhFFLQVbVqS2YZXUNs6D4Z/KgiW6lv 2pR/ggyhfdpB/dESc9YG6tA8BJMaXXNFsZLYANOJfF5I6Kc0alSLjiZwlQhepxaD UBUryshREmKJEQGmOGjPjkftwVI0OFXXvAXszqtEBKQQL8kRiyufPnqFxhsXrXPx L0R5GAsmI2o8IfQagDelRGtdkXB3z7I= -----END CERTIFICATE-----Generated at Sat Oct 11 01:04:44 2025 by rpki-client