$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json) Hash identifier: H1mWtKffPTRFqrtiEvxyogvdTIV6CMkp0N4DqJ7wsyA= Subject key identifier: 57:69:E6:A9:97:4C:7A:47:FF:BB:8D:D7:59:49:95:64:92:06:C3:01 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584BA0D266C5E0441AC5371DF980 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 13536 IP address blocks: 216.179.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:66:c5:e0:44:1a:c5:37:1d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=fa549347-b856-450f-9007-92c54ade7a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:2f:d2:17:a4:17:17:d3:bf:67:68:d9:f1: 5b:74:3d:a5:23:4d:ed:d5:5c:50:df:b4:82:a0:f0: eb:ba:4c:8a:c6:6b:e5:99:61:d2:50:57:f9:fe:b2: 69:7d:8d:54:da:3f:fb:b1:a1:69:c8:f1:22:47:c5: bc:0c:3f:b0:e2:e1:47:79:ad:09:1e:38:59:20:c4: 7c:92:bb:b3:31:dd:4b:e7:3c:01:4d:8a:fe:ea:77: b7:16:c9:af:b8:2e:10:b8:b8:2f:6e:44:06:52:4c: b0:73:d9:07:62:8e:f7:75:17:00:1a:4c:18:d6:5e: 3d:dd:3b:e9:2c:48:eb:a6:af:d0:da:f7:0d:8c:50: fd:a6:21:05:79:f2:b1:03:9f:8c:dc:6f:b3:43:24: 3f:79:7d:75:f3:1e:7d:f5:18:b1:5a:38:14:24:44: 23:e0:fc:41:56:a9:9d:97:43:43:0d:bc:cb:ab:fa: f5:44:50:76:4f:e5:a1:94:87:6a:12:7c:9c:75:15: 89:8d:6a:68:e0:5c:c2:89:85:52:8d:f2:9c:6a:b7: ff:1d:76:35:b3:d2:57:d6:17:5c:0b:39:58:66:69: aa:0d:55:95:c1:ec:48:d7:80:4b:17:1a:1d:3d:e2: d6:26:28:28:cb:e8:4c:d5:ba:5c:4a:c4:11:4b:dd: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:E6:A9:97:4C:7A:47:FF:BB:8D:D7:59:49:95:64:92:06:C3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d8:99:44:34:6f:ac:7b:65:b9:90:e6:5f:46:27:93:10:56: f2:23:de:25:16:6f:af:1f:b9:3f:17:61:41:07:a4:85:d6:09: c2:b7:64:2c:7b:14:d6:d2:91:e4:b4:d9:d6:9e:6c:90:a8:5a: 70:fb:50:7a:24:d2:5f:1e:32:c3:90:2c:ff:03:ed:9f:9a:61: 52:f2:7e:e1:a8:93:43:53:b4:5a:cf:d9:fa:5b:4e:80:1a:ee: 7e:82:81:78:a1:13:ba:76:4e:e8:2f:37:2a:e5:39:6e:32:b2: 2d:7f:74:a6:5d:8e:43:6d:8e:ce:1e:1b:49:48:0c:5b:9e:34: cd:65:a3:e8:f3:56:78:38:a8:13:da:81:27:ff:2c:24:79:bb: 4a:82:c2:7d:aa:72:9d:ec:d8:45:f9:56:6d:46:5d:32:d2:c3: ec:00:0f:06:53:23:a9:93:5b:7c:78:d2:c5:00:6a:5b:01:9b: 1b:4b:6b:28:e8:e0:94:49:6e:11:f6:af:74:55:d2:85:dd:47: ab:41:0c:ba:84:67:7c:27:97:98:71:45:13:1e:81:2c:91:62: 92:0d:f8:39:6d:24:de:31:25:85:44:23:48:e7:f2:c2:6f:35: c7:63:8d:94:5c:5b:d4:46:24:96:54:d4:97:a2:47:ae:3d:21: 77:54:4d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mbF4EQaxTcd+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZmE1NDkzNDctYjg1Ni00NTBmLTkwMDctOTJjNTRhZGU3YTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh18v0hekFxfTv2do2fFbdD2lI03t1VxQ37SC oPDrukyKxmvlmWHSUFf5/rJpfY1U2j/7saFpyPEiR8W8DD+w4uFHea0JHjhZIMR8 kruzMd1L5zwBTYr+6ne3FsmvuC4QuLgvbkQGUkywc9kHYo73dRcAGkwY1l493Tvp LEjrpq/Q2vcNjFD9piEFefKxA5+M3G+zQyQ/eX118x599RixWjgUJEQj4PxBVqmd l0NDDbzLq/r1RFB2T+WhlIdqEnycdRWJjWpo4FzCiYVSjfKcarf/HXY1s9JX1hdc CzlYZmmqDVWVwexI14BLFxodPeLWJigoy+hM1bpcSsQRS92twQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdp5qmXTHpH/7uN11lJlWSSBsMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjg5OWE3ZjctMjdjMi0z Y2Y2LWJiYmYtOGIwZTgzM2FlMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2LMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPYmUQ0b6x7ZbmQ5l9GJ5MQVvIj3iUWb68fuT8XYUEHpIXWCcK3ZCx7 FNbSkeS02daebJCoWnD7UHok0l8eMsOQLP8D7Z+aYVLyfuGok0NTtFrP2fpbToAa 7n6CgXihE7p2TugvNyrlOW4ysi1/dKZdjkNtjs4eG0lIDFueNM1lo+jzVng4qBPa gSf/LCR5u0qCwn2qcp3s2EX5Vm1GXTLSw+wADwZTI6mTW3x40sUAalsBmxtLayjo 4JRJbhH2r3RV0oXdR6tBDLqEZ3wnl5hxRRMegSyRYpIN+DltJN4xJYVEI0jn8sJv NcdjjZRcW9RGJJZU1JeiR649IXdUTV4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:43:30 2025 by rpki-client