$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa File: 9d6b663f-e6ef-3144-b550-31e5f6344a68.roa (raw, json) Hash identifier: GfEd0Ec+KoyhNC8U4xmTpNNeOeLTY3uZPVQrQH0J6QQ= Subject key identifier: E2:B7:B7:6F:A6:97:C5:68:8B:73:BE:97:9C:8B:50:E5:45:AC:02:74 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B38219CB6E33574709CE50250 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 54989 IP address blocks: 207.136.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9c:b6:e3:35:74:70:9c:e5:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=d5e7a713-a249-402a-9eac-da3788e9c31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:59:c5:a8:3a:a1:64:de:42:86:2b:53:84: 76:45:94:49:f3:79:39:3f:f6:63:7a:a8:63:06:75: 63:76:82:ce:e9:8f:8b:c3:26:e1:e2:b3:f8:56:a4: 00:58:0f:19:eb:f9:9f:1e:f6:2f:53:58:24:b1:b7: 53:1c:74:62:1d:1c:b3:37:f5:60:ec:46:15:24:03: 3d:4e:31:47:8d:9f:1b:70:a0:56:dc:2a:62:bd:15: 23:61:0f:bb:d2:71:69:c1:37:18:62:4a:a8:36:4c: 03:b6:4c:04:58:a0:d4:40:a8:20:0a:6b:b5:11:5e: 91:98:88:bd:dc:2c:4e:b8:9a:86:fe:7e:f9:34:01: 72:dd:fb:c0:99:b0:23:44:17:ca:a8:3b:c7:e4:57: 63:55:9b:3b:41:1a:fe:dd:c5:33:64:cd:f3:2a:0f: 8b:b0:2c:7c:72:98:78:1a:b8:e1:0e:52:48:7d:86: 01:12:40:49:b6:79:44:e2:46:bb:00:8a:86:2a:30: 99:dd:83:ab:ab:c6:9f:1d:b7:d1:1a:24:01:e0:89: 62:eb:6b:6b:b6:2f:ff:de:f6:60:1b:8d:d9:cc:25: 9b:4c:71:9c:90:dd:a5:46:f5:9c:8e:e5:42:16:ef: b0:e2:75:33:d0:ef:1f:48:b3:28:d6:b9:60:ae:fa: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:B7:6F:A6:97:C5:68:8B:73:BE:97:9C:8B:50:E5:45:AC:02:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/9d6b663f-e6ef-3144-b550-31e5f6344a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 207.136.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:81:c4:8f:0e:65:57:80:32:e1:ac:56:eb:a4:52:0f:b0:b2: 43:4e:ee:e3:8c:89:f9:81:b3:4f:4c:da:62:bd:bc:89:94:89: 97:3a:e2:33:63:fa:2e:c5:2b:90:5f:2f:42:72:b8:07:1c:4b: 22:ee:76:04:bc:4b:f9:b2:12:ef:b7:3d:0a:92:17:bb:32:5d: 5b:2a:3f:f7:72:5c:ba:d6:2c:c2:57:7d:0a:34:5f:43:d9:f8: b2:8c:b7:ad:10:85:5a:3a:b8:7b:06:72:f4:82:c2:69:31:c7: cf:94:35:2e:30:77:90:c5:ac:a3:6a:6e:2d:23:e8:e5:fd:36: 11:84:48:70:bf:97:33:c2:d7:4b:c2:54:69:c9:ad:41:3b:f9: 76:1d:1e:0c:c9:cd:bd:ac:9e:72:56:ef:94:36:f5:21:a0:59: 4d:3d:ef:b6:30:9a:b8:f3:42:75:b7:8f:ea:3f:97:c2:72:3d: 78:71:f1:4c:29:a7:86:c0:09:0a:a2:cb:1f:c2:21:c5:ec:c2: fd:dc:60:2d:98:1c:07:44:cf:39:23:04:4e:08:86:60:fc:78: 7b:3d:2c:e2:e4:de:44:a3:db:11:a9:cd:fd:78:ef:21:c6:de: 53:aa:e9:f3:e5:24:3a:2c:7a:47:ca:b5:96:5a:a1:37:6e:5c: f8:09:5e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZy24zV0cJzlAlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDVlN2E3MTMtYTI0OS00MDJhLTllYWMtZGEzNzg4ZTljMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLBZxag6oWTeQoYrU4R2RZRJ83k5P/Zjeqhj BnVjdoLO6Y+Lwybh4rP4VqQAWA8Z6/mfHvYvU1gksbdTHHRiHRyzN/Vg7EYVJAM9 TjFHjZ8bcKBW3CpivRUjYQ+70nFpwTcYYkqoNkwDtkwEWKDUQKggCmu1EV6RmIi9 3CxOuJqG/n75NAFy3fvAmbAjRBfKqDvH5FdjVZs7QRr+3cUzZM3zKg+LsCx8cph4 GrjhDlJIfYYBEkBJtnlE4ka7AIqGKjCZ3YOrq8afHbfRGiQB4Ili62trti//3vZg G43ZzCWbTHGckN2lRvWcjuVCFu+w4nUz0O8fSLMo1rlgrvqVDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK3t2+ml8Voi3O+l5yLUOVFrAJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOWQ2YjY2M2YtZTZlZi0z MTQ0LWI1NTAtMzFlNWY2MzQ0YTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz4jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaBxI8OZVeAMuGsVuukUg+wskNO7uOMifmBs09M2mK9vImUiZc64jNj +i7FK5BfL0JyuAccSyLudgS8S/myEu+3PQqSF7syXVsqP/dyXLrWLMJXfQo0X0PZ +LKMt60QhVo6uHsGcvSCwmkxx8+UNS4wd5DFrKNqbi0j6OX9NhGESHC/lzPC10vC VGnJrUE7+XYdHgzJzb2snnJW75Q29SGgWU0977YwmrjzQnW3j+o/l8JyPXhx8Uwp p4bACQqiyx/CIcXswv3cYC2YHAdEzzkjBE4IhmD8eHs9LOLk3kSj2xGpzf147yHG 3lOq6fPlJDosekfKtZZaoTduXPgJXl8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:38:07 2025 by rpki-client