$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa File: 96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa (raw, json) Hash identifier: sI6dLQMDM2NRBXBqQnXXNpUfvQ9/3U48lFJRkqnF90c= Subject key identifier: CE:11:12:11:7A:A8:D4:16:6D:32:98:67:57:A0:FE:EB:66:C5:32:75 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5CFB336744BEFFC92E68EA80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 15320 IP address blocks: 216.27.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:33:67:44:be:ff:c9:2e:68:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=ed409efc-03a3-4dfe-97dd-de6207de9de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:83:8b:e0:2e:8c:c9:df:9c:13:a8:01:26: c5:e5:c2:d6:9f:56:3b:e1:81:bd:bf:cf:c2:81:77: 30:cc:17:ce:42:27:20:24:f3:fa:cf:0d:7f:56:36: d4:bc:99:08:bc:00:67:f4:e8:a4:04:e6:5f:55:fd: 1b:b5:e6:15:b9:05:53:cb:0a:40:c1:d6:5d:8e:aa: 18:dd:10:3e:eb:1a:cc:a8:b9:12:d1:c8:b4:6e:3b: 0f:9c:02:54:ca:e2:48:9b:56:cd:55:18:00:3a:8a: 3e:06:b4:18:64:76:86:9d:19:01:be:bc:91:01:2b: 19:28:fe:ee:72:9e:b4:48:f6:c8:ac:0c:f4:7b:97: c8:13:a7:dd:9f:16:e5:f9:69:4e:03:c1:02:79:cd: 41:b8:30:3f:b5:bc:cb:55:d9:d0:c6:59:73:47:d2: 9f:3b:0b:36:35:0d:ca:78:f1:45:d4:d7:bb:11:64: 1a:3d:99:85:2b:f1:03:75:b8:9c:48:42:ff:36:93: 18:94:a7:51:9a:b3:6e:3c:cb:12:51:19:89:29:1a: e8:13:ae:d7:5f:89:c7:8a:36:79:40:38:28:82:dd: 4d:59:c7:a5:2c:69:2b:28:85:e4:75:52:e5:e2:f3: 19:c2:91:f1:af:2c:4b:a5:57:07:e5:87:de:cb:04: 1a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:12:11:7A:A8:D4:16:6D:32:98:67:57:A0:FE:EB:66:C5:32:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/96c512e3-d2c5-3691-ac4d-1cc1a69ee582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.27.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e8:59:ee:74:f1:f5:07:cb:53:ce:04:db:69:d8:04:b8:cf: cc:b5:7b:8c:71:6e:c9:c5:56:70:a0:27:4e:6f:fc:b6:c4:96: 0e:42:de:4e:3a:a5:ed:5c:30:3f:89:15:26:94:cc:9d:ce:44: 9c:4f:21:f9:09:5c:e2:b0:01:3c:0d:c6:d2:74:3a:ba:3a:be: ba:b5:9a:f6:ed:5a:46:02:36:8b:9f:99:c8:55:bd:75:4f:2e: 67:22:53:c7:92:06:8a:db:05:ef:b0:4b:21:d6:ff:0a:0a:0f: 1a:bc:11:71:60:e4:87:09:e3:46:bd:49:90:55:2a:bc:83:6a: f2:81:8b:e6:5f:76:7b:8f:33:6f:cc:00:4d:d6:a3:ad:c6:36: 2d:72:19:2f:2e:32:aa:44:60:2d:69:26:cd:2e:9c:f1:16:01: b7:7e:35:cf:09:6f:95:13:f9:f3:1e:1b:62:16:bf:d6:50:14: 88:5e:44:95:9a:54:59:3f:ff:45:d3:d3:d6:df:c8:38:eb:98: 8c:cc:0b:f2:48:69:1a:77:93:ab:bf:63:44:c9:c1:9e:18:68: 63:77:b6:1d:b4:0b:1b:ef:5b:50:81:53:30:45:fc:70:e3:3f: af:c0:ad:38:35:16:16:b8:e5:16:80:43:f3:77:62:07:c9:7e: bd:71:90:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zNnRL7/yS5o6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZWQ0MDllZmMtMDNhMy00ZGZlLTk3ZGQtZGU2MjA3ZGU5ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCeDi+AujMnfnBOoASbF5cLWn1Y74YG9v8/C gXcwzBfOQicgJPP6zw1/VjbUvJkIvABn9OikBOZfVf0bteYVuQVTywpAwdZdjqoY 3RA+6xrMqLkS0ci0bjsPnAJUyuJIm1bNVRgAOoo+BrQYZHaGnRkBvryRASsZKP7u cp60SPbIrAz0e5fIE6fdnxbl+WlOA8ECec1BuDA/tbzLVdnQxllzR9KfOws2NQ3K ePFF1Ne7EWQaPZmFK/EDdbicSEL/NpMYlKdRmrNuPMsSURmJKRroE67XX4nHijZ5 QDgogt1NWcelLGkrKIXkdVLl4vMZwpHxryxLpVcH5YfeywQaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4REhF6qNQWbTKYZ1eg/utmxTJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOTZjNTEyZTMtZDJjNS0z NjkxLWFjNGQtMWNjMWE2OWVlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3oWe508fUHy1POBNtp2AS4z8y1e4xxbsnFVnCgJ05v/LbElg5C3k46 pe1cMD+JFSaUzJ3ORJxPIfkJXOKwATwNxtJ0Oro6vrq1mvbtWkYCNoufmchVvXVP LmciU8eSBorbBe+wSyHW/woKDxq8EXFg5IcJ40a9SZBVKryDavKBi+ZfdnuPM2/M AE3Wo63GNi1yGS8uMqpEYC1pJs0unPEWAbd+Nc8Jb5UT+fMeG2IWv9ZQFIheRJWa VFk//0XT09bfyDjrmIzMC/JIaRp3k6u/Y0TJwZ4YaGN3th20CxvvW1CBUzBF/HDj P6/ArTg1Fha45RaAQ/N3YgfJfr1xkMo= -----END CERTIFICATE-----Generated at Wed Jul 9 20:46:49 2025 by rpki-client