$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11de544-65b6-301c-a4ab-d71c38a3aa0b.roa File: b11de544-65b6-301c-a4ab-d71c38a3aa0b.roa (raw, json) Hash identifier: 2EDwJi5NJCiA9AlwPl03E6GR4q15miz3bNskvUPQYo0= Subject key identifier: D1:51:B4:A7:30:B2:14:C5:86:A2:DA:E5:68:3A:12:12:25:65:EA:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E6D5F918081F2EC3E140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11de544-65b6-301c-a4ab-d71c38a3aa0b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54288 IP address blocks: 64.71.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e6:d5:f9:18:08:1f:2e:c3:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=18b1b3f6-1ecf-4bfb-9160-abf4321adc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:83:67:2a:c9:54:de:a1:00:7f:49:c5:3d: 9b:51:63:f4:df:ef:21:ee:ab:97:e0:19:97:ec:56: 1d:0e:7b:29:90:35:01:b5:4c:e1:e1:34:8b:f5:03: 89:be:33:17:be:b7:c6:4e:33:11:93:2a:c2:66:62: c1:b6:1d:0b:da:9c:1f:f1:da:57:f1:45:6d:a4:4d: f5:ee:1a:c4:7a:12:c3:b9:a1:e1:81:16:79:0c:9d: c5:d9:45:c1:10:c0:ef:a9:5b:fe:a1:4b:a3:e4:7d: 94:d2:dc:b4:b2:67:6a:ae:fd:01:9b:ba:c2:17:4d: 2c:51:df:57:d4:d1:25:9a:c8:a1:38:25:22:b8:21: ee:a5:1c:db:05:9e:87:54:d7:88:9e:27:3b:0f:50: 86:21:af:29:53:ad:36:98:ae:86:c1:08:c6:71:ea: ed:2a:7b:ea:43:61:89:3c:4b:0b:8d:2f:77:1c:31: fe:90:83:1e:41:b0:98:44:4c:e0:0f:52:05:8d:76: 89:47:a5:5b:8a:ca:e5:2e:89:1e:b4:8e:68:18:44: 15:11:f2:fe:a7:33:e7:5e:24:8b:74:c2:8b:ce:74: 62:0c:a6:e0:19:27:0d:3e:85:49:79:6b:82:7e:10: 3b:64:80:72:07:d4:64:c2:4a:5b:f2:d5:6d:bd:c4: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:51:B4:A7:30:B2:14:C5:86:A2:DA:E5:68:3A:12:12:25:65:EA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b11de544-65b6-301c-a4ab-d71c38a3aa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a5:18:80:dc:72:64:38:b7:e5:67:e2:97:37:c0:e4:63:6d: fc:0d:93:d8:10:79:34:ba:96:c6:e8:59:9f:db:c1:a1:73:12: f9:43:1e:21:21:0a:b1:ad:f1:cf:e0:dd:46:58:68:e3:dc:2e: df:02:ea:27:c1:2a:39:79:2b:f3:2e:e2:64:c1:b1:52:a1:88: 11:b1:54:c1:4f:9d:98:3c:eb:0b:37:ae:34:86:ed:24:5b:1f: d1:0a:d3:db:fb:d1:ce:f4:7e:81:58:f5:ff:5d:75:87:a1:81: eb:49:99:e5:59:7b:4c:cb:9b:5f:b7:07:92:e8:d6:53:ee:9e: 56:d4:fd:0d:43:74:4a:c4:c5:54:64:2c:dd:c1:7a:c8:8a:12: 63:07:92:6f:17:67:c7:93:49:e1:db:55:a7:59:99:4e:dd:f0: b9:56:cf:ab:ee:7a:c0:6d:19:45:c8:81:ca:0f:91:88:44:96: 21:b1:87:57:ac:c5:dc:34:eb:36:16:57:2d:71:64:76:d5:5a: dc:79:ca:f0:27:d9:58:61:ee:72:c8:0e:04:54:ce:8a:64:5a: 6e:f4:e6:cc:de:95:6e:05:51:f9:b2:7f:a5:74:65:eb:61:44: 3e:42:ce:6f:af:1c:5d:00:b0:07:3f:69:0d:b1:d4:c2:69:09: fb:f3:71:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+bV+RgIHy7D4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MThiMWIzZjYtMWVjZi00YmZiLTkxNjAtYWJmNDMyMWFkYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugKDZyrJVN6hAH9JxT2bUWP03+8h7quX4BmX 7FYdDnspkDUBtUzh4TSL9QOJvjMXvrfGTjMRkyrCZmLBth0L2pwf8dpX8UVtpE31 7hrEehLDuaHhgRZ5DJ3F2UXBEMDvqVv+oUuj5H2U0ty0smdqrv0Bm7rCF00sUd9X 1NElmsihOCUiuCHupRzbBZ6HVNeInic7D1CGIa8pU602mK6GwQjGcertKnvqQ2GJ PEsLjS93HDH+kIMeQbCYREzgD1IFjXaJR6VbisrlLoketI5oGEQVEfL+pzPnXiSL dMKLznRiDKbgGScNPoVJeWuCfhA7ZIByB9Rkwkpb8tVtvcRUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFRtKcwshTFhqLa5Wg6EhIlZerSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjExZGU1NDQtNjViNi0z MDFjLWE0YWItZDcxYzM4YTNhYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEetMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6lGIDccmQ4t+Vn4pc3wORjbfwNk9gQeTS6lsboWZ/bwaFzEvlDHiEh CrGt8c/g3UZYaOPcLt8C6ifBKjl5K/Mu4mTBsVKhiBGxVMFPnZg86ws3rjSG7SRb H9EK09v70c70foFY9f9ddYehgetJmeVZe0zLm1+3B5Lo1lPunlbU/Q1DdErExVRk LN3BesiKEmMHkm8XZ8eTSeHbVadZmU7d8LlWz6vuesBtGUXIgcoPkYhEliGxh1es xdw06zYWVy1xZHbVWtx5yvAn2Vhh7nLIDgRUzopkWm705szelW4FUfmyf6V0Zeth RD5Czm+vHF0AsAc/aQ2x1MJpCfvzcZQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:06 2025 by rpki-client