$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa File: 473c9c74-01e6-3a21-86fc-96a380120b5a.roa (raw, json) Hash identifier: /SbBXFhO0Sah1CANB0OLCfnVyDYDMxJ5I8ojFs9LcQk= Subject key identifier: 8B:36:BE:84:4A:A3:D9:E9:CB:CB:1E:E2:36:8B:6A:65:17:8A:A4:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB02CF4261C71A21AFBF9F260 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 401742 IP address blocks: 64.71.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:f4:26:1c:71:a2:1a:fb:f9:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=47ec565b-c91d-4417-afbe-814e944fe4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:b9:68:6c:9a:9f:cf:a5:5f:e8:c5:30:c9: 46:9f:74:59:8a:3f:4e:2f:ff:17:3d:f4:e7:2b:67: d3:e4:ac:bd:a9:b4:cc:d6:26:c7:d4:cb:72:69:4a: a3:57:a4:d2:ce:15:5f:de:11:5e:76:18:12:9c:25: 70:a8:f8:a6:95:4c:48:07:0b:05:ae:43:0b:60:54: 70:c5:0d:e5:02:3a:97:85:48:0c:7c:47:98:13:e4: cb:49:1c:2a:9c:8c:98:98:d4:0b:8c:ab:96:81:09: 4c:e4:be:77:61:ee:43:00:e2:60:17:55:a6:f7:02: 07:07:70:8f:d8:1d:05:30:53:b0:cf:3b:da:b7:8a: 06:8b:a1:a3:4d:21:29:67:64:57:6a:99:7e:df:79: 8b:75:ce:ba:1b:f7:02:6d:3c:1c:4d:b0:e4:83:0d: d9:ad:09:46:fa:22:51:24:e4:7b:94:09:6b:db:81: 39:b6:55:be:b8:40:aa:c2:29:cd:d3:0e:10:c8:7e: e2:bc:c8:b3:52:13:0f:f0:73:3a:01:17:1f:8d:3d: 70:fc:84:16:b4:49:75:e5:9b:5f:1e:00:4c:44:b2: 43:1e:00:04:e8:f8:f0:21:80:9c:02:ab:88:42:51: 50:4a:ef:b6:93:51:61:02:07:46:fe:53:74:66:73: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:BE:84:4A:A3:D9:E9:CB:CB:1E:E2:36:8B:6A:65:17:8A:A4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/473c9c74-01e6-3a21-86fc-96a380120b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:99:ff:b7:84:e3:be:20:2e:14:5e:83:20:29:03:7e:e5:f7: c8:95:9f:13:c2:83:c9:d6:a2:3f:c6:c6:dc:6c:e6:e4:36:5c: e2:7d:be:c2:9b:9d:25:32:62:b7:e0:39:35:b8:33:72:c2:f8: 37:3f:ec:ee:35:47:59:8f:7d:97:2c:d7:28:2a:53:7c:b8:ec: f8:fa:76:b2:09:72:47:d5:ea:71:86:8d:23:13:5c:bb:87:f3: ec:be:82:98:41:cc:d2:e1:43:a2:b8:e6:82:b1:71:ac:cd:13: 6c:75:37:f8:5b:21:17:c9:6b:ff:f0:4a:40:c2:60:be:3d:66: 73:af:95:ac:a9:8e:3d:08:c3:49:10:af:a4:43:18:90:0d:40: 8a:43:95:b1:73:cf:0d:59:52:52:4e:a3:81:e3:18:29:b5:08: 40:6c:ee:23:42:98:57:60:14:ee:a5:94:e0:46:61:55:6b:37: d8:2b:bc:ce:38:9a:fc:c8:a2:4d:50:5c:ea:14:52:89:59:6a: 3e:a4:8f:7c:ed:2b:8b:bf:a1:67:8e:84:ef:9e:ca:9d:fe:54: 71:b1:72:75:3c:23:88:6f:9f:e6:17:e2:89:56:8f:a0:0a:26: 83:e9:0c:c0:5f:bd:7e:d3:7b:bd:18:20:c6:a3:06:a8:5b:7e: b4:ca:4d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPQmHHGiGvv58mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NDdlYzU2NWItYzkxZC00NDE3LWFmYmUtODE0ZTk0NGZlNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXO5aGyan8+lX+jFMMlGn3RZij9OL/8XPfTn K2fT5Ky9qbTM1ibH1MtyaUqjV6TSzhVf3hFedhgSnCVwqPimlUxIBwsFrkMLYFRw xQ3lAjqXhUgMfEeYE+TLSRwqnIyYmNQLjKuWgQlM5L53Ye5DAOJgF1Wm9wIHB3CP 2B0FMFOwzzvat4oGi6GjTSEpZ2RXapl+33mLdc66G/cCbTwcTbDkgw3ZrQlG+iJR JOR7lAlr24E5tlW+uECqwinN0w4QyH7ivMizUhMP8HM6ARcfjT1w/IQWtEl15Ztf HgBMRLJDHgAE6PjwIYCcAquIQlFQSu+2k1FhAgdG/lN0ZnMXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs2voRKo9npy8se4jaLamUXiqTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDczYzljNzQtMDFlNi0z YTIxLTg2ZmMtOTZhMzgwMTIwYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiZ/7eE474gLhRegyApA37l98iVnxPCg8nWoj/Gxtxs5uQ2XOJ9vsKb nSUyYrfgOTW4M3LC+Dc/7O41R1mPfZcs1ygqU3y47Pj6drIJckfV6nGGjSMTXLuH 8+y+gphBzNLhQ6K45oKxcazNE2x1N/hbIRfJa//wSkDCYL49ZnOvlaypjj0Iw0kQ r6RDGJANQIpDlbFzzw1ZUlJOo4HjGCm1CEBs7iNCmFdgFO6llOBGYVVrN9grvM44 mvzIok1QXOoUUolZaj6kj3ztK4u/oWeOhO+eyp3+VHGxcnU8I4hvn+YX4olWj6AK JoPpDMBfvX7Te70YIMajBqhbfrTKTXA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:06 2025 by rpki-client