$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa File: b9395f62-c1cf-3e94-8786-53a487982b1e.roa (raw, json) Hash identifier: hJmV0k95jyrUaHHwqFV8Td4qXAkmlhgulyv/uzRy/RM= Subject key identifier: 5E:9F:55:1D:61:2F:F6:53:89:F5:71:E0:FC:54:C2:9A:73:43:97:55 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B3DB703E0A2EE401C5215AF60 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 216.238.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:03:e0:a2:ee:40:1c:52:15:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9222cfdc-5930-4cc7-9df3-520f060c4ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:fa:92:d3:75:73:82:a7:0e:dc:74:ef:44: 3b:61:3f:24:d7:db:75:11:02:e5:9e:d2:34:4a:9b: 05:45:47:92:9b:63:5f:25:1a:46:4c:8a:2c:76:1b: 82:01:23:e8:cc:34:0d:b9:26:a5:d4:9e:99:d7:d9: 7b:84:6f:af:c3:b9:7d:49:bf:3b:42:be:88:51:78: e1:7d:23:80:68:e8:68:35:3f:53:48:2b:ba:3f:0d: 07:2c:b1:62:85:ad:2c:d6:77:12:19:21:7d:39:ee: 32:ba:d3:9d:bd:59:22:31:b6:a7:b7:e1:7b:99:5c: 06:04:8d:a6:9e:19:93:4d:58:c3:ee:6a:c6:8d:2d: 3c:15:d8:8b:9b:95:01:ec:d6:c0:04:7e:79:01:21: ed:42:a2:e5:21:9f:ba:98:a5:ed:d3:f9:78:5e:5b: 5e:1c:6d:9e:fa:59:0c:57:50:9b:5c:3d:17:95:1b: e7:0a:e6:f7:57:4c:cd:16:77:d0:5f:b4:aa:74:62: 68:0b:69:e0:a3:7e:c3:ed:e4:91:9e:93:7f:48:57: 8a:a6:1a:38:48:0d:75:52:68:bd:23:5d:79:c7:8c: 1a:33:60:33:88:5e:d4:f4:bc:45:ca:50:64:f1:fa: 03:25:4b:4d:5c:f6:ee:94:10:08:db:79:2d:2d:25: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:55:1D:61:2F:F6:53:89:F5:71:E0:FC:54:C2:9A:73:43:97:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:97:44:3b:f3:6d:38:ad:95:9e:8c:e3:2b:ad:7f:c0:53:ef: 1f:2e:8c:ed:cc:23:43:2f:14:bd:0b:a2:33:a8:c2:3f:3d:12: 97:f7:a6:6f:f6:84:cc:1f:55:e8:56:3d:dd:69:ba:93:c3:0b: f6:51:11:c8:e9:8b:81:df:9c:bd:fb:50:ed:10:21:af:5f:e6: c1:ca:de:2c:2b:c0:d7:cc:b0:98:f3:c8:66:0b:93:e8:5c:38: 8b:39:68:b4:69:83:dd:0c:20:b9:c2:ac:04:a0:16:c5:54:cd: 72:c3:e2:5c:fc:16:35:06:85:7a:45:be:1b:93:90:47:69:ae: 15:5a:31:4b:90:05:d6:dc:fb:fd:97:93:43:43:5d:d9:9c:e1: 88:ad:1a:7f:81:e9:0a:bf:44:70:bc:96:5b:fb:4b:07:6a:c1: 44:fe:b8:74:9c:14:62:04:ed:c8:ef:54:71:22:de:2f:06:ef: 84:e9:b3:3e:96:2a:5f:08:f7:a8:98:f5:b5:3d:cf:6c:d6:55: f3:b6:22:13:1a:77:4b:f7:96:8e:9f:8b:40:f6:c9:31:26:b8: bc:7e:f4:99:09:03:7c:41:b3:4d:83:01:05:68:fa:80:86:3c: d4:1f:fa:28:2f:d9:8b:5b:7e:f4:14:ba:52:77:b6:e3:da:a6: 2d:ae:d7:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twPgou5AHFIVr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTIyMmNmZGMtNTkzMC00Y2M3LTlkZjMtNTIwZjA2MGM0Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ36ktN1c4KnDtx070Q7YT8k19t1EQLlntI0 SpsFRUeSm2NfJRpGTIosdhuCASPozDQNuSal1J6Z19l7hG+vw7l9Sb87Qr6IUXjh fSOAaOhoNT9TSCu6Pw0HLLFiha0s1ncSGSF9Oe4yutOdvVkiMbant+F7mVwGBI2m nhmTTVjD7mrGjS08FdiLm5UB7NbABH55ASHtQqLlIZ+6mKXt0/l4XlteHG2e+lkM V1CbXD0XlRvnCub3V0zNFnfQX7SqdGJoC2ngo37D7eSRnpN/SFeKpho4SA11Umi9 I115x4waM2AziF7U9LxFylBk8foDJUtNXPbulBAI23ktLSXgbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6fVR1hL/ZTifVx4PxUwppzQ5dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYjkzOTVmNjItYzFjZi0z ZTk0LTg3ODYtNTNhNDg3OTgyYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaXRDvzbTitlZ6M4yutf8BT7x8ujO3MI0MvFL0LojOowj89Epf3pm/2 hMwfVehWPd1pupPDC/ZREcjpi4HfnL37UO0QIa9f5sHK3iwrwNfMsJjzyGYLk+hc OIs5aLRpg90MILnCrASgFsVUzXLD4lz8FjUGhXpFvhuTkEdprhVaMUuQBdbc+/2X k0NDXdmc4YitGn+B6Qq/RHC8llv7SwdqwUT+uHScFGIE7cjvVHEi3i8G74Tpsz6W Kl8I96iY9bU9z2zWVfO2IhMad0v3lo6fi0D2yTEmuLx+9JkJA3xBs02DAQVo+oCG PNQf+igv2YtbfvQUulJ3tuPapi2u1ys= -----END CERTIFICATE-----Generated at Sat Oct 11 01:04:36 2025 by rpki-client