$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa File: b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa (raw, json) Hash identifier: yhsVWXEifZsdF4m5vso61TEBlTcvy/aiMI8gqrKIwAg= Subject key identifier: 62:32:00:52:4D:AA:71:A2:F1:0B:E0:6E:38:54:BA:75:44:34:E8:84 Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F4328584B41E70CD0EA29200E10903F50 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 20473 IP address blocks: 63.133.218.0/24 maxlen: 24 2602:fbd9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0c:d0:ea:29:20:0e:10:90:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=bdf499ec-861a-4937-bd1a-55fb357669a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c8:04:94:c1:5c:ff:f6:a5:58:13:44:42:ab: 38:42:34:1f:e3:ef:72:60:b0:65:28:87:8d:81:00: df:02:34:44:f6:92:ec:bf:49:85:dc:bc:e4:f6:76: 18:e6:54:5b:b6:ea:58:84:91:5e:83:b3:ec:8f:ee: 94:80:a6:4e:7a:f3:02:50:a4:71:84:7e:5d:3d:24: 1d:6f:58:c4:01:da:02:ff:e6:bc:a3:b5:b6:33:b4: c4:2a:d2:a4:70:97:37:67:17:07:32:36:3b:3e:85: 3e:b9:09:0d:4f:a0:26:f5:49:1a:37:e4:6b:dc:aa: 6c:28:16:a1:0b:db:d3:9f:ed:ff:e5:30:da:fd:bc: d5:81:59:3e:58:06:4f:ad:2c:2e:6d:c9:6c:78:a0: 59:e2:76:5d:ab:37:d8:7d:6c:40:51:a7:ba:30:5c: be:9d:3c:51:60:c5:5f:78:0e:0a:28:46:ab:f0:09: d5:2b:e6:66:91:db:08:f0:56:c5:6b:0d:02:8d:a7: 87:fe:91:94:bd:21:a3:e7:ce:4a:65:a5:72:30:bf: 8d:c7:82:c8:d9:47:c9:f2:dc:42:db:21:6e:ce:be: 04:3c:8f:cd:d7:4e:ea:ce:57:f3:70:c9:cc:25:16: f4:27:32:49:c4:91:57:6c:ca:02:a5:f2:c6:b0:44: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:32:00:52:4D:AA:71:A2:F1:0B:E0:6E:38:54:BA:75:44:34:E8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/b53e2561-89bb-38c0-a2f3-bf0d5da99136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 63.133.218.0/24 IPv6: 2602:fbd9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:c3:0c:93:fa:14:a0:3b:8e:55:a8:a6:13:f8:7d:9f:52:57: 0f:77:ac:a9:aa:70:84:d3:d4:ef:7e:a2:06:57:75:6c:8e:78: ee:f8:05:7a:3d:9b:b1:aa:15:fe:fc:2b:64:86:ef:96:2a:07: 04:6d:6d:bb:02:b0:44:64:f9:23:31:3c:c6:54:29:51:a6:44: 9b:08:7d:e3:23:e7:0c:dc:b7:72:9c:3a:1c:7d:91:72:52:6c: bf:58:50:73:d7:f2:9b:a4:e7:7c:4c:63:da:69:33:a0:d6:ed: 69:05:39:0f:47:20:d0:ab:3c:b3:08:c3:aa:5e:42:a1:79:73: d3:50:cb:ec:8e:15:30:e6:ee:69:ee:2c:15:d8:ab:ad:ce:d8: a8:48:62:a1:1f:61:0f:15:32:e7:05:64:b4:ce:b0:35:9a:04: cc:5b:85:4c:51:e9:bf:e7:0b:75:2b:63:cc:25:cf:a6:a6:a8: 3a:8d:e3:80:4d:c7:2a:c6:5e:43:ed:0f:97:95:08:2d:88:33: 27:6c:6b:f3:15:8d:f5:18:f5:57:b1:ae:97:04:a4:2d:b1:d5: 77:57:41:11:c1:14:62:a5:19:99:f7:3f:1c:dd:13:0c:ea:e9: f1:ba:aa:2c:af:f0:d7:3b:48:0d:93:bd:1e:9e:bf:1a:f6:fc: eb:5f:bc:54 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtB5wzQ6ikgDhCQP1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YmRmNDk5ZWMtODYxYS00OTM3LWJkMWEtNTVmYjM1NzY2OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMgElMFc//alWBNEQqs4QjQf4+9yYLBlKIeN gQDfAjRE9pLsv0mF3Lzk9nYY5lRbtupYhJFeg7Psj+6UgKZOevMCUKRxhH5dPSQd b1jEAdoC/+a8o7W2M7TEKtKkcJc3ZxcHMjY7PoU+uQkNT6Am9UkaN+Rr3KpsKBah C9vTn+3/5TDa/bzVgVk+WAZPrSwubclseKBZ4nZdqzfYfWxAUae6MFy+nTxRYMVf eA4KKEar8AnVK+ZmkdsI8FbFaw0CjaeH/pGUvSGj585KZaVyML+Nx4LI2UfJ8txC 2yFuzr4EPI/N107qzlfzcMnMJRb0JzJJxJFXbMoCpfLGsEQnGwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGIyAFJNqnGi8QvgbjhUunVENOiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvYjUzZTI1NjEtODliYi0z OGMwLWEyZjMtYmYwZDVkYTk5MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAP4XaMA8E AgACMAkDBwAmAvvZAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvsMMk/oUoDuOVaimE/h9n1JXD3esqapw hNPU736iBld1bI547vgFej2bsaoV/vwrZIbvlioHBG1tuwKwRGT5IzE8xlQpUaZE mwh94yPnDNy3cpw6HH2RclJsv1hQc9fym6TnfExj2mkzoNbtaQU5D0cg0Ks8swjD ql5CoXlz01DL7I4VMObuae4sFdirrc7YqEhioR9hDxUy5wVktM6wNZoEzFuFTFHp v+cLdStjzCXPpqaoOo3jgE3HKsZeQ+0Pl5UILYgzJ2xr8xWN9Rj1V7GulwSkLbHV d1dBEcEUYqUZmfc/HN0TDOrp8bqqLK/w1ztIDZO9Hp6/Gvb861+8VA== -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:21 2025 by rpki-client