$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa File: 35da6f66-6d8e-3e4a-bca0-c50058f11459.roa (raw, json) Hash identifier: ex9PSmtIM56VPv9rfnaMP4yVpbHAqZyNX7J4Wwk+QX4= Subject key identifier: D7:F2:F1:AC:AB:0F:53:81:FE:AE:EE:25:44:C0:CC:6A:E0:D1:62:D6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7B961C501A60F91C4E300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22890 IP address blocks: 184.105.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b9:61:c5:01:a6:0f:91:c4:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5472fe10-0253-4797-9b9c-9fb7a1e5f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:67:d7:11:a1:f8:8f:a8:3f:c8:57:ac:8a: e1:3a:21:d2:31:1c:b7:6e:2c:64:aa:f9:2b:5e:88: 63:81:09:65:e6:5b:2f:74:0d:8f:4b:05:66:f3:be: 1d:bb:10:c2:76:20:80:38:14:22:fc:ea:cb:58:54: db:fe:f2:40:30:00:8c:be:42:83:4e:34:16:e3:40: 33:99:88:7b:a0:bb:7a:d1:2c:b1:f4:88:c9:30:13: 88:94:d3:34:2f:40:64:47:39:c4:d4:f0:49:69:06: 52:1d:49:fd:4b:9f:14:41:7f:94:af:9c:50:e2:0b: 19:07:49:e7:15:cf:df:3f:d5:d5:d2:05:46:a9:a4: a6:f6:d9:f3:35:cd:f6:d2:23:81:52:77:69:57:59: 99:e9:05:2f:dd:2f:e1:0d:86:61:a8:82:ef:26:22: 94:ce:fe:ab:8d:cc:1e:01:1d:46:74:c8:dc:5e:68: 34:d3:f0:85:54:23:4f:ca:87:16:08:02:46:40:46: ea:de:72:c0:3f:e0:b2:a1:ac:f0:2e:46:29:f8:5a: 13:66:21:61:c0:e6:47:75:90:12:dd:1d:4e:7a:a1: cd:c6:f8:77:4d:12:05:00:bb:ce:b8:72:67:2a:87: 5d:ad:96:6d:5b:f9:6e:34:12:7a:01:64:44:ab:d9: 37:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F2:F1:AC:AB:0F:53:81:FE:AE:EE:25:44:C0:CC:6A:E0:D1:62:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 184.105.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ab:02:dd:71:6d:d7:19:cb:b3:9e:4b:82:1b:76:5b:b4:86: 1c:6f:d9:96:55:e0:52:28:31:89:5f:4d:69:95:81:e0:e0:5c: 5f:bf:17:15:87:8e:04:e6:eb:dd:b7:39:1c:78:c4:90:d2:0a: 39:73:f9:2e:df:e4:cf:2a:02:b4:f8:4e:49:82:6f:f4:bb:f6: 95:9f:e5:c3:8e:50:06:a5:c0:e1:08:88:fd:1d:f4:b6:4d:62: 30:d9:42:bc:e9:58:53:04:85:e6:31:55:50:02:9a:59:88:f5: 69:48:dd:fa:78:40:ff:db:7c:2c:74:50:63:f3:e7:de:52:ba: 33:25:9f:3a:ca:82:e3:c6:f9:59:96:b6:1d:4a:3c:e7:7c:05: d4:90:64:19:d1:e1:9d:17:c4:dd:7e:f7:59:d2:94:89:0c:31: b2:db:c3:06:88:6a:cc:0b:8c:2d:e5:c7:67:16:b8:f1:84:d4: 54:91:f5:ed:27:a0:73:58:53:63:89:19:d1:ff:75:f0:40:15: 36:34:e7:a9:30:25:d3:a1:5d:22:90:85:96:40:a6:b9:ae:c4: ad:36:46:ce:ad:77:b2:23:12:88:f3:0b:05:1b:92:4e:8f:03: 06:dc:87:3e:46:1c:26:e0:ca:34:c4:71:6c:59:7e:78:9c:09: 54:66:eb:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17lhxQGmD5HE4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTQ3MmZlMTAtMDI1My00Nzk3LTliOWMtOWZiN2ExZTVmODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Zn1xGh+I+oP8hXrIrhOiHSMRy3bixkqvkr XohjgQll5lsvdA2PSwVm874duxDCdiCAOBQi/OrLWFTb/vJAMACMvkKDTjQW40Az mYh7oLt60Syx9IjJMBOIlNM0L0BkRznE1PBJaQZSHUn9S58UQX+Ur5xQ4gsZB0nn Fc/fP9XV0gVGqaSm9tnzNc320iOBUndpV1mZ6QUv3S/hDYZhqILvJiKUzv6rjcwe AR1GdMjcXmg00/CFVCNPyocWCAJGQEbq3nLAP+CyoazwLkYp+FoTZiFhwOZHdZAS 3R1OeqHNxvh3TRIFALvOuHJnKoddrZZtW/luNBJ6AWREq9k3aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfy8ayrD1OB/q7uJUTAzGrg0WLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzVkYTZmNjYtNmQ4ZS0z ZTRhLWJjYTAtYzUwMDU4ZjExNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyrAt1xbdcZy7OeS4Ibdlu0hhxv2ZZV4FIoMYlfTWmVgeDgXF+/FxWH jgTm6923ORx4xJDSCjlz+S7f5M8qArT4TkmCb/S79pWf5cOOUAalwOEIiP0d9LZN YjDZQrzpWFMEheYxVVACmlmI9WlI3fp4QP/bfCx0UGPz595SujMlnzrKguPG+VmW th1KPOd8BdSQZBnR4Z0XxN1+91nSlIkMMbLbwwaIaswLjC3lx2cWuPGE1FSR9e0n oHNYU2OJGdH/dfBAFTY056kwJdOhXSKQhZZAprmuxK02Rs6td7IjEojzCwUbkk6P Awbchz5GHCbgyjTEcWxZfnicCVRm69Y= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:59 2025 by rpki-client