$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa File: 5f214b9f-b571-3e5e-862b-39c37c23157a.roa (raw, json) Hash identifier: k5c89eZqw2wyXncj+EUF5QOlur+bNoLITSHUGE2YnXA= Subject key identifier: CE:80:E4:F5:83:0C:FB:E6:5C:95:8B:33:67:EC:B1:EB:68:9A:0F:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584BB02D133F71ED4FE010870680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 401742 IP address blocks: 64.71.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:13:3f:71:ed:4f:e0:10:87:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=10dc0833-91bb-40e2-9d54-933bcea68d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:01:58:5a:89:09:f1:f3:38:62:4c:9e:b3: ee:ce:df:60:2a:9e:9c:38:23:ea:23:d5:38:7a:c1: 30:68:f8:3e:b4:02:5e:d6:9b:71:76:7f:dd:34:7e: 9b:69:c1:7f:a7:45:6f:c1:76:84:1a:f2:b2:d4:f6: b2:f5:0e:5b:ea:ad:d0:15:a7:43:20:bb:0a:77:d7: 29:3f:67:62:ad:8a:29:70:1d:98:f3:3e:ee:3b:68: 93:8c:5c:ac:8c:c9:9d:3f:c5:be:70:62:92:09:bd: 4e:4f:c2:89:3c:15:70:0d:9d:4f:93:31:98:97:25: d1:5a:01:95:4d:f0:e7:9e:4e:2b:9c:9c:1f:b2:73: 4b:f1:7b:f7:58:47:f0:61:1b:be:dc:f7:76:a3:94: 6b:49:28:d0:a1:c5:cc:79:30:f3:65:5e:d2:ca:cd: a2:63:83:df:9d:b1:86:cb:63:17:f0:c3:bd:02:8a: ce:20:1e:3c:40:61:c1:69:15:ae:4c:b7:f7:20:84: 1a:5f:28:3c:86:f9:62:0d:86:85:bf:f0:e5:e1:e8: 07:95:79:ee:74:2b:77:f0:c3:fa:3f:98:de:ea:88: 13:67:fa:be:99:18:81:c2:ca:8a:1f:ea:11:cf:b0: 43:96:d0:9f:72:30:b2:29:96:3d:e5:b7:e9:62:f2: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:80:E4:F5:83:0C:FB:E6:5C:95:8B:33:67:EC:B1:EB:68:9A:0F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b3:8b:49:af:b1:98:3c:d6:58:a0:4f:7e:28:ce:ab:00:1c: 79:7b:63:1b:71:64:10:a0:c7:ce:c3:67:bf:19:49:57:9f:2d: 0b:d2:93:de:5d:5b:4f:1b:82:7f:31:21:b8:f4:18:35:ea:18: c4:d8:ac:25:9f:f1:c5:6e:06:87:9a:63:0b:47:c2:e2:97:71: c8:01:03:46:51:1b:1f:d6:81:a5:51:f4:0e:54:fb:15:f9:04: d0:f1:59:e4:da:93:f5:2f:87:76:5c:36:df:1c:06:ee:c6:5c: 44:21:4d:3b:86:8c:80:6a:74:d7:bd:e9:0a:8f:e1:42:eb:a3: e5:a1:49:e1:8d:81:64:b5:30:9c:08:26:9d:b0:88:aa:b6:2e: 96:b5:b6:88:7c:c7:f5:d1:1a:c6:75:dc:44:a8:fe:0d:55:51: 61:03:6e:35:57:5e:96:77:91:5b:ed:a2:6c:f0:37:c5:c4:e1: c9:28:7d:ef:08:53:6c:18:ea:6e:dd:a6:bd:36:67:17:6a:93: eb:b1:59:0c:c1:bd:3c:28:ef:95:98:3a:d8:d5:75:ee:91:92: ea:6e:c4:3d:c4:a8:07:39:fa:77:b8:4a:8f:ee:99:55:46:f2: 9e:5e:b8:37:9a:1e:3e:7f:07:38:35:5a:a1:21:a3:ea:b9:48: 91:8b:5c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRM/ce1P4BCHBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MTBkYzA4MzMtOTFiYi00MGUyLTlkNTQtOTMzYmNlYTY4ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4BWFqJCfHzOGJMnrPuzt9gKp6cOCPqI9U4 esEwaPg+tAJe1ptxdn/dNH6bacF/p0VvwXaEGvKy1Pay9Q5b6q3QFadDILsKd9cp P2dirYopcB2Y8z7uO2iTjFysjMmdP8W+cGKSCb1OT8KJPBVwDZ1PkzGYlyXRWgGV TfDnnk4rnJwfsnNL8Xv3WEfwYRu+3Pd2o5RrSSjQocXMeTDzZV7Sys2iY4PfnbGG y2MX8MO9AorOIB48QGHBaRWuTLf3IIQaXyg8hvliDYaFv/Dl4egHlXnudCt38MP6 P5je6ogTZ/q+mRiBwsqKH+oRz7BDltCfcjCyKZY95bfpYvJ6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6A5PWDDPvmXJWLM2fssetomg9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWYyMTRiOWYtYjU3MS0z ZTVlLTg2MmItMzljMzdjMjMxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyzi0mvsZg81ligT34ozqsAHHl7YxtxZBCgx87DZ78ZSVefLQvSk95d W08bgn8xIbj0GDXqGMTYrCWf8cVuBoeaYwtHwuKXccgBA0ZRGx/WgaVR9A5U+xX5 BNDxWeTak/Uvh3ZcNt8cBu7GXEQhTTuGjIBqdNe96QqP4ULro+WhSeGNgWS1MJwI Jp2wiKq2Lpa1toh8x/XRGsZ13ESo/g1VUWEDbjVXXpZ3kVvtomzwN8XE4ckofe8I U2wY6m7dpr02Zxdqk+uxWQzBvTwo75WYOtjVde6RkupuxD3EqAc5+ne4So/umVVG 8p5euDeaHj5/Bzg1WqEho+q5SJGLXCw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:58 2025 by rpki-client