$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa File: acc5bd5d-5f68-3673-813c-63c52d3a1683.roa (raw, json) Hash identifier: G1JcP9ARlgQOwPp96Rz2pMLHSzOV5YhyzAqmghobMiU= Subject key identifier: D2:F3:1D:5F:45:2A:85:FA:BA:82:DC:FD:6E:1A:25:3B:04:A2:1F:97 Certificate issuer: /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Certificate serial: 010D0C9F4328584B2A2C3A432EFF269359BAA0C0 Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 21521 IP address blocks: 192.252.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:43:2e:ff:26:93:59:ba:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=9b1ae52d-194b-4af2-87a0-fdb558f24c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:65:e6:22:48:fa:d2:1e:ed:bd:a6:ce:23:2b: fa:33:a9:fa:3c:c3:4b:88:25:f1:52:e1:f0:6a:7a: 62:d6:2d:05:9c:43:e2:fe:43:72:56:88:e3:a7:7e: 3a:88:b3:69:00:61:74:2a:59:af:41:2b:86:4f:02: c8:fb:9a:14:7d:d3:7c:7f:2b:04:4a:21:5a:44:df: 77:af:af:e1:f8:82:88:ff:7a:1c:53:81:4b:6d:42: 77:51:f9:96:98:1a:2a:b6:ee:25:37:a1:4c:d1:bf: a0:9f:1f:bb:e4:eb:39:17:64:cd:ad:04:fb:13:76: b2:7d:20:36:47:ca:b6:0c:66:65:e7:d9:d6:00:c9: 3b:84:04:ad:81:7b:98:2b:4f:6a:ac:bc:d3:e4:af: 16:21:57:46:d5:e5:e8:89:fe:4d:29:9b:e5:47:35: 61:f4:bd:58:2b:1e:e6:0d:7b:ce:c7:ca:c8:7d:ac: 41:c2:06:da:96:05:50:31:fa:8b:79:1b:ee:f3:68: 12:07:b7:e2:6e:1d:63:0a:7f:72:23:e5:44:00:09: 47:84:39:89:35:00:6f:45:b3:9f:ea:47:60:22:35: 3b:a0:a2:09:c6:bf:60:f5:35:32:98:e4:7a:96:93: 55:99:f8:69:11:b1:27:68:ea:68:6a:a0:8b:df:7b: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F3:1D:5F:45:2A:85:FA:BA:82:DC:FD:6E:1A:25:3B:04:A2:1F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/acc5bd5d-5f68-3673-813c-63c52d3a1683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl X509v3 Authority Key Identifier: keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e9:b7:df:92:cd:8c:02:e6:d8:7b:d1:86:2e:d7:f8:80:d9: 52:65:e6:37:83:9d:48:4f:32:d2:ad:5c:19:c0:b8:f5:3a:47: 72:ab:20:9c:a2:68:20:5b:f7:b9:52:66:ea:21:ed:19:8a:10: 4f:3c:41:19:30:3b:4b:88:68:ae:ae:36:13:c3:4c:7e:93:76: 0e:3e:7c:7f:6d:90:5a:f9:00:8a:80:0d:e3:7b:55:69:76:79: 13:c1:9e:96:a6:20:5a:c5:48:fc:18:b2:58:1c:22:44:07:7c: a4:e4:3a:1c:08:8b:76:99:fe:15:ac:d6:8a:53:a4:c2:b9:2c: f4:07:1a:44:a3:57:56:23:22:b8:8a:57:0b:8e:f6:8c:2e:4d: 24:5b:0c:c8:5e:1f:48:27:43:b0:fa:2b:07:3c:b3:02:4c:37: ff:5f:34:79:b4:4b:02:fb:b7:cb:45:43:33:00:e8:85:66:ca: e9:2d:b7:28:33:fc:96:9a:1d:85:2c:62:9f:66:f9:86:aa:ee: b3:1f:ae:28:d6:7f:84:18:7f:14:65:53:26:2e:ed:b3:77:30: 78:fd:72:92:19:68:be:61:b9:7c:d1:5e:01:47:fc:26:1e:44: 81:57:e1:8c:51:d0:86:77:b3:1e:21:28:f2:c2:86:e3:c7:f5: 7c:75:61:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDpDLv8mk1m6oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2Vl N2E1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OWIxYWU1MmQtMTk0Yi00YWYyLTg3YTAtZmRiNTU4ZjI0YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWXmIkj60h7tvabOIyv6M6n6PMNLiCXxUuHw anpi1i0FnEPi/kNyVojjp346iLNpAGF0KlmvQSuGTwLI+5oUfdN8fysESiFaRN93 r6/h+IKI/3ocU4FLbUJ3UfmWmBoqtu4lN6FM0b+gnx+75Os5F2TNrQT7E3ayfSA2 R8q2DGZl59nWAMk7hAStgXuYK09qrLzT5K8WIVdG1eXoif5NKZvlRzVh9L1YKx7m DXvOx8rIfaxBwgbalgVQMfqLeRvu82gSB7fibh1jCn9yI+VEAAlHhDmJNQBvRbOf 6kdgIjU7oKIJxr9g9TUymOR6lpNVmfhpEbEnaOpoaqCL33szFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLzHV9FKoX6uoLc/W4aJTsEoh+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMmM5 NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvYWNjNWJkNWQtNWY2OC0z NjczLTgxM2MtNjNjNTJkM2ExNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjJjOTQ1OTItNzNlOS00NTJlLWFk ODgtYWFmYzhlM2VlN2E1L2IyYzk0NTkyLTczZTktNDUyZS1hZDg4LWFhZmM4ZTNl ZTdhNS5jcmwwHwYDVR0jBBgwFoAUi1izm4Qm8HXsOYvA8T1AHv13TxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZj OGUzZWU3YTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwPwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITpt9+SzYwC5th70YYu1/iA2VJl5jeDnUhPMtKtXBnAuPU6R3KrIJyi aCBb97lSZuoh7RmKEE88QRkwO0uIaK6uNhPDTH6Tdg4+fH9tkFr5AIqADeN7VWl2 eRPBnpamIFrFSPwYslgcIkQHfKTkOhwIi3aZ/hWs1opTpMK5LPQHGkSjV1YjIriK VwuO9owuTSRbDMheH0gnQ7D6Kwc8swJMN/9fNHm0SwL7t8tFQzMA6IVmyukttygz /JaaHYUsYp9m+Yaq7rMfrijWf4QYfxRlUyYu7bN3MHj9cpIZaL5huXzRXgFH/CYe RIFX4YxR0IZ3sx4hKPLChuPH9Xx1YXM= -----END CERTIFICATE-----Generated at Mon Sep 15 07:57:09 2025 by rpki-client