$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa File: 225cf2de-ddc9-3faa-8f31-758be401c844.roa (raw, json) Hash identifier: R+6kp4NHitSzjPVSk6xB48R1N7531nYQPRIGdNH0eag= Subject key identifier: 21:76:90:3A:00:3F:BE:2B:59:D1:3F:28:58:0F:F0:48:42:EB:2F:E9 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B4081AC7E3EBFD1EE3645B600 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16384 IP address blocks: 64.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:ac:7e:3e:bf:d1:ee:36:45:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=7a7831a3-aa44-4875-81f9-5cfc348a5669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:f6:59:76:67:0f:b4:3c:a2:92:de:6e:91: 41:47:7f:b3:c2:7e:1d:1b:40:fe:06:20:02:35:a4: bb:df:0b:76:4f:a5:8e:6a:10:a2:43:bf:c6:cd:bf: b4:96:84:d6:f3:c9:b4:ec:50:b4:77:44:f1:42:8a: ef:68:70:d7:ad:2b:bd:8d:5d:01:1f:ef:89:bf:78: 3b:8d:14:58:cd:6c:a8:df:4b:88:3c:ff:5f:c4:84: b3:68:38:ba:d7:4d:16:2f:b5:b9:05:d2:5d:78:39: 18:67:85:c4:84:14:54:98:de:9d:51:ed:fb:20:c8: 87:34:cb:19:36:78:f8:6b:5f:b4:65:b3:d1:93:33: 07:60:ca:a6:c3:fc:7d:79:dd:66:7a:0f:f0:bd:36: 98:57:2d:c4:23:34:b3:e8:a2:25:dd:e7:38:de:f6: 33:aa:06:80:99:73:94:98:00:e0:65:0b:2e:48:7b: 25:b5:0e:a9:18:3f:e4:9e:80:8e:40:4f:67:58:77: 03:5a:75:dc:13:4c:d3:d9:de:6e:f3:7d:f6:7c:f2: e0:cc:02:2c:e7:99:bb:a4:dc:d5:9b:c4:01:de:94: 82:14:4b:f2:ab:50:cd:78:ec:7e:b5:e1:b9:4f:7a: 9d:ad:2b:3c:32:3a:56:75:0e:24:27:9f:f4:a7:f8: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:90:3A:00:3F:BE:2B:59:D1:3F:28:58:0F:F0:48:42:EB:2F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.25.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:04:98:bd:36:d2:ac:fa:13:ff:07:10:86:89:ec:25:11:f6: ac:e0:d9:3a:70:bd:97:9e:fc:85:f4:b2:f8:8a:37:5a:0b:bb: 8c:d7:d6:18:dd:6b:52:b1:5f:a5:a9:37:53:01:84:c4:17:f9: 2f:49:32:eb:71:7e:98:6a:bc:ec:01:58:fb:15:9f:72:00:ed: 4e:a2:dc:4c:ef:f5:72:0f:fe:86:98:df:c3:ab:90:2c:b6:2f: 7d:50:bc:66:b8:7d:e9:05:0b:e7:52:ea:74:b8:7f:10:5a:56: 1c:ce:15:9c:cf:30:6b:94:55:58:98:23:a4:c1:46:21:a3:fe: b9:89:6f:88:d8:2e:71:1c:70:a6:fb:c6:4f:36:a2:92:e8:51: 4b:51:30:82:8b:ae:4d:e8:4b:38:27:b6:4a:6f:39:6c:2d:f2: 65:78:25:5c:0b:11:76:b8:83:b1:36:7d:de:cc:c2:58:81:75: 06:2e:a3:e8:1d:77:1c:03:10:30:50:a3:3c:fc:4e:20:c9:c0: 54:6a:93:8e:1a:bb:0c:df:5f:5c:cd:46:ad:13:5e:4d:4b:29: 06:c8:cc:93:74:7a:bd:60:79:35:52:74:6c:b4:97:5c:fd:89: be:da:2f:59:fd:ba:a5:6a:0f:5d:2f:2a:f9:74:e9:0d:a1:6c: c5:e2:3f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgax+Pr/R7jZFtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk N2E3ODMxYTMtYWE0NC00ODc1LTgxZjktNWNmYzM0OGE1NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0H2WXZnD7Q8opLebpFBR3+zwn4dG0D+BiAC NaS73wt2T6WOahCiQ7/Gzb+0loTW88m07FC0d0TxQorvaHDXrSu9jV0BH++Jv3g7 jRRYzWyo30uIPP9fxISzaDi6100WL7W5BdJdeDkYZ4XEhBRUmN6dUe37IMiHNMsZ Nnj4a1+0ZbPRkzMHYMqmw/x9ed1meg/wvTaYVy3EIzSz6KIl3ec43vYzqgaAmXOU mADgZQsuSHsltQ6pGD/knoCOQE9nWHcDWnXcE0zT2d5u8332fPLgzAIs55m7pNzV m8QB3pSCFEvyq1DNeOx+teG5T3qdrSs8MjpWdQ4kJ5/0p/jFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF2kDoAP74rWdE/KFgP8EhC6y/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjI1Y2YyZGUtZGRjOS0z ZmFhLThmMzEtNzU4YmU0MDFjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUEmL020qz6E/8HEIaJ7CUR9qzg2TpwvZee/IX0sviKN1oLu4zX1hjd a1KxX6WpN1MBhMQX+S9JMutxfphqvOwBWPsVn3IA7U6i3Ezv9XIP/oaY38OrkCy2 L31QvGa4fekFC+dS6nS4fxBaVhzOFZzPMGuUVViYI6TBRiGj/rmJb4jYLnEccKb7 xk82opLoUUtRMIKLrk3oSzgntkpvOWwt8mV4JVwLEXa4g7E2fd7MwliBdQYuo+gd dxwDEDBQozz8TiDJwFRqk44auwzfX1zNRq0TXk1LKQbIzJN0er1geTVSdGy0l1z9 ib7aL1n9uqVqD10vKvl06Q2hbMXiP8c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:38:07 2025 by rpki-client