$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa File: 0daa7be5-b293-3d21-9cd9-153941bb7130.roa (raw, json) Hash identifier: uMPwBfjT0jQ8JgQcK+vf0CQZFeTZRAL+rKQVgcb49Bw= Subject key identifier: CB:40:8C:0F:C2:73:DC:61:FA:1D:65:24:EC:8D:43:51:95:38:3B:30 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EDF2E318D282D0C9C5C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 27424 IP address blocks: 64.62.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ed:f2:e3:18:d2:82:d0:c9:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0ceea18e-99af-4790-a175-4cfc561f78d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:2a:46:f9:ae:0e:65:15:cc:c4:eb:c1:ac: 48:f2:fd:16:6f:a0:24:4d:b0:36:97:5d:9a:0a:52: a9:e6:97:95:be:fc:08:e2:75:ef:54:ad:e5:c6:78: 2b:02:2c:4d:ca:fe:ca:f1:e4:d8:82:dd:27:e5:c2: a0:2b:cb:9b:2a:31:e7:b1:68:49:f7:99:c2:b9:ef: 3a:f6:fb:40:91:57:2b:30:5b:0d:29:67:04:a8:f0: cb:07:a9:0d:c6:44:52:3d:3f:5e:72:16:40:9f:86: 24:97:f7:d9:e4:44:b9:41:ff:4b:ce:32:93:ab:0a: 3e:98:72:f4:70:81:9b:46:48:e0:40:6b:44:3a:9c: b4:1f:99:80:1c:6e:b1:e7:4c:82:01:93:e2:ae:fa: 98:b7:17:ed:ad:4e:fc:3f:72:93:2a:80:38:33:c5: ab:25:47:1f:a9:87:ea:8f:de:9d:34:4b:e8:bd:ce: b1:02:76:1b:3d:8d:aa:2b:9f:f4:51:11:5a:40:2b: a0:ff:9c:b5:62:55:49:a6:b1:0c:8c:3f:39:40:db: 8e:88:e1:bf:16:c5:cd:11:33:8e:d1:8e:9f:47:ee: 4b:f6:6a:7b:c3:32:27:4b:d9:47:5e:15:9d:6f:d9: 74:d0:fb:f6:3e:07:a6:f0:02:95:e9:b0:4f:af:72: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:8C:0F:C2:73:DC:61:FA:1D:65:24:EC:8D:43:51:95:38:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:24:87:c7:69:e0:65:be:72:00:b0:57:bf:d1:b8:de:e5:66: ff:0c:82:9c:f4:1c:32:99:32:13:8b:e2:6a:2e:fd:23:9e:73: 98:c0:37:ce:61:6c:c3:f3:9c:bf:6f:bb:90:c6:ae:06:a6:fb: ba:27:3b:ae:1d:8c:e9:b5:3a:f2:c5:6d:dd:c0:3e:0a:07:24: 57:d6:19:56:1f:0a:67:be:b7:b9:b1:c2:e2:d9:bb:5a:22:1c: 08:6f:25:30:67:54:c5:8f:99:c4:23:b6:09:ce:ba:d0:3f:27: f6:d3:16:92:d3:32:f9:59:80:77:88:86:08:4c:40:56:47:fc: 4c:22:73:b9:8c:7f:6c:54:e1:f8:b0:10:29:37:2a:1a:17:7f: 7d:21:01:da:7e:9e:52:d7:18:51:e9:4a:80:b9:2f:8b:76:4f: 96:70:81:98:b7:ec:db:11:af:16:1f:14:b5:86:a8:1f:bf:dd: 62:d3:0d:72:ef:84:36:ef:75:f6:4e:4f:c3:f4:35:b2:27:5a: ee:6f:8d:70:ea:7d:af:77:9a:66:d9:e4:4c:e5:fd:2f:52:7e: cd:55:dc:c7:1e:8d:07:0e:e1:0c:e5:03:df:e1:59:a5:58:e9: a0:74:65:5d:a5:cf:83:42:83:37:f4:fe:5e:02:88:c5:da:e3: ab:55:16:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+3y4xjSgtDJxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGNlZWExOGUtOTlhZi00NzkwLWExNzUtNGNmYzU2MWY3OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2gqRvmuDmUVzMTrwaxI8v0Wb6AkTbA2l12a ClKp5peVvvwI4nXvVK3lxngrAixNyv7K8eTYgt0n5cKgK8ubKjHnsWhJ95nCue86 9vtAkVcrMFsNKWcEqPDLB6kNxkRSPT9echZAn4Ykl/fZ5ES5Qf9LzjKTqwo+mHL0 cIGbRkjgQGtEOpy0H5mAHG6x50yCAZPirvqYtxftrU78P3KTKoA4M8WrJUcfqYfq j96dNEvovc6xAnYbPY2qK5/0URFaQCug/5y1YlVJprEMjD85QNuOiOG/FsXNETOO 0Y6fR+5L9mp7wzInS9lHXhWdb9l00Pv2Pgem8AKV6bBPr3KzfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtAjA/Cc9xh+h1lJOyNQ1GVODswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGRhYTdiZTUtYjI5My0z ZDIxLTljZDktMTUzOTQxYmI3MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUkh8dp4GW+cgCwV7/RuN7lZv8Mgpz0HDKZMhOL4mou/SOec5jAN85h bMPznL9vu5DGrgam+7onO64djOm1OvLFbd3APgoHJFfWGVYfCme+t7mxwuLZu1oi HAhvJTBnVMWPmcQjtgnOutA/J/bTFpLTMvlZgHeIhghMQFZH/Ewic7mMf2xU4fiw ECk3KhoXf30hAdp+nlLXGFHpSoC5L4t2T5ZwgZi37NsRrxYfFLWGqB+/3WLTDXLv hDbvdfZOT8P0NbInWu5vjXDqfa93mmbZ5Ezl/S9Sfs1V3McejQcO4QzlA9/hWaVY 6aB0ZV2lz4NCgzf0/l4CiMXa46tVFto= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:24 2025 by rpki-client