$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa File: 60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json) Hash identifier: 8NCs2V9ImAkk2AKlkmbvxL8eTSjzKiYFXsWMCk8F01s= Subject key identifier: 02:54:15:73:D6:A8:5F:D7:EC:79:26:41:FE:36:AE:D2:DF:BB:2F:E8 Certificate issuer: /CN=31663e0d-961a-43ac-8a01-d43efc01bea0 Certificate serial: 010D0C9F4328584BBE4037F07C73EDBF79BC5A90 Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 395555 IP address blocks: 170.10.64.0/22 maxlen: 24 170.10.72.0/24 maxlen: 24 170.10.84.0/22 maxlen: 24 209.206.64.0/19 maxlen: 24 2604:4c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:37:f0:7c:73:ed:bf:79:bc:5a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=bf956948-5e58-4b92-8cf5-c80b9a65c4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:e4:af:4f:c5:34:50:6d:d9:e3:ab:5c:56: c6:ee:2a:ef:8e:6d:90:f9:60:21:37:99:af:6c:01: 5e:5d:35:d8:1d:2a:00:34:e4:53:e8:05:ec:ba:eb: ef:de:a0:0f:1e:8d:86:64:94:69:c0:bb:f6:dd:34: 35:be:7a:93:fa:19:32:af:5b:ee:c0:0d:f6:cc:7e: 4a:91:e7:ee:b9:5a:a7:8e:a3:d9:c2:5d:2d:7c:b4: 62:ca:93:8b:80:70:da:61:c6:24:8f:8e:f5:10:5b: ac:83:49:d1:22:04:00:b1:c4:ea:5f:ba:a5:d0:6f: 8c:6d:b3:41:d0:f5:02:2d:f5:09:b8:b6:62:da:69: 4d:af:fc:a3:93:24:a9:fc:c7:c6:3b:53:90:5a:a1: ef:c7:f9:dd:5f:7c:34:be:4d:bf:16:01:28:25:0e: 42:a7:42:9e:70:8f:43:ad:83:da:4e:e1:c5:4b:b5: 01:78:43:52:c6:b1:d1:18:2b:6a:a8:31:79:d1:80: 23:22:b4:39:80:33:c1:2e:24:e9:96:ad:49:69:6e: 84:75:2b:07:39:09:51:f9:d9:25:6b:b3:25:98:27: 15:4b:fb:3f:d4:e4:f4:77:5d:82:d9:b3:d1:d5:44: fa:aa:9b:7a:b3:e2:69:00:9a:c7:54:c9:56:35:d7: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:54:15:73:D6:A8:5F:D7:EC:79:26:41:FE:36:AE:D2:DF:BB:2F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl X509v3 Authority Key Identifier: keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer sbgp-ipAddrBlock: critical IPv4: 170.10.64.0/22 170.10.72.0/24 170.10.84.0/22 209.206.64.0/19 IPv6: 2604:4c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:13:c4:8a:78:dc:da:2b:63:76:6a:71:54:fc:44:b2:61:76: 00:cd:f3:92:4c:75:de:52:8a:c3:eb:35:20:58:4d:0a:2b:60: 4b:48:51:be:08:2b:5d:47:9d:b2:ef:38:47:e1:75:fd:1e:16: 97:c1:0f:27:2b:b6:27:4a:12:07:9c:8f:5b:08:e9:38:cb:a7: 65:da:e4:ad:17:27:c4:49:80:37:cb:c5:5e:ea:33:d7:53:1b: c9:51:37:54:1e:87:6e:de:8f:b8:6a:8a:14:a4:dd:a7:b8:04: 8b:61:cd:6b:73:18:d4:43:fd:31:68:53:ae:4c:5d:e9:20:66: 04:ea:38:0a:65:6e:33:3d:8d:e8:38:ca:c2:7e:5c:4b:36:7c: 91:97:c1:9e:48:4a:68:ba:a4:9d:ee:0a:96:b0:35:b7:e3:5d: a8:c4:4f:e8:dd:d9:5d:e6:91:3b:62:3a:4c:a7:24:7d:f6:11: 10:05:c0:d0:bd:99:7d:84:d1:41:93:44:12:18:eb:99:2a:4f: c1:b8:a7:2c:5a:f8:b8:8d:81:10:f1:18:77:38:9f:41:4f:c8: a7:58:f9:9f:ae:fe:9d:33:f7:78:70:f4:a3:c6:79:28:1c:1c: 22:b8:6d:62:87:8c:29:c9:7b:51:9b:27:0b:11:f9:43:2d:1e: a5:5b:8c:f3 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEu+QDfwfHPtv3m8WpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NjNlMGQtOTYxYS00M2FjLThhMDEtZDQzZWZjMDFi ZWEwMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YmY5NTY5NDgtNWU1OC00YjkyLThjZjUtYzgwYjlhNjVjNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJnkr0/FNFBt2eOrXFbG7irvjm2Q+WAhN5mv bAFeXTXYHSoANORT6AXsuuvv3qAPHo2GZJRpwLv23TQ1vnqT+hkyr1vuwA32zH5K kefuuVqnjqPZwl0tfLRiypOLgHDaYcYkj471EFusg0nRIgQAscTqX7ql0G+MbbNB 0PUCLfUJuLZi2mlNr/yjkySp/MfGO1OQWqHvx/ndX3w0vk2/FgEoJQ5Cp0KecI9D rYPaTuHFS7UBeENSxrHRGCtqqDF50YAjIrQ5gDPBLiTplq1JaW6EdSsHOQlR+dkl a7MlmCcVS/s/1OT0d12C2bPR1UT6qpt6s+JpAJrHVMlWNdewzwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFAJUFXPWqF/X7HkmQf42rtLfuy/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTY2 M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNlZmMwMWJlYTAvNjBiMGVmY2EtMmZmMi0z NWQzLWJjY2QtMGNkMGViMWZhMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzE2NjNlMGQtOTYxYS00M2FjLThh MDEtZDQzZWZjMDFiZWEwLzMxNjYzZTBkLTk2MWEtNDNhYy04YTAxLWQ0M2VmYzAx YmVhMC5jcmwwHwYDVR0jBBgwFoAUe/NZmB18WfRxUO/yfLqnmBTaQIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zMTY2M2UwZC05NjFhLTQzYWMtOGEwMS1kNDNl ZmMwMWJlYTAuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCqgpAAwQA qgpIAwQCqgpUAwQF0c5AMA0EAgACMAcDBQAmBExAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAQTxIp43Nor Y3ZqcVT8RLJhdgDN85JMdd5SisPrNSBYTQorYEtIUb4IK11HnbLvOEfhdf0eFpfB DycrtidKEgecj1sI6TjLp2Xa5K0XJ8RJgDfLxV7qM9dTG8lRN1Qeh27ej7hqihSk 3ae4BIthzWtzGNRD/TFoU65MXekgZgTqOAplbjM9jeg4ysJ+XEs2fJGXwZ5ISmi6 pJ3uCpawNbfjXajET+jd2V3mkTtiOkynJH32ERAFwNC9mX2E0UGTRBIY65kqT8G4 pyxa+LiNgRDxGHc4n0FPyKdY+Z+u/p0z93hw9KPGeSgcHCK4bWKHjCnJe1GbJwsR +UMtHqVbjPM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:54 2025 by rpki-client