$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa File: ea2b8f6b-1d68-3288-867f-4922b4a39175.roa (raw, json) Hash identifier: +RPq15oYO2VM+FjYdrrkn8tCzOKtGl2qqVDrMPOUPIs= Subject key identifier: 25:29:A4:75:B0:5C:F6:77:86:DB:71:56:9F:E0:5E:1B:DE:1E:B6:3A Certificate issuer: /CN=60a936c7-4a19-44a9-b75d-cc22c274db26 Certificate serial: 010D0C9F4328584B9E079FC49B5795A06C5D6200 Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 18875 IP address blocks: 216.20.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9f:c4:9b:57:95:a0:6c:5d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7a4f9bfa-9677-4386-8713-2f80d4117bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:c4:83:05:26:97:d8:61:6e:0d:41:86:16: 0d:56:c6:f9:79:ac:a9:35:b0:4a:0b:c1:3e:c6:c0: ad:f8:68:85:9b:cf:6f:5e:d9:79:be:ec:49:69:b1: ca:28:4e:a3:47:7f:7a:90:a4:84:87:03:a0:3d:99: 23:91:ad:08:48:b2:c7:ee:06:ba:95:44:5a:b8:74: b4:47:11:a9:3f:7b:56:2d:c2:20:42:7f:0d:b6:7b: aa:19:36:70:9d:03:40:07:30:c1:82:c0:59:2d:1e: f9:fa:32:ef:02:65:44:51:48:dd:c2:3c:d7:e9:7d: bd:6a:32:98:94:3f:84:44:8d:0d:58:38:24:18:d1: 55:f8:ca:fe:48:b6:bf:0f:c3:5a:0c:c2:a8:ee:db: a5:bd:81:00:86:86:fa:76:35:18:ac:1d:93:9b:70: 56:d1:86:57:f9:a0:5b:e3:9d:f7:7c:f0:f7:52:1b: 3f:a1:86:79:26:cb:d7:2f:42:6b:72:ac:fd:a1:fa: dc:20:ab:ef:4c:1c:c1:60:10:cf:d1:a9:1e:12:41: 3a:03:c8:e2:27:c6:86:de:13:34:b7:f2:00:0d:6d: dc:b4:22:41:65:32:d0:25:81:3a:61:85:87:39:e7: 3f:bb:50:dc:8e:85:9a:38:a4:ff:34:1d:f6:36:01: fc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:A4:75:B0:5C:F6:77:86:DB:71:56:9F:E0:5E:1B:DE:1E:B6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl X509v3 Authority Key Identifier: keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer sbgp-ipAddrBlock: critical IPv4: 216.20.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:24:f0:36:e0:33:b5:52:ef:9c:6a:d5:49:05:ac:c0:ba:63: 7d:ac:18:15:42:fa:93:a2:8e:15:f5:61:7a:c1:af:ff:8a:d8: 22:f0:c6:96:87:af:a6:23:5b:75:2f:af:d2:8f:f5:62:66:92: 4b:bc:03:95:e4:6c:9d:29:27:ea:3b:38:85:b2:1a:6d:8e:a1: f5:d5:3e:23:95:04:c0:2f:d4:23:28:97:90:96:96:31:8a:1b: 94:4d:50:af:15:fb:e7:40:d9:e6:e2:70:e6:1c:2a:17:77:24: 15:26:1f:d9:1d:04:ee:67:6c:09:24:81:fb:16:6f:fb:bc:30: a8:52:2d:0f:7e:e3:c6:2a:41:f1:5c:29:bb:3f:99:4b:09:bf: 76:bd:36:5c:dd:0c:bd:8e:09:96:ca:aa:77:62:e3:b9:9c:51: 29:40:51:71:da:c6:1f:ca:cc:fa:e6:10:2d:01:0b:78:6c:ea: 7d:3e:25:bf:50:a4:62:77:55:3c:ef:74:2c:2c:84:06:93:57: fd:d9:56:19:e7:ea:57:50:bb:85:a4:db:45:f0:d3:d0:ed:4e: 21:da:01:2e:f6:fd:6e:21:72:53:b7:12:47:96:db:9c:9d:ee: 90:5b:4a:74:b7:cc:26:43:b8:b8:1a:27:71:2a:20:46:ae:6b: c8:2b:7e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5/Em1eVoGxdYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk YjI2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk N2E0ZjliZmEtOTY3Ny00Mzg2LTg3MTMtMmY4MGQ0MTE3YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbnEgwUml9hhbg1BhhYNVsb5eaypNbBKC8E+ xsCt+GiFm89vXtl5vuxJabHKKE6jR396kKSEhwOgPZkjka0ISLLH7ga6lURauHS0 RxGpP3tWLcIgQn8NtnuqGTZwnQNABzDBgsBZLR75+jLvAmVEUUjdwjzX6X29ajKY lD+ERI0NWDgkGNFV+Mr+SLa/D8NaDMKo7tulvYEAhob6djUYrB2Tm3BW0YZX+aBb 4533fPD3Uhs/oYZ5JsvXL0Jrcqz9ofrcIKvvTBzBYBDP0akeEkE6A8jiJ8aG3hM0 t/IADW3ctCJBZTLQJYE6YYWHOec/u1DcjoWaOKT/NB32NgH8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUppHWwXPZ3httxVp/gXhveHrY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5 MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvZWEyYjhmNmItMWQ2OC0z Mjg4LTg2N2YtNDkyMmI0YTM5MTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3 NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0 ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwk8DbgM7VS75xq1UkFrMC6Y32sGBVC+pOijhX1YXrBr/+K2CLwxpaH r6YjW3Uvr9KP9WJmkku8A5XkbJ0pJ+o7OIWyGm2OofXVPiOVBMAv1CMol5CWljGK G5RNUK8V++dA2ebicOYcKhd3JBUmH9kdBO5nbAkkgfsWb/u8MKhSLQ9+48YqQfFc Kbs/mUsJv3a9NlzdDL2OCZbKqndi47mcUSlAUXHaxh/KzPrmEC0BC3hs6n0+Jb9Q pGJ3VTzvdCwshAaTV/3ZVhnn6ldQu4Wk20Xw09DtTiHaAS72/W4hclO3EkeW25yd 7pBbSnS3zCZDuLgaJ3EqIEaua8grfuw= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:43 2025 by rpki-client