$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/ac5f2aa5-fd8a-3e37-8f02-f47731eb69c4.roa File: ac5f2aa5-fd8a-3e37-8f02-f47731eb69c4.roa (raw, json) Hash identifier: KKX5bkTQZ1SEnmTHNPAVyXqt5mpq+dOIN3VKNf1gfX0= Subject key identifier: 26:52:A1:89:E2:1D:B3:17:EA:AA:08:45:4A:56:AF:AE:D7:3F:AE:3A Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Certificate serial: 010D0C9F4328584B2FC1951FDD0B2BF4991891C0 Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/ac5f2aa5-fd8a-3e37-8f02-f47731eb69c4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397453 IP address blocks: 159.112.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:95:1f:dd:0b:2b:f4:99:18:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=5f0d1494-3638-4cba-bb5b-732bdc87f723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:ac:81:d9:75:ae:71:2f:e0:74:56:b4:a6: fa:41:32:d2:09:7a:18:ea:8b:df:b4:de:19:56:a6: c7:14:0e:bf:16:54:c6:b7:b3:b4:59:a4:e3:d9:7c: 0b:6a:39:0b:85:1a:7d:8c:97:ae:12:05:fa:7a:43: cb:01:6e:5e:35:a6:0f:13:d3:b9:c5:a3:cd:7a:5a: 01:ce:09:64:a9:4b:82:11:58:d1:fc:24:e0:16:81: 8d:db:17:b7:97:82:d8:a1:fd:bc:c2:15:6f:e2:7a: 8f:1b:7f:a0:c3:41:70:e5:34:e6:51:17:aa:09:fc: 2f:6c:0b:dc:d6:c7:fb:6c:d5:f3:60:71:06:f2:c9: 19:95:64:df:39:66:77:5b:52:f8:65:c6:8e:65:73: f0:27:5f:03:2d:89:e4:b7:e4:06:d2:0d:61:b9:8b: 84:58:0c:fd:ee:44:df:82:47:98:f7:4d:43:4d:c4: 52:67:0e:a3:ea:33:5a:e7:88:06:d0:49:1c:33:34: d7:06:45:cc:e2:07:eb:e7:f2:60:42:8d:f1:ec:2c: 8e:77:29:c4:f2:bd:c9:87:5d:1b:f3:7e:00:b5:f3: b9:65:f6:62:0c:4e:7c:a8:bd:6e:c6:b7:7f:fa:31: b7:6d:e8:de:6b:56:ce:3f:ab:73:ad:4f:15:20:81: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:52:A1:89:E2:1D:B3:17:EA:AA:08:45:4A:56:AF:AE:D7:3F:AE:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/ac5f2aa5-fd8a-3e37-8f02-f47731eb69c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl X509v3 Authority Key Identifier: keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer sbgp-ipAddrBlock: critical IPv4: 159.112.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:04:b2:6b:31:38:fb:0f:91:02:6d:19:a0:3a:0c:e2:bd:e1: 2c:8d:35:5a:50:bc:4f:89:76:84:4c:5f:6a:25:e2:fb:56:00: 3a:fd:99:67:97:71:3e:5d:d7:e2:11:fe:7f:2a:89:f8:10:6e: bb:09:dc:08:c7:30:ed:60:11:f8:69:b5:6d:34:9d:4b:c4:02: 23:19:74:d3:ac:79:bd:7a:1e:55:69:a9:d9:f1:a8:97:f6:33: 66:97:55:73:79:4a:ed:65:a3:54:3a:77:89:bb:cd:6b:ab:41: 96:08:cb:61:ec:29:df:a0:67:ba:11:88:3e:1e:38:91:58:65: c3:07:81:0c:74:da:cd:23:6f:16:6a:e0:6d:b8:ea:4b:a5:bc: ec:af:dd:b8:a8:45:35:d8:23:25:61:83:c1:d9:2f:22:29:35: e1:80:23:b3:d2:1a:87:62:4a:e7:a9:c5:fd:51:11:17:7d:c1: a2:d2:b2:85:e0:0e:a0:d9:ae:4d:df:cc:ac:37:6c:7b:d2:34: 84:69:13:45:8a:cc:e7:2f:61:26:89:7c:21:4d:13:fd:3f:65: eb:b4:1a:ca:04:23:32:b1:36:3d:c9:22:d4:ac:d1:ff:df:19: 2c:16:30:ad:9f:d7:20:95:a6:39:26:dc:e0:b7:be:fc:28:fb: 3d:9d:b0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZUf3Qsr9JkYkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz NTgzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NWYwZDE0OTQtMzYzOC00Y2JhLWJiNWItNzMyYmRjODdmNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK+sgdl1rnEv4HRWtKb6QTLSCXoY6ovftN4Z VqbHFA6/FlTGt7O0WaTj2XwLajkLhRp9jJeuEgX6ekPLAW5eNaYPE9O5xaPNeloB zglkqUuCEVjR/CTgFoGN2xe3l4LYof28whVv4nqPG3+gw0Fw5TTmUReqCfwvbAvc 1sf7bNXzYHEG8skZlWTfOWZ3W1L4ZcaOZXPwJ18DLYnkt+QG0g1huYuEWAz97kTf gkeY901DTcRSZw6j6jNa54gG0EkcMzTXBkXM4gfr5/JgQo3x7CyOdynE8r3Jh10b 834AtfO5ZfZiDE58qL1uxrd/+jG3bejea1bOP6tzrU8VIIGItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZSoYniHbMX6qoIRUpWr67XP646MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvYWM1ZjJhYTUtZmQ4YS0z ZTM3LThmMDItZjQ3NzMxZWI2OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0 ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0 MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn3DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoEsmsxOPsPkQJtGaA6DOK94SyNNVpQvE+JdoRMX2ol4vtWADr9mWeX cT5d1+IR/n8qifgQbrsJ3AjHMO1gEfhptW00nUvEAiMZdNOseb16HlVpqdnxqJf2 M2aXVXN5Su1lo1Q6d4m7zWurQZYIy2HsKd+gZ7oRiD4eOJFYZcMHgQx02s0jbxZq 4G246kulvOyv3bioRTXYIyVhg8HZLyIpNeGAI7PSGodiSuepxf1RERd9waLSsoXg DqDZrk3fzKw3bHvSNIRpE0WKzOcvYSaJfCFNE/0/Zeu0GsoEIzKxNj3JItSs0f/f GSwWMK2f1yCVpjkm3OC3vvwo+z2dsI8= -----END CERTIFICATE-----Generated at Wed Sep 17 00:44:16 2025 by rpki-client