$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa File: b9395f62-c1cf-3e94-8786-53a487982b1e.roa (raw, json) Hash identifier: dNQtwTVpp+Kgk5T/JxwcqRVfdDUwRUWy+huzvmNRIFo= Subject key identifier: 32:96:C7:1B:27:DC:BA:E0:63:A6:44:A9:92:3E:16:30:3E:6E:E5:AC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A5CFB355B0C8FF9D20298A060 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13536 IP address blocks: 216.238.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:35:5b:0c:8f:f9:d2:02:98:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=418a2413-1044-411b-abfa-cfec8a1e076e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:0b:fd:f7:eb:8b:04:c8:4a:b5:a8:00:51: 6f:b3:5f:ff:10:7f:a0:dd:11:7c:19:09:e8:86:fd: cf:d9:46:56:70:49:17:36:63:08:8b:28:bb:ed:48: 6f:c4:2c:7a:06:63:7c:d4:51:b2:37:f8:21:5f:dc: 42:24:31:1a:b7:d2:22:55:0d:3d:11:53:83:77:38: 87:12:86:96:2e:32:62:7d:6f:b5:8b:70:f7:66:99: 0a:b0:9e:76:1f:25:3e:a0:06:9d:0c:3f:eb:41:0c: a7:4f:bf:e9:b8:55:ce:f4:67:f9:76:99:c5:e8:4c: 33:77:af:62:75:e2:c9:59:dd:f5:66:e6:25:6f:5b: 2a:41:28:c3:bd:21:2d:00:4e:67:b4:17:a7:6f:4f: 28:4d:a1:98:40:24:51:e4:08:0c:39:a6:3b:9c:7a: 2f:85:c3:49:6e:d3:fe:47:2a:1d:ab:6e:03:79:e7: e9:4c:27:2f:25:bc:b7:e2:3e:34:3f:a1:25:5a:ac: d5:95:17:a7:70:ce:5c:dd:5a:e6:16:3e:1a:db:31: 67:e5:fc:57:29:a6:83:6f:cb:d9:0b:43:16:3b:6b: 98:fb:a2:44:56:60:68:9e:9c:94:bc:29:e2:f1:5d: 2b:62:dc:29:e1:47:44:14:14:04:bd:20:3b:3e:48: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:C7:1B:27:DC:BA:E0:63:A6:44:A9:92:3E:16:30:3E:6E:E5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:bd:40:33:c3:a7:83:a1:8a:5b:ea:35:b1:d9:bf:e5:df:44: cf:53:29:5f:d0:b3:3d:87:6e:ae:40:d2:aa:e4:06:2a:70:c7: 0b:c6:98:3d:cd:02:af:5d:fb:03:5d:66:46:42:19:89:82:64: 16:eb:f6:99:0f:18:f3:66:db:10:e7:7d:c4:e7:70:b0:93:d6: 50:6f:01:c7:6e:0b:01:5a:2e:36:f0:64:bd:bb:9f:26:c4:b5: 4d:37:f3:bb:90:bb:43:8c:46:9b:d0:a8:30:25:95:31:cd:3d: c2:b0:0d:7b:69:b4:37:82:1e:7b:5c:c5:94:32:3e:7a:12:d4: b8:68:77:9f:44:74:1c:09:d3:b6:1a:2b:a5:b4:1b:1f:af:e1: 18:48:7a:ed:75:e4:1e:67:1f:c5:d0:00:6b:09:de:0b:53:af: 44:fb:92:b5:9b:24:65:1a:c9:d4:c3:12:bd:ed:87:e5:e4:24: 9c:17:5d:55:d8:9d:eb:72:0f:92:0a:5f:1a:0b:b4:19:77:d5: 0b:73:8f:b7:ce:03:e6:49:08:16:03:0b:70:fb:80:99:68:fa: b6:86:c3:c1:c9:10:d1:89:24:bd:87:90:d8:1a:5f:9b:ce:8e: fd:9c:d9:0f:74:8d:42:4d:c8:9c:1b:93:92:51:30:9a:79:0c: 1e:81:ba:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zVbDI/50gKYoGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDE4YTI0MTMtMTA0NC00MTFiLWFiZmEtY2ZlYzhhMWUwNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5UL/ffriwTISrWoAFFvs1//EH+g3RF8GQno hv3P2UZWcEkXNmMIiyi77UhvxCx6BmN81FGyN/ghX9xCJDEat9IiVQ09EVODdziH EoaWLjJifW+1i3D3ZpkKsJ52HyU+oAadDD/rQQynT7/puFXO9Gf5dpnF6Ewzd69i deLJWd31ZuYlb1sqQSjDvSEtAE5ntBenb08oTaGYQCRR5AgMOaY7nHovhcNJbtP+ Ryodq24DeefpTCcvJby34j40P6ElWqzVlRencM5c3VrmFj4a2zFn5fxXKaaDb8vZ C0MWO2uY+6JEVmBonpyUvCni8V0rYtwp4UdEFBQEvSA7PkhCtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKWxxsn3LrgY6ZEqZI+FjA+buWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYjkzOTVmNjItYzFjZi0z ZTk0LTg3ODYtNTNhNDg3OTgyYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2O6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ69QDPDp4OhilvqNbHZv+XfRM9TKV/Qsz2Hbq5A0qrkBipwxwvGmD3N Aq9d+wNdZkZCGYmCZBbr9pkPGPNm2xDnfcTncLCT1lBvAcduCwFaLjbwZL27nybE tU0387uQu0OMRpvQqDAllTHNPcKwDXtptDeCHntcxZQyPnoS1Lhod59EdBwJ07Ya K6W0Gx+v4RhIeu115B5nH8XQAGsJ3gtTr0T7krWbJGUaydTDEr3th+XkJJwXXVXY netyD5IKXxoLtBl31Qtzj7fOA+ZJCBYDC3D7gJlo+raGw8HJENGJJL2HkNgaX5vO jv2c2Q90jUJNyJwbk5JRMJp5DB6BugY= -----END CERTIFICATE-----Generated at Wed Jul 9 16:13:14 2025 by rpki-client