$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa File: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (raw, json) Hash identifier: 1JlebNBdi2CX6wOl/2KowI1JbhPco4cJZd8X1pI74rY= Subject key identifier: FA:1F:9E:9F:D4:26:AA:44:B8:6D:E6:86:82:4B:18:2D:61:8C:0B:57 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584B4BAC56DE7DBF8A7DF6252240 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 57043 IP address blocks: 65.75.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:56:de:7d:bf:8a:7d:f6:25:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=b3335eff-71bd-4372-801b-97530fe8b94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1e:cd:59:0b:89:84:da:ce:b0:66:d7:52:55: 60:1b:96:a5:b6:e1:b2:a6:32:ab:db:0c:36:52:a0: b7:41:98:78:6f:57:88:f9:dc:55:37:82:f5:4d:d1: d9:86:3f:b1:46:2a:a7:86:22:86:7f:2e:58:40:c0: 40:5f:c4:37:54:ab:0d:26:b3:b6:4b:5c:1e:d5:dd: bd:2c:a2:30:d0:75:68:ec:62:b4:64:3e:9c:bc:2e: f0:9f:4a:97:77:1d:62:ba:e8:63:31:74:9f:f8:c7: 7a:cc:2b:5f:a3:30:f0:2f:39:44:f2:5f:12:92:1e: 9b:a0:28:d5:b0:00:db:1f:b2:10:a2:99:85:04:22: 30:00:57:ef:46:ef:55:48:98:be:2b:13:af:8a:4a: f2:75:d6:f7:81:03:74:ac:7e:10:e0:77:50:49:80: 2f:e2:d2:81:df:ff:5a:a3:f0:3b:24:80:79:97:b3: f9:7b:3a:be:d6:4a:10:cf:f5:c4:9d:65:5c:6f:05: aa:78:03:20:c5:63:c1:3f:bc:d0:78:e1:92:b3:18: 34:09:a5:65:fe:20:dd:59:01:5a:83:4c:00:5e:6d: ae:5a:78:10:fc:66:47:79:aa:86:25:3c:e9:6b:1d: b4:77:29:63:f7:7f:ff:aa:a1:b4:eb:59:1a:85:83: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:9E:9F:D4:26:AA:44:B8:6D:E6:86:82:4B:18:2D:61:8C:0B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:cf:39:bf:fe:a8:e5:aa:e0:d9:64:1f:c2:2a:b9:2c:b2:74: 30:c1:a0:0d:21:42:06:7e:49:1b:24:06:83:be:a6:e4:84:81: 0e:e4:d3:6e:38:a4:12:09:bb:c0:4d:00:9b:e1:6f:7a:01:f2: b3:a8:bc:d2:57:a6:39:4b:a3:5f:b7:7d:c5:59:db:75:98:66: ef:6a:aa:a5:af:70:53:ff:f1:4b:78:f8:39:fe:77:7f:f9:d7: f1:db:9d:08:fa:25:33:8d:dd:c4:9f:55:1a:87:85:b9:79:f2: 93:21:c5:6a:61:7e:2a:81:9a:80:e6:70:3c:41:65:b6:f4:ed: c2:18:f7:4d:ca:a3:ad:e5:bd:92:38:30:31:e3:cd:0a:0e:23: 81:55:bf:b0:04:d8:d2:fe:66:02:7e:d2:2d:15:fe:9a:54:8b: 71:5f:40:10:a5:31:cb:16:2c:e6:4e:b3:90:bc:ea:69:c4:29: 6d:47:ff:fc:08:84:55:34:47:eb:fe:47:29:f9:4c:77:8a:12: 92:9d:43:15:d6:96:c4:4b:d6:d5:d7:18:df:3c:51:59:89:48: ce:3e:c7:f9:a0:a8:53:63:13:72:56:b3:62:04:82:b9:af:5e: 83:c5:5e:54:be:f0:fd:c8:4e:26:bf:49:2a:55:2f:06:49:ca: a7:5f:19:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrFbefb+KffYlIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YjMzMzVlZmYtNzFiZC00MzcyLTgwMWItOTc1MzBmZThiOTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx7NWQuJhNrOsGbXUlVgG5altuGypjKr2ww2 UqC3QZh4b1eI+dxVN4L1TdHZhj+xRiqnhiKGfy5YQMBAX8Q3VKsNJrO2S1we1d29 LKIw0HVo7GK0ZD6cvC7wn0qXdx1iuuhjMXSf+Md6zCtfozDwLzlE8l8Skh6boCjV sADbH7IQopmFBCIwAFfvRu9VSJi+KxOvikryddb3gQN0rH4Q4HdQSYAv4tKB3/9a o/A7JIB5l7P5ezq+1koQz/XEnWVcbwWqeAMgxWPBP7zQeOGSsxg0CaVl/iDdWQFa g0wAXm2uWngQ/GZHeaqGJTzpax20dylj93//qqG061kahYMUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPofnp/UJqpEuG3mhoJLGC1hjAtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMTAxZWNjM2UtNDE2Mi0z NTA1LTlmMGQtZmVkZGQ4NGExZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvPOb/+qOWq4NlkH8IquSyydDDBoA0hQgZ+SRskBoO+puSEgQ7k0244 pBIJu8BNAJvhb3oB8rOovNJXpjlLo1+3fcVZ23WYZu9qqqWvcFP/8Ut4+Dn+d3/5 1/HbnQj6JTON3cSfVRqHhbl58pMhxWphfiqBmoDmcDxBZbb07cIY903Ko63lvZI4 MDHjzQoOI4FVv7AE2NL+ZgJ+0i0V/ppUi3FfQBClMcsWLOZOs5C86mnEKW1H//wI hFU0R+v+Ryn5THeKEpKdQxXWlsRL1tXXGN88UVmJSM4+x/mgqFNjE3JWs2IEgrmv XoPFXlS+8P3ITia/SSpVLwZJyqdfGX8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:45 2025 by rpki-client