$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa File: 1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa (raw, json) Hash identifier: U12GyObGeB63T9EGMupBaaNjTpbHJWpbQJjYxemopzg= Subject key identifier: B6:DD:46:20:E2:5D:4A:59:D7:79:13:C8:37:7A:E8:B0:9A:57:98:63 Certificate issuer: /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Certificate serial: 010D0C9F4328584BB45D0F7A86F85B43D0B66026 Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 397553 IP address blocks: 172.111.60.0/22 maxlen: 22 172.111.60.0/24 maxlen: 24 172.111.61.0/24 maxlen: 24 172.111.62.0/24 maxlen: 24 172.111.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0f:7a:86:f8:5b:43:d0:b6:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=873920c7-6626-4f04-afe4-5ff2c1eb804b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:96:46:f8:c3:a5:45:ae:92:09:ad:ac:6b: 9f:a1:7e:33:67:10:f7:f7:bb:bf:e6:b0:1e:8d:ed: ea:63:fa:e3:b1:31:51:c0:97:1e:ef:30:c9:ee:a7: 7f:86:56:0e:0d:a2:8e:f1:1d:f4:30:06:d9:9e:95: c3:df:aa:e0:78:e7:f9:27:70:d6:c5:6c:8e:8b:9c: 6f:63:40:30:3d:38:2c:2b:ea:3e:56:e3:85:43:90: 2e:17:b6:f2:37:b3:6f:ca:3e:97:ca:6c:19:68:46: 28:68:1a:5b:5c:37:eb:5a:21:36:11:b6:c3:70:fe: f8:d2:e2:5c:00:56:08:10:9f:80:ba:aa:7c:4b:ee: 87:c1:83:2f:da:da:c3:0f:3a:33:f6:bd:cf:cc:c0: e1:1c:60:a9:e7:df:3a:ae:5c:a8:75:d9:50:35:0d: 92:b8:20:0d:9d:e6:ee:ca:a5:06:db:06:ac:95:44: f9:8d:79:61:d3:04:a9:d3:84:cc:81:91:a1:49:8b: 4e:ff:8e:89:af:d0:7a:02:26:a5:a9:3d:d3:08:97: bf:af:a0:c9:d1:94:39:e7:a1:6a:84:eb:2b:bc:96: bb:09:9c:56:44:f0:58:9f:84:dd:57:6c:61:11:de: 94:29:16:c4:64:07:f5:d5:12:b9:04:28:93:85:77: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DD:46:20:E2:5D:4A:59:D7:79:13:C8:37:7A:E8:B0:9A:57:98:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl X509v3 Authority Key Identifier: keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer sbgp-ipAddrBlock: critical IPv4: 172.111.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:87:1c:8f:12:e9:41:3c:ea:1e:ad:b1:00:a3:91:05:7d:86: ab:7d:9a:5a:cf:b5:0c:1f:65:92:0d:63:7a:2d:c6:53:0c:0b: df:4e:ba:49:ea:22:b5:64:40:17:08:bb:2e:eb:28:ed:29:fa: 21:22:9d:f8:97:8e:48:09:4f:07:61:27:62:68:d5:9c:96:0d: 9b:32:6d:47:13:f6:c2:75:25:24:62:d4:6c:b2:c5:28:31:86: 0b:b5:6f:a8:15:3a:f3:83:00:93:f5:d5:b7:3c:d0:83:28:5d: 2b:4f:3a:ca:b3:a2:78:80:db:0c:92:f9:03:64:cb:85:34:0b: 63:c8:95:6f:3c:a4:f2:08:7e:56:07:70:7a:af:77:d8:f3:59: 91:90:a3:de:56:f8:8e:6c:4d:79:5e:bf:1d:72:f8:9d:c9:da: 07:57:93:2a:80:70:33:68:36:4d:91:78:ff:24:75:06:e9:b4: 83:1b:af:1e:e1:7e:b4:56:f5:3a:58:a3:ca:16:40:75:a8:9c: 10:e4:78:5e:30:a6:d1:dd:a5:41:a6:39:6e:21:0f:94:5c:94: 40:97:43:5f:99:c6:2d:4f:a5:ca:59:d3:f5:91:a8:29:97:64: 99:d3:8a:df:84:08:0a:74:2a:7f:71:8e:b8:14:2d:69:8d:92: 0c:17:71:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ96hvhbQ9C2YCYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTY2NWZmNjAtNTQ3Ny00ZjdiLWFmZTYtMzUwYzJmZDVh ZjhmMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ODczOTIwYzctNjYyNi00ZjA0LWFmZTQtNWZmMmMxZWI4MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknqWRvjDpUWukgmtrGufoX4zZxD397u/5rAe je3qY/rjsTFRwJce7zDJ7qd/hlYODaKO8R30MAbZnpXD36rgeOf5J3DWxWyOi5xv Y0AwPTgsK+o+VuOFQ5AuF7byN7Nvyj6XymwZaEYoaBpbXDfrWiE2EbbDcP740uJc AFYIEJ+Auqp8S+6HwYMv2trDDzoz9r3PzMDhHGCp5986rlyoddlQNQ2SuCANnebu yqUG2waslUT5jXlh0wSp04TMgZGhSYtO/46Jr9B6AialqT3TCJe/r6DJ0ZQ556Fq hOsrvJa7CZxWRPBYn4TdV2xhEd6UKRbEZAf11RK5BCiThXeBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbdRiDiXUpZ13kTyDd66LCaV5hjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1 ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBjMmZkNWFmOGYvMWFkMzE4NTktMmU5ZC0z MTU5LTgxZTAtOGRjYzdhMjFlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTY2NWZmNjAtNTQ3Ny00ZjdiLWFm ZTYtMzUwYzJmZDVhZjhmLzE2NjVmZjYwLTU0NzctNGY3Yi1hZmU2LTM1MGMyZmQ1 YWY4Zi5jcmwwHwYDVR0jBBgwFoAUGQdZZtQpW7do6cewWgstMn5Gqq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBj MmZkNWFmOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyHHI8S6UE86h6tsQCjkQV9hqt9mlrPtQwfZZINY3otxlMMC99Ouknq IrVkQBcIuy7rKO0p+iEinfiXjkgJTwdhJ2Jo1ZyWDZsybUcT9sJ1JSRi1GyyxSgx hgu1b6gVOvODAJP11bc80IMoXStPOsqzoniA2wyS+QNky4U0C2PIlW88pPIIflYH cHqvd9jzWZGQo95W+I5sTXlevx1y+J3J2gdXkyqAcDNoNk2ReP8kdQbptIMbrx7h frRW9TpYo8oWQHWonBDkeF4wptHdpUGmOW4hD5RclECXQ1+Zxi1PpcpZ0/WRqCmX ZJnTit+ECAp0Kn9xjrgULWmNkgwXcQA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:13 2025 by rpki-client