$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa File: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json) Hash identifier: q2+BwIVUSdksSNQj4ev3+6Qr3ZPImCcjiGpY2JdXydY= Subject key identifier: 25:F3:22:9D:A3:60:70:10:40:49:33:FE:35:6D:81:7E:A4:1E:0E:45 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584B25FC47076B5582FEFFA11820 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 13886 IP address blocks: 65.75.205.0/24 maxlen: 24 65.75.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:47:07:6b:55:82:fe:ff:a1:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=a88cbb5b-8a66-4616-9480-e2f415053634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:49:c0:94:2b:b0:c8:f2:85:fb:e5:90:8e:59: cd:5c:33:79:b6:36:3b:dd:01:76:14:ea:72:de:78: ab:75:3f:7a:22:3d:ee:1c:b5:c9:09:be:73:75:6a: bb:95:9b:e4:8f:c4:0c:09:cb:18:08:95:ff:70:e9: d2:06:e8:dc:0b:4d:fd:29:23:16:be:c0:73:40:01: 4a:6d:e7:02:20:ae:e0:61:94:7e:42:61:ed:e2:14: 03:b9:58:08:5f:c8:7f:88:28:3c:40:ef:cc:31:63: 84:47:c0:d8:be:0c:48:1f:44:8a:af:67:a5:ae:ce: ed:b0:c2:c4:37:e6:1b:70:3c:32:6b:eb:1a:e7:e5: cc:19:42:9f:1c:5e:01:dd:2a:49:02:47:ad:d9:dd: 39:52:ce:fa:b3:c9:0b:3a:cc:92:66:7b:75:17:67: d9:37:1a:89:6d:8a:b7:ba:31:ea:16:dd:da:e7:e8: 6f:b6:3e:cf:d3:1f:b9:79:5c:dc:b4:26:1a:f4:bd: 7c:2b:81:fa:93:ed:15:43:b3:82:fc:19:2f:c7:67: 4c:da:d3:86:a5:e3:7d:e5:b5:d1:95:45:7c:3c:a8: 63:d2:70:4e:95:ed:ab:f6:f4:9b:8c:f7:72:81:e8: ee:45:72:e4:e8:d3:fe:43:5f:0c:aa:85:c6:21:40: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:22:9D:A3:60:70:10:40:49:33:FE:35:6D:81:7E:A4:1E:0E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.205.0-65.75.206.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fd:36:35:8d:d5:15:46:1e:83:84:72:87:fe:f7:7a:91:9d: 54:86:e5:70:ed:4f:2f:2f:03:ad:96:f5:0e:95:f9:42:9e:70: e8:9a:1e:bb:d7:3e:59:37:09:25:42:fc:86:21:c6:34:43:4b: 11:8e:53:c2:cd:a4:b0:64:ef:b3:f9:29:62:99:f7:19:f0:d9: 5b:0c:c1:5f:d3:42:a2:1b:c2:89:39:ba:e6:56:73:47:97:04: c2:72:44:78:8e:f4:d4:06:1b:2c:3e:19:d9:fe:d5:0e:27:40: f5:90:05:f8:45:23:57:6a:9d:8f:88:6d:2a:d4:64:19:be:8c: c9:a6:7d:8b:e2:3e:2d:5c:e7:f4:ec:2b:a0:4c:ff:ef:5d:60: bb:b3:51:8d:8e:0f:48:ee:60:24:44:0f:b9:c9:43:64:1f:0c: 13:f9:66:0d:d3:f4:f4:f4:f5:b1:dd:46:09:d8:63:8b:4b:ea: 00:8a:5d:47:90:61:89:d6:90:ab:e0:cf:b9:61:3a:18:d9:33: e9:4f:09:1a:26:83:da:65:9d:f2:2f:38:51:ed:27:e0:64:1f: 51:04:9e:75:b6:16:6e:f3:db:c2:02:a5:8f:74:fc:df:94:04: 37:0e:39:c4:25:b8:5f:1c:f5:e9:62:b2:97:a1:c1:b3:f0:50: ae:12:31:b2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsl/EcHa1WC/v+hGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YTg4Y2JiNWItOGE2Ni00NjE2LTk0ODAtZTJmNDE1MDUzNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUnAlCuwyPKF++WQjlnNXDN5tjY73QF2FOpy 3nirdT96Ij3uHLXJCb5zdWq7lZvkj8QMCcsYCJX/cOnSBujcC039KSMWvsBzQAFK becCIK7gYZR+QmHt4hQDuVgIX8h/iCg8QO/MMWOER8DYvgxIH0SKr2elrs7tsMLE N+YbcDwya+sa5+XMGUKfHF4B3SpJAket2d05Us76s8kLOsySZnt1F2fZNxqJbYq3 ujHqFt3a5+hvtj7P0x+5eVzctCYa9L18K4H6k+0VQ7OC/Bkvx2dM2tOGpeN95bXR lUV8PKhj0nBOle2r9vSbjPdygejuRXLk6NP+Q18MqoXGIUDcxwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCXzIp2jYHAQQEkz/jVtgX6kHg5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMjNkODI1ZmEtYWJmNC0z ZjVjLWExMzgtZGVhNWM1Yzc0N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABBS80D BABBS84wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAY/02NY3VFUYeg4Ryh/73epGdVIblcO1PLy8DrZb1DpX5 Qp5w6Joeu9c+WTcJJUL8hiHGNENLEY5Tws2ksGTvs/kpYpn3GfDZWwzBX9NCohvC iTm65lZzR5cEwnJEeI701AYbLD4Z2f7VDidA9ZAF+EUjV2qdj4htKtRkGb6MyaZ9 i+I+LVzn9OwroEz/711gu7NRjY4PSO5gJEQPuclDZB8ME/lmDdP09PT1sd1GCdhj i0vqAIpdR5BhidaQq+DPuWE6GNkz6U8JGiaD2mWd8i84Ue0n4GQfUQSedbYWbvPb wgKlj3T835QENw45xCW4Xxz16WKyl6HBs/BQrhIxsg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:41 2025 by rpki-client