$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa File: 96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa (raw, json) Hash identifier: TvzLWoSHkoPDwytttCEkY2gjwb9T5J2Y34pSdje7pX8= Subject key identifier: 40:19:8D:2A:5B:8B:A7:0E:E9:5F:2F:BB:1D:D6:89:39:8C:8F:61:7A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B3DB70180F2D22B501B69E2C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 15320 IP address blocks: 216.27.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:01:80:f2:d2:2b:50:1b:69:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=93909eeb-0de5-48ab-9be4-96ff33ebb12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:f0:46:33:51:99:37:9a:9e:c1:08:85:e2: c3:6d:c4:65:8d:f0:b2:a9:82:bd:10:81:cb:92:67: 20:20:76:8c:67:fc:ca:8b:a5:99:f0:a1:1c:85:eb: 8c:60:d7:39:e4:1e:54:fa:eb:33:93:5b:be:01:f3: 89:69:cd:78:85:f0:66:15:e7:57:ab:fa:2b:e8:d8: 83:10:b4:6c:12:ea:76:64:df:96:4e:4b:1f:e8:8e: 64:46:82:ab:1a:06:e9:0b:b6:2e:e4:32:b3:82:a1: dc:d4:e0:aa:8f:4f:47:b0:c3:dd:6d:c9:d4:3f:79: 15:70:20:03:af:88:18:06:1a:97:da:12:f2:73:f6: 55:49:cf:4a:62:4d:d4:9f:c7:26:81:9c:2a:6d:dd: a2:b1:18:af:1b:91:e9:46:44:b0:fe:cc:f3:f1:1b: 9b:18:2e:db:d5:bf:c6:ac:a8:29:d3:f5:a9:df:fa: 18:bd:1a:21:9f:e9:36:3a:08:08:33:f7:c8:e0:58: 0d:cc:b3:28:59:29:66:41:e9:84:08:bb:39:31:17: b3:9b:89:66:e1:85:c8:30:e5:b9:91:bf:1c:4b:5e: ba:d1:de:ae:4e:b9:ec:14:89:9f:9a:ee:d8:99:86: 04:1a:7d:39:01:65:75:da:3c:9d:b2:61:6c:b1:ad: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:19:8D:2A:5B:8B:A7:0E:E9:5F:2F:BB:1D:D6:89:39:8C:8F:61:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.27.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0f:86:f1:08:6d:e5:f7:c0:9b:bb:b7:ef:02:38:0a:74:0f: a2:21:a1:dc:13:80:58:a4:40:9c:5d:b4:21:aa:3c:d6:81:e4: e1:df:9c:19:d1:f1:58:1b:05:20:24:40:3e:d3:39:1d:a9:0f: f7:be:ca:d6:a2:4d:e3:14:9a:cb:ad:9b:14:fa:a5:b9:de:79: c6:09:15:50:fa:89:bc:7a:3c:29:e8:73:f4:7d:88:ad:e6:ba: a4:3a:33:4a:74:53:fe:88:69:f4:4b:57:4e:1b:68:61:d1:33: 59:ac:2b:62:0f:d6:d0:e6:20:54:ab:26:47:73:98:c6:ae:b3: 11:13:50:31:a3:ae:8b:ee:c9:99:26:50:af:17:35:e8:2b:44: 99:9d:49:c1:d3:ff:0e:37:4d:0e:91:de:86:64:c5:03:7c:2e: 33:41:a1:85:b0:ad:52:72:c8:7b:67:39:8a:c6:0d:85:b3:41: 93:e3:2e:f4:68:0c:49:b4:94:39:97:21:77:2d:80:74:fe:4f: 41:bf:a8:d7:21:d8:c9:e2:b8:46:60:62:85:35:99:03:a4:72: b2:1d:f6:2a:3e:f8:7c:ec:38:67:03:17:b5:82:b3:96:44:4d: 43:25:63:55:ae:ce:9d:61:00:dd:14:ab:54:b5:3c:f2:6a:0c: 1f:7b:25:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twGA8tIrUBtp4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTM5MDllZWItMGRlNS00OGFiLTliZTQtOTZmZjMzZWJiMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDPwRjNRmTeansEIheLDbcRljfCyqYK9EIHL kmcgIHaMZ/zKi6WZ8KEcheuMYNc55B5U+uszk1u+AfOJac14hfBmFedXq/or6NiD ELRsEup2ZN+WTksf6I5kRoKrGgbpC7Yu5DKzgqHc1OCqj09HsMPdbcnUP3kVcCAD r4gYBhqX2hLyc/ZVSc9KYk3Un8cmgZwqbd2isRivG5HpRkSw/szz8RubGC7b1b/G rKgp0/Wp3/oYvRohn+k2OggIM/fI4FgNzLMoWSlmQemECLs5MRezm4lm4YXIMOW5 kb8cS1660d6uTrnsFImfmu7YmYYEGn05AWV12jydsmFssa26XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAZjSpbi6cO6V8vux3WiTmMj2F6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOTZjNTEyZTMtZDJjNS0z NjkxLWFjNGQtMWNjMWE2OWVlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYPhvEIbeX3wJu7t+8COAp0D6IhodwTgFikQJxdtCGqPNaB5OHfnBnR 8VgbBSAkQD7TOR2pD/e+ytaiTeMUmsutmxT6pbneecYJFVD6ibx6PCnoc/R9iK3m uqQ6M0p0U/6IafRLV04baGHRM1msK2IP1tDmIFSrJkdzmMausxETUDGjrovuyZkm UK8XNegrRJmdScHT/w43TQ6R3oZkxQN8LjNBoYWwrVJyyHtnOYrGDYWzQZPjLvRo DEm0lDmXIXctgHT+T0G/qNch2MniuEZgYoU1mQOkcrId9io++HzsOGcDF7WCs5ZE TUMlY1Wuzp1hAN0Uq1S1PPJqDB97JXs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:39:12 2025 by rpki-client