$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa File: eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa (raw, json) Hash identifier: DYj9xnR10eHlcgyR1NqxfqGJAy0nMcti1JBNe5ooAuY= Subject key identifier: 1E:27:AB:96:89:82:1E:A0:E4:EC:5F:83:B8:3E:AD:14:3F:DB:05:94 Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Certificate serial: 010D0C9F4328584B36BC4DC39D3DB0D3C5A210C0 Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 53855 IP address blocks: 185.224.64.0/23 maxlen: 24 2602:814:a000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4d:c3:9d:3d:b0:d3:c5:a2:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=1d8fd7bf-8e74-463b-97a2-c1d0c11e24de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:1a:60:0a:18:a2:7d:e3:a0:95:12:50:8f: c2:06:8c:9f:08:83:dc:81:01:4f:da:22:98:39:34: 25:b0:c0:ad:ab:3b:3f:92:b3:51:ea:ff:3f:43:87: 42:2a:10:f2:37:49:a3:98:3c:de:26:c9:cd:90:a1: 98:49:a8:1c:b2:fd:5d:1c:fe:ee:11:bf:dd:06:64: d4:a3:b6:02:5d:dd:fa:33:85:d4:ed:1b:84:11:c0: 7f:f9:97:9e:01:b4:49:96:42:ba:7e:b9:c8:5d:89: a5:1c:c2:f7:e0:bd:31:53:11:03:d6:6d:03:55:c2: c8:84:62:f7:72:5b:da:0f:1e:f1:ad:66:3e:5f:f7: 3d:a0:86:18:52:08:fa:f6:65:d3:a1:e4:65:c8:97: 83:0c:61:ab:ee:46:0a:a3:8c:6c:d6:d4:4a:ec:b1: 10:67:f3:91:85:db:da:e0:bb:fa:dc:7d:76:db:84: 27:6a:28:a7:40:ad:d1:3a:87:20:8a:2a:c4:9b:f4: 5c:92:51:92:43:94:ac:54:35:45:48:86:b8:42:a7: 35:5a:1a:ba:43:23:82:4a:90:b4:14:32:dc:6a:72: b0:d1:55:b1:ea:d7:18:40:a6:ca:7e:6a:b9:4d:c0: 50:21:1a:dc:6a:36:69:ee:2f:4d:cc:34:45:64:8e: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:AB:96:89:82:1E:A0:E4:EC:5F:83:B8:3E:AD:14:3F:DB:05:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/eff6f462-82a1-31d8-bc3b-f4a4f5d0db5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl X509v3 Authority Key Identifier: keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer sbgp-ipAddrBlock: critical IPv4: 185.224.64.0/23 IPv6: 2602:814:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d7:f5:b3:6c:eb:fa:59:23:b4:98:97:99:30:3a:3f:9a:1c: 9a:a5:9e:9a:3e:d1:ad:23:1d:3a:7c:bb:4a:d6:33:06:b4:83: b8:af:1e:d0:d4:74:08:ec:65:6f:e9:9d:67:c4:0f:db:d9:22: a0:c9:6a:ba:77:7e:1b:7c:52:ab:5f:66:1a:17:19:ce:9b:ae: 5c:55:37:00:7b:43:d6:5f:ff:24:04:cc:5f:7b:cb:dc:9a:ae: 04:01:85:cf:1a:d3:c0:36:d9:da:07:bf:13:04:3f:1a:a8:e4: 97:f2:0d:eb:2d:bf:94:b5:ba:00:4e:1d:f9:b9:90:20:6e:53: 3f:cc:35:94:b9:b7:56:c0:23:29:50:37:5d:ad:ab:fa:4f:e6: 47:95:9f:1a:01:b3:88:4c:79:3e:6a:de:9f:03:cb:72:81:42: d0:76:b1:51:37:a2:63:07:c4:76:c4:4b:da:4d:b2:f4:46:1a: 2a:56:ac:14:73:46:ad:2a:37:88:d5:d2:d5:6b:fc:b1:69:e8: e4:91:24:58:aa:75:59:3f:b6:a1:96:71:51:26:34:75:1e:40: a1:42:f0:60:a7:7e:02:12:f8:aa:47:32:dc:b0:6a:d2:ff:9d: 1d:4e:d5:ab:03:bd:f8:d4:f9:7a:e8:28:04:60:6d:cb:3c:cf: 65:e4:e9:c0 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEs2vE3DnT2w08WiEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0 M2EzMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MWQ4ZmQ3YmYtOGU3NC00NjNiLTk3YTItYzFkMGMxMWUyNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN8aYAoYon3joJUSUI/CBoyfCIPcgQFP2iKY OTQlsMCtqzs/krNR6v8/Q4dCKhDyN0mjmDzeJsnNkKGYSagcsv1dHP7uEb/dBmTU o7YCXd36M4XU7RuEEcB/+ZeeAbRJlkK6frnIXYmlHML34L0xUxED1m0DVcLIhGL3 clvaDx7xrWY+X/c9oIYYUgj69mXToeRlyJeDDGGr7kYKo4xs1tRK7LEQZ/ORhdva 4Lv63H1224QnaiinQK3ROocgiirEm/RcklGSQ5SsVDVFSIa4Qqc1Whq6QyOCSpC0 FDLcanKw0VWx6tcYQKbKfmq5TcBQIRrcajZp7i9NzDRFZI6FqQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFB4nq5aJgh6g5Oxfg7g+rRQ/2wWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4 ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvZWZmNmY0NjItODJhMS0z MWQ4LWJjM2ItZjRhNGY1ZDBkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5 NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi Yjg5OTQzYTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBueBAMA8E AgACMAkDBwQmAggUoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHdf1s2zr+lkjtJiXmTA6P5ocmqWemj7R rSMdOny7StYzBrSDuK8e0NR0COxlb+mdZ8QP29kioMlqund+G3xSq19mGhcZzpuu XFU3AHtD1l//JATMX3vL3JquBAGFzxrTwDbZ2ge/EwQ/Gqjkl/IN6y2/lLW6AE4d +bmQIG5TP8w1lLm3VsAjKVA3Xa2r+k/mR5WfGgGziEx5PmrenwPLcoFC0HaxUTei YwfEdsRL2k2y9EYaKlasFHNGrSo3iNXS1Wv8sWno5JEkWKp1WT+2oZZxUSY0dR5A oULwYKd+AhL4qkcy3LBq0v+dHU7VqwO9+NT5eugoBGBtyzzPZeTpwA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:55 2025 by rpki-client