$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa File: c1be6e65-98e4-3db0-9c6b-e982162e2022.roa (raw, json) Hash identifier: HjPOji9BCtxNJUZm36EmQ/PQsdMtXoiM4vl2NNzy8nc= Subject key identifier: F7:77:3B:B6:62:E2:05:DA:7B:52:12:52:03:90:18:2D:68:3E:AA:E5 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B80B766B97E750C5E437C9280 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 42 IP address blocks: 2001:500:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:66:b9:7e:75:0c:5e:43:7c:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=a4777ec7-ec36-446c-8245-a93970b59202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:e7:d7:dc:09:86:df:3a:53:9c:82:3e:02: b7:3b:1d:e1:84:39:cc:0b:65:09:de:63:f5:db:f7: 2e:94:cf:d8:b0:41:75:b3:86:8e:9d:e4:4e:97:d9: e9:95:03:c5:b9:d4:aa:40:4f:09:ce:b5:25:ad:65: db:2b:82:9f:86:69:da:06:b6:29:47:79:98:f3:9a: 4e:6b:60:19:4d:e6:34:cb:ee:1c:63:7e:7d:76:27: ab:b9:39:09:6b:34:e1:97:10:d6:2f:b9:6b:71:d5: 29:65:a4:8e:56:33:80:12:ff:ea:c7:dc:7a:69:7e: 0b:0b:10:db:79:f7:2a:97:58:c0:43:47:c1:59:8c: c1:be:22:52:78:c3:89:2f:6f:da:6c:21:14:a6:a6: 72:10:e4:64:31:53:e5:01:54:39:f6:6c:e9:2d:70: 90:2d:cb:ec:2b:3b:e4:b1:a3:80:5f:31:b6:49:bb: 72:b5:59:14:ad:71:62:c6:de:8b:9f:22:ed:df:f1: 44:ae:e0:21:9f:f4:de:00:28:6c:57:06:13:27:a7: 3b:df:e2:95:47:bc:b5:cb:e9:6a:b0:76:9c:fb:53: 51:53:81:a7:d1:2b:18:73:93:85:92:ec:52:bf:b4: 5c:4a:b9:b2:cf:e9:f5:7d:9c:40:05:30:d2:6c:e4: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:77:3B:B6:62:E2:05:DA:7B:52:12:52:03:90:18:2D:68:3E:AA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c1be6e65-98e4-3db0-9c6b-e982162e2022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:df:b0:a9:b1:b9:25:89:7f:fc:0d:4c:db:76:8d:2f:23:fc: a5:cc:c2:70:8a:d8:14:a3:b0:37:1e:a1:03:9c:09:94:dd:ab: ca:ad:d5:d2:e4:43:fa:3a:ef:fd:83:4d:ac:e1:9f:cd:3f:d4: 76:7a:9e:42:89:0e:12:c5:ea:e8:0f:5b:87:c4:11:66:bc:e6: 26:48:2f:7b:67:b0:2a:28:a7:44:1f:ae:a8:ce:cf:35:fe:b8: 1b:1d:9d:a8:bd:67:a6:e5:32:15:87:8f:90:23:31:7b:19:19: e5:49:da:4e:c4:bf:ca:f9:04:a3:4d:99:85:d5:39:4f:56:bc: 73:42:1e:d4:9b:40:f0:1c:58:28:ab:ce:6d:06:7a:00:fe:79: 35:3d:1f:5d:06:1f:96:68:a1:a8:8a:cd:48:7c:cf:90:78:55: 46:f4:3c:19:d4:d4:75:8e:24:01:7e:d4:b6:cd:ac:f6:90:a5: d3:d5:23:ae:6a:3c:04:2b:92:a1:79:8f:3d:74:52:70:5d:24: 78:a4:cf:fb:46:cc:e7:a7:42:db:4e:40:c1:db:12:a0:26:53: 51:f7:c4:01:15:9f:f7:88:c2:46:0c:de:19:b4:b9:79:30:23: 5a:78:e3:b7:83:31:14:11:a1:8f:7b:83:dc:02:96:64:34:a3: d6:13:b1:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuAt2a5fnUMXkN8koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YTQ3NzdlYzctZWMzNi00NDZjLTgyNDUtYTkzOTcwYjU5MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw93n19wJht86U5yCPgK3Ox3hhDnMC2UJ3mP1 2/culM/YsEF1s4aOneROl9nplQPFudSqQE8JzrUlrWXbK4KfhmnaBrYpR3mY85pO a2AZTeY0y+4cY359dieruTkJazThlxDWL7lrcdUpZaSOVjOAEv/qx9x6aX4LCxDb efcql1jAQ0fBWYzBviJSeMOJL2/abCEUpqZyEORkMVPlAVQ59mzpLXCQLcvsKzvk saOAXzG2SbtytVkUrXFixt6LnyLt3/FEruAhn/TeAChsVwYTJ6c73+KVR7y1y+lq sHac+1NRU4Gn0SsYc5OFkuxSv7RcSrmyz+n1fZxABTDSbOQ4IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPd3O7Zi4gXae1ISUgOQGC1oPqrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYzFiZTZlNjUtOThlNC0z ZGIwLTljNmItZTk4MjE2MmUyMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD3fsKmxuSWJf/wNTNt2jS8j/KXMwnCK2BSjsDceoQOcCZTdq8qt 1dLkQ/o67/2DTazhn80/1HZ6nkKJDhLF6ugPW4fEEWa85iZIL3tnsCoop0QfrqjO zzX+uBsdnai9Z6blMhWHj5AjMXsZGeVJ2k7Ev8r5BKNNmYXVOU9WvHNCHtSbQPAc WCirzm0GegD+eTU9H10GH5ZooaiKzUh8z5B4VUb0PBnU1HWOJAF+1LbNrPaQpdPV I65qPAQrkqF5jz10UnBdJHikz/tGzOenQttOQMHbEqAmU1H3xAEVn/eIwkYM3hm0 uXkwI1p447eDMRQRoY97g9wClmQ0o9YTsfc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:47 2025 by rpki-client