$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa File: 2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa (raw, json) Hash identifier: C/CXN2FJazAMxI8gOGzSPc+DS3rvn+HBz0ZIzI7hzF8= Subject key identifier: 7D:D2:6B:CE:FE:24:07:A3:D4:2B:D0:87:61:37:83:58:DA:33:BB:65 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B07306422A4CC7D90907D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 64.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:30:64:22:a4:cc:7d:90:90:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7fbb6c10-0dca-4496-80b0-2c29c9a0bf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:cf:28:c6:de:2b:d7:4d:97:f1:40:9e:f8: 94:15:ee:11:2b:df:ac:71:cb:d8:6e:96:42:3d:2a: dd:76:83:7b:9d:0f:f7:f0:c6:64:ca:c2:42:b1:23: bd:40:63:58:40:4e:a5:18:af:15:58:d3:7e:43:20: e8:8a:c4:8d:c3:6b:89:15:de:9d:a6:88:67:5d:66: f9:3e:a2:f6:62:96:b7:56:54:e1:e2:d1:32:79:a5: 04:5c:0b:db:2f:53:be:7c:f7:8a:7f:ab:a2:fa:ea: 8d:78:8e:18:27:c0:f9:e1:35:4c:10:ef:9b:60:b1: 3e:21:df:9f:8d:9b:62:10:5d:bd:9b:c0:f7:91:6e: 7f:ba:08:df:3e:05:0e:2d:03:49:19:c6:92:6b:e2: 29:fb:4f:fe:37:19:b2:f2:4d:2f:6a:ad:4a:0c:df: a9:3b:98:af:e1:c0:95:d0:2f:31:27:9f:9e:64:6b: 30:ef:14:57:fd:19:cd:ec:6f:9e:5b:a8:45:97:6e: 3a:56:50:d9:2f:d6:db:6e:d5:00:02:45:08:85:3c: 87:08:7f:e0:a3:6c:f7:ee:be:64:f8:8d:23:1a:36: 4c:d5:e6:90:89:21:11:98:07:c8:38:10:7c:9e:cf: 9d:50:4d:57:62:45:ec:00:2d:36:13:88:06:ba:be: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D2:6B:CE:FE:24:07:A3:D4:2B:D0:87:61:37:83:58:DA:33:BB:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c05743f-18f5-3347-bd3a-9eb569f03ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 64.180.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:79:01:1e:bc:ce:fa:3e:e7:ea:c4:b4:96:5a:ec:d6:dd:f6: ad:2c:46:77:8a:55:1a:48:f7:0e:73:d7:c4:ff:10:87:2d:61: 40:6b:5f:d2:c1:54:40:a2:18:7e:17:55:51:ed:90:af:0a:82: 8e:b6:a2:e4:eb:4b:b2:53:d2:70:05:80:4c:fc:f9:ba:1c:63: 12:b2:86:d1:ef:a3:44:5e:fc:e9:6c:f2:8b:16:8a:3a:d5:10: 4f:0d:cc:2d:8b:17:ed:04:3b:9c:f6:b0:ab:67:56:fc:bd:b8: 4c:f4:d0:07:fa:3c:50:97:a7:1e:b1:c6:5b:da:7a:b8:b5:2e: 69:c8:0e:14:ef:3f:b6:da:9c:64:c4:73:6d:73:33:3d:a7:37: 13:d8:55:71:c3:35:cc:d2:72:80:ff:0a:ae:2e:47:97:5b:b1: 72:03:5e:c6:7f:c5:d1:48:80:42:da:3a:00:e4:1e:9f:8b:1e: 4a:c3:a4:55:05:d0:c2:4c:ab:2e:c8:b4:d8:d1:a2:72:88:b1: 44:ab:a3:44:dd:16:1c:84:2e:e4:43:a7:b4:93:03:0d:1c:bf: a0:e7:ac:86:60:e2:b6:17:ef:af:39:49:32:6e:ee:29:7c:a8: 83:18:dd:34:06:9b:19:fe:77:59:34:6e:da:c8:97:c3:56:96: db:c3:85:ae -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzBkIqTMfZCQfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2ZiYjZjMTAtMGRjYS00NDk2LTgwYjAtMmMyOWM5YTBiZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO/PKMbeK9dNl/FAnviUFe4RK9+sccvYbpZC PSrddoN7nQ/38MZkysJCsSO9QGNYQE6lGK8VWNN+QyDoisSNw2uJFd6dpohnXWb5 PqL2Ypa3VlTh4tEyeaUEXAvbL1O+fPeKf6ui+uqNeI4YJ8D54TVMEO+bYLE+Id+f jZtiEF29m8D3kW5/ugjfPgUOLQNJGcaSa+Ip+0/+Nxmy8k0vaq1KDN+pO5iv4cCV 0C8xJ5+eZGsw7xRX/RnN7G+eW6hFl246VlDZL9bbbtUAAkUIhTyHCH/go2z37r5k +I0jGjZM1eaQiSERmAfIOBB8ns+dUE1XYkXsAC02E4gGur41BwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH3Sa87+JAej1CvQh2E3g1jaM7tlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmMwNTc0M2YtMThmNS0z MzQ3LWJkM2EtOWViNTY5ZjAzZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQLQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASnkBHrzO+j7n6sS0llrs1t32rSxGd4pVGkj3DnPXxP8Qhy1hQGtf0sFU QKIYfhdVUe2QrwqCjrai5OtLslPScAWATPz5uhxjErKG0e+jRF786WzyixaKOtUQ Tw3MLYsX7QQ7nPawq2dW/L24TPTQB/o8UJenHrHGW9p6uLUuacgOFO8/ttqcZMRz bXMzPac3E9hVccM1zNJygP8Kri5Hl1uxcgNexn/F0UiAQto6AOQen4seSsOkVQXQ wkyrLsi02NGicoixRKujRN0WHIQu5EOntJMDDRy/oOeshmDithfvrzlJMm7uKXyo gxjdNAabGf53WTRu2siXw1aW28OFrg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:46 2025 by rpki-client