$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa File: b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa (raw, json) Hash identifier: 8a1ySFMVoUp7kXBymFw0qJAbWLyjEVldFt6XD0akAt8= Subject key identifier: 88:AD:44:E8:96:9B:7D:E0:B2:86:36:7C:78:D7:20:EB:56:A4:6A:E9 Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Certificate serial: 010D0C9F4328584B33F197ADBD64797FEB356180 Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 14618 IP address blocks: 185.224.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:97:ad:bd:64:79:7f:eb:35:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=c8b77c94-6fbf-477e-8d8f-6dd74d4172b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:fd:67:6b:02:47:bc:ba:c3:d0:f5:d5:76: 33:55:e6:e2:1a:4c:8a:81:3f:f6:58:c0:b8:8c:97: 00:71:b2:ea:1b:f1:49:71:54:1a:0e:cc:36:a9:c3: 91:0e:10:7b:cc:45:de:0f:d8:4b:f6:e1:9b:38:51: 28:5d:3d:64:2e:7a:f0:fc:72:50:e8:bc:d7:8f:13: d4:43:f9:24:6d:53:76:31:98:89:33:e1:b2:87:ca: 97:a6:e1:7e:e3:5b:be:8b:a3:84:18:62:98:75:4a: 2c:70:d3:23:a1:c8:73:a3:a0:74:62:7e:33:31:08: 6d:5d:65:10:0a:9d:72:7c:58:01:f6:2d:1f:83:a1: a6:61:bb:4d:4b:ec:d7:7a:c2:4a:8c:7f:88:fd:b9: 2e:a6:b4:c2:e9:d6:b9:9c:23:80:22:60:8f:c6:51: 1a:b6:c7:10:94:3b:31:12:68:cd:29:49:bf:53:bd: b5:7e:97:6e:53:7b:94:df:5f:a5:4e:f6:33:e4:47: 0c:fd:03:ed:85:8a:0c:5d:57:7a:d0:08:9b:39:82: a7:57:63:26:c5:6b:78:4e:aa:01:b6:39:91:50:a7: 1e:5c:81:e1:24:51:f9:18:0d:91:ed:26:79:58:17: da:61:43:40:ca:5e:66:8a:bc:42:91:c6:0a:40:80: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AD:44:E8:96:9B:7D:E0:B2:86:36:7C:78:D7:20:EB:56:A4:6A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/b002da1d-ce1d-3cc3-9a65-5663ca7dbcbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl X509v3 Authority Key Identifier: keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer sbgp-ipAddrBlock: critical IPv4: 185.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:37:25:ca:4a:6f:16:10:cf:ab:f2:16:f4:af:f1:5f:af:6c: 3b:44:ac:0f:9e:f5:cb:c4:4d:c8:40:c1:02:2d:c5:05:b4:2b: 6d:ee:a0:a5:f9:3e:a4:95:da:ea:ca:80:db:2b:8d:3e:93:16: fe:a3:2a:67:3a:97:af:e3:b5:04:4a:0c:e5:c4:8a:4d:36:ad: 4a:c7:f8:24:f2:5f:29:c0:d1:6d:93:f5:e7:9b:75:18:6e:7e: f5:c1:7e:f4:a6:dd:05:82:54:88:8a:01:85:03:1f:76:63:d8: aa:b4:c3:9e:a8:09:c9:3b:7f:ed:42:06:04:67:39:f2:49:ea: de:ed:2f:d7:71:2e:f0:a9:c8:ca:60:84:54:b3:b0:8d:62:56: c8:47:b5:64:74:e9:e7:f6:cc:27:c8:5f:30:d2:20:7a:7a:f6: d5:bf:06:e2:28:89:75:6e:15:b3:d0:61:3e:b0:fe:0f:d4:97: 1a:2e:cd:d2:2c:fa:3e:fb:b4:8c:f6:45:84:95:00:00:35:94: ae:2d:70:24:6d:1d:57:dd:06:6d:5c:5c:47:26:3c:4b:c6:8a: b4:d2:42:c6:d8:7e:9e:3f:e1:e8:f2:f3:5c:bb:0a:02:b2:26: fb:bd:b6:f9:d8:17:8e:b1:6c:3b:de:7d:9f:19:6f:33:22:9e: a8:4e:96:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ZetvWR5f+s1YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0 M2EzMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YzhiNzdjOTQtNmZiZi00NzdlLThkOGYtNmRkNzRkNDE3MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD79Z2sCR7y6w9D11XYzVebiGkyKgT/2WMC4 jJcAcbLqG/FJcVQaDsw2qcORDhB7zEXeD9hL9uGbOFEoXT1kLnrw/HJQ6LzXjxPU Q/kkbVN2MZiJM+Gyh8qXpuF+41u+i6OEGGKYdUoscNMjochzo6B0Yn4zMQhtXWUQ Cp1yfFgB9i0fg6GmYbtNS+zXesJKjH+I/bkuprTC6da5nCOAImCPxlEatscQlDsx EmjNKUm/U721fpduU3uU31+lTvYz5EcM/QPthYoMXVd60AibOYKnV2MmxWt4TqoB tjmRUKceXIHhJFH5GA2R7SZ5WBfaYUNAyl5mirxCkcYKQICA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIitROiWm33gsoY2fHjXIOtWpGrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4 ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvYjAwMmRhMWQtY2UxZC0z Y2MzLTlhNjUtNTY2M2NhN2RiY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5 NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi Yjg5OTQzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE3JcpKbxYQz6vyFvSv8V+vbDtErA+e9cvETchAwQItxQW0K23uoKX5 PqSV2urKgNsrjT6TFv6jKmc6l6/jtQRKDOXEik02rUrH+CTyXynA0W2T9eebdRhu fvXBfvSm3QWCVIiKAYUDH3Zj2Kq0w56oCck7f+1CBgRnOfJJ6t7tL9dxLvCpyMpg hFSzsI1iVshHtWR06ef2zCfIXzDSIHp69tW/BuIoiXVuFbPQYT6w/g/UlxouzdIs +j77tIz2RYSVAAA1lK4tcCRtHVfdBm1cXEcmPEvGirTSQsbYfp4/4ejy81y7CgKy Jvu9tvnYF46xbDvefZ8ZbzMinqhOlkk= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:05 2025 by rpki-client