$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa File: ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa (raw, json) Hash identifier: dJQoaQa07DZcU3aZkWnePu+NYB3ti0xQmpUQDE/D1LQ= Subject key identifier: E1:41:D4:EB:F3:61:A6:0F:F9:34:10:6B:4D:61:61:4A:D1:91:84:B6 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584B3556EB4E813D77DBF170F5C0 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 14525 IP address blocks: 64.22.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:eb:4e:81:3d:77:db:f1:70:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=fcc26f6e-1611-4286-9518-86d0ffe0fbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:03:b3:66:0e:23:a7:69:1e:21:06:37:42: c9:ee:50:c1:51:04:15:6e:87:3c:31:ee:33:a5:09: 0a:40:77:31:74:c3:5f:6c:f5:a0:93:00:5a:55:40: a5:44:85:ac:db:ca:a0:61:7f:c7:65:68:bb:73:a4: 42:5b:77:ba:79:99:a6:83:ca:76:52:20:35:d1:fa: 1b:46:6f:79:25:af:31:a9:a3:49:2d:f4:94:9f:e5: 15:fc:ab:1c:da:9e:26:1a:46:de:58:1e:b8:c8:50: 1a:f0:f9:d3:66:e8:0c:6f:bd:e6:e0:9b:2a:7c:93: ef:c5:f3:ab:47:96:f0:d6:04:62:ac:11:fe:13:de: fa:0f:b8:22:8e:49:90:66:ca:31:bf:45:f2:08:3c: 0c:ab:0f:33:74:db:19:be:58:ec:b2:b7:7d:4a:5c: 50:4a:b2:6b:c4:e7:a5:c5:83:3b:f9:2a:16:f8:60: 02:65:98:a4:05:6f:10:e4:1c:4b:7a:ef:72:de:03: 84:4b:91:ed:dd:e8:6b:65:5f:bb:63:7c:04:08:60: 32:09:a6:77:cc:7d:c2:1b:e0:a1:2b:be:7d:95:a6: 63:6f:84:29:66:4b:92:2a:99:7b:9e:e0:84:1b:b1: cc:9e:39:87:f7:61:88:a3:44:eb:4d:81:15:c8:c4: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:D4:EB:F3:61:A6:0F:F9:34:10:6B:4D:61:61:4A:D1:91:84:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 64.22.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:78:56:9d:5f:b8:01:04:3d:1d:a8:49:25:dd:26:32:60:40: d0:3d:48:a4:d3:8d:54:9e:56:bb:a4:3b:97:6e:3b:3d:47:f9: 41:44:f0:1b:9d:0f:e6:09:95:ed:5f:e9:e8:c1:11:3f:a6:bd: f6:f1:ff:a6:d5:cf:ef:e2:4c:42:f8:57:39:f2:be:f2:6a:fe: 32:31:f9:d2:c2:53:44:b8:a2:0d:f4:3a:7e:ee:07:ae:ed:c1: ea:17:76:05:58:26:3b:45:ee:83:c3:2c:ab:11:85:1c:ef:1b: be:78:17:4f:e8:9a:f6:bc:29:8c:a8:94:14:ca:85:7e:c3:5d: ca:d5:e7:73:39:3e:c8:c0:70:b3:0f:6e:45:c6:49:00:ef:17: 6c:4a:17:7c:be:14:09:34:66:e8:38:ec:cd:8a:ae:39:b1:9c: 06:a3:97:f9:da:6c:1c:00:02:4d:7a:a5:e0:77:04:9f:d8:81: 38:1c:c9:e7:6f:8d:0d:5a:7b:09:d9:f2:f0:98:e9:8d:20:4b: 41:68:60:f7:8a:a5:0c:b0:c1:91:8d:67:b7:59:7d:ef:2b:38: a8:1e:b9:6a:2d:2c:5e:6c:61:b1:5b:16:e5:3b:a3:0d:f0:6f: 6f:1b:02:3c:77:37:88:fe:ed:ef:65:3a:f9:e1:97:94:e8:6c: bc:a2:a8:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VutOgT132/Fw9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZmNjMjZmNmUtMTYxMS00Mjg2LTk1MTgtODZkMGZmZTBmYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcDs2YOI6dpHiEGN0LJ7lDBUQQVboc8Me4z pQkKQHcxdMNfbPWgkwBaVUClRIWs28qgYX/HZWi7c6RCW3e6eZmmg8p2UiA10fob Rm95Ja8xqaNJLfSUn+UV/Ksc2p4mGkbeWB64yFAa8PnTZugMb73m4JsqfJPvxfOr R5bw1gRirBH+E976D7gijkmQZsoxv0XyCDwMqw8zdNsZvljssrd9SlxQSrJrxOel xYM7+SoW+GACZZikBW8Q5BxLeu9y3gOES5Ht3ehrZV+7Y3wECGAyCaZ3zH3CG+Ch K759laZjb4QpZkuSKpl7nuCEG7HMnjmH92GIo0TrTYEVyMR9YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFB1OvzYaYP+TQQa01hYUrRkYS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvZWNjMWRiNjItYzBkYy0z NmQxLWE5MDMtOWJkODRmN2VjN2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB4Vp1fuAEEPR2oSSXdJjJgQNA9SKTTjVSeVrukO5duOz1H+UFE8Bud D+YJle1f6ejBET+mvfbx/6bVz+/iTEL4VznyvvJq/jIx+dLCU0S4og30On7uB67t weoXdgVYJjtF7oPDLKsRhRzvG754F0/omva8KYyolBTKhX7DXcrV53M5PsjAcLMP bkXGSQDvF2xKF3y+FAk0Zug47M2KrjmxnAajl/nabBwAAk16peB3BJ/YgTgcyedv jQ1aewnZ8vCY6Y0gS0FoYPeKpQywwZGNZ7dZfe8rOKgeuWotLF5sYbFbFuU7ow3w b28bAjx3N4j+7e9lOvnhl5TobLyiqKw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:16 2025 by rpki-client