$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa File: 628c5d61-8309-334d-aade-3672888d9fa7.roa (raw, json) Hash identifier: usjRqENno1wG0McRD0ySq3lvHu7d7b4kSDzTk6CjDgQ= Subject key identifier: 20:F0:4C:65:D0:B7:41:E8:22:0F:6C:D1:38:C6:93:AA:22:BD:8B:DF Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Certificate serial: 010D0C9F4328584B33F1B51299A542BC00CE0430 Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 16509 IP address blocks: 185.224.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b5:12:99:a5:42:bc:00:ce:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=af120f2b-e1f4-4c6f-8dfb-fc9fc54d2d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:80:29:66:95:9c:03:e3:f4:18:2b:17:ae: 3c:40:09:be:34:c0:11:ec:1e:88:c3:48:fa:d7:40: 0b:41:3a:59:1f:ce:6a:04:81:7f:b7:30:62:92:fd: 5e:16:80:4b:5d:88:04:db:6b:c1:c5:c9:99:4e:ec: 6d:03:1f:d2:2b:81:8f:dd:fb:d0:60:c7:36:15:c3: 8c:a9:44:72:44:7f:91:ea:f5:b0:a7:35:70:72:35: 5b:62:4d:3a:4c:13:db:b2:e3:e5:3a:02:99:50:5d: ca:d2:f3:d9:c6:c3:d6:6e:ac:87:fc:e3:85:fd:40: 39:c4:b4:45:58:8a:48:cd:ad:a8:2a:64:26:dc:0a: 8c:d1:64:08:c1:1f:fd:9c:7d:2e:f0:49:97:a3:88: 6a:a2:10:d9:da:01:df:69:08:64:8f:e6:41:9d:3c: 46:98:f3:05:70:01:12:04:f1:ad:b2:46:f6:19:88: ad:54:97:10:ed:00:35:09:f5:14:64:6a:69:4d:1f: 8e:81:ca:4a:4a:3c:ab:5b:c2:38:68:ae:3e:d5:2c: 96:07:6a:f5:72:57:4e:a1:5f:91:ba:e2:4c:8e:49: df:13:4c:b9:51:79:67:55:91:3c:f0:92:23:7b:98: 75:14:c6:bf:74:e4:8f:c5:c2:0e:93:93:6a:63:ea: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F0:4C:65:D0:B7:41:E8:22:0F:6C:D1:38:C6:93:AA:22:BD:8B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl X509v3 Authority Key Identifier: keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer sbgp-ipAddrBlock: critical IPv4: 185.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9e:aa:a0:29:f0:f5:ad:be:00:39:4b:73:62:41:0d:6b:da: 70:04:10:ce:09:b5:94:e5:78:5e:92:2e:7b:c0:9a:62:a0:e6: 74:27:89:cd:ae:15:ce:47:cf:08:0d:38:02:b6:bd:b9:2b:5d: a9:ae:a5:71:f2:f2:b4:59:3e:95:f8:be:c7:c3:2d:ec:74:e0: 70:99:1a:74:43:32:5e:8d:29:0c:9c:3a:2a:7d:26:df:2f:6b: b9:d5:7c:e6:9a:58:de:aa:55:7b:c3:4d:66:e8:7a:74:c6:63: cb:30:0d:ab:d4:5c:f6:aa:bc:35:96:6f:3f:8f:b5:6a:c6:8f: 0c:f8:9b:06:d4:d6:b8:59:e4:92:59:48:ea:99:36:4d:d7:87: b5:93:ed:8e:a0:3a:41:85:6c:b7:dd:bd:ad:d4:b7:3d:67:3f: ad:f5:a5:c1:81:19:a8:de:ac:d4:20:20:dd:2b:95:27:82:3d: da:a7:19:1a:d9:64:ca:55:54:07:b8:38:f3:e4:53:7e:99:4a: 83:0f:1b:2b:40:b1:10:80:51:9f:39:89:3b:75:bb:56:ef:62: c1:73:5f:dc:ec:a1:25:a9:e9:28:4d:65:c2:11:ed:73:82:c3: f8:81:6d:54:d6:fd:a6:0e:ec:a4:d3:a8:84:fb:4e:52:3b:2f: f0:72:28:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8bUSmaVCvADOBDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0 M2EzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YWYxMjBmMmItZTFmNC00YzZmLThkZmItZmM5ZmM1NGQyZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgveAKWaVnAPj9BgrF648QAm+NMAR7B6Iw0j6 10ALQTpZH85qBIF/tzBikv1eFoBLXYgE22vBxcmZTuxtAx/SK4GP3fvQYMc2FcOM qURyRH+R6vWwpzVwcjVbYk06TBPbsuPlOgKZUF3K0vPZxsPWbqyH/OOF/UA5xLRF WIpIza2oKmQm3AqM0WQIwR/9nH0u8EmXo4hqohDZ2gHfaQhkj+ZBnTxGmPMFcAES BPGtskb2GYitVJcQ7QA1CfUUZGppTR+OgcpKSjyrW8I4aK4+1SyWB2r1cldOoV+R uuJMjknfE0y5UXlnVZE88JIje5h1FMa/dOSPxcIOk5NqY+qbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDwTGXQt0HoIg9s0TjGk6oivYvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4 ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvNjI4YzVkNjEtODMwOS0z MzRkLWFhZGUtMzY3Mjg4OGQ5ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5 NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi Yjg5OTQzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHueqqAp8PWtvgA5S3NiQQ1r2nAEEM4JtZTleF6SLnvAmmKg5nQnic2u Fc5HzwgNOAK2vbkrXamupXHy8rRZPpX4vsfDLex04HCZGnRDMl6NKQycOip9Jt8v a7nVfOaaWN6qVXvDTWboenTGY8swDavUXPaqvDWWbz+PtWrGjwz4mwbU1rhZ5JJZ SOqZNk3Xh7WT7Y6gOkGFbLfdva3Utz1nP631pcGBGajerNQgIN0rlSeCPdqnGRrZ ZMpVVAe4OPPkU36ZSoMPGytAsRCAUZ85iTt1u1bvYsFzX9zsoSWp6ShNZcIR7XOC w/iBbVTW/aYO7KTTqIT7TlI7L/ByKEM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:43 2025 by rpki-client