$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa File: b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa (raw, json) Hash identifier: 3bCJz49iKy9TkBFa3sHeVPkKJ2lClvAG7x6q1zXccuM= Subject key identifier: 1E:0C:94:DC:C2:49:DF:34:7F:C4:9E:BA:25:9C:DC:30:C5:A2:58:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E3A4761A015B91305108 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36103 IP address blocks: 216.218.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e3:a4:76:1a:01:5b:91:30:51:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=40688972-111c-499c-a6e5-dff72ed059dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:36:2d:91:ea:18:0d:9a:91:50:8f:2c:8f:20: 3c:bd:d5:77:79:d4:90:1a:a8:c5:1e:42:1f:81:7f: 18:5c:1c:fc:42:78:d5:6f:59:aa:f1:c9:84:f4:d8: 4b:28:35:45:1a:9e:c7:b9:3d:e1:94:04:fb:d1:47: ee:f9:b4:24:80:7e:6f:01:c4:02:c5:ef:a1:90:84: 43:85:a7:f3:d8:9d:cd:e7:e7:0e:80:04:c4:ac:82: 13:88:f4:2d:e0:90:e3:fd:9f:65:b6:ea:a3:6f:91: 4b:3b:64:b4:5e:a7:20:98:16:9a:b5:cf:7b:90:f1: c1:1d:49:ac:b7:f9:26:a8:7b:8c:93:74:c3:bd:fa: 87:d6:72:a2:e2:b2:a1:1b:1c:9d:7f:1c:d0:1b:80: 67:9d:ef:fc:c5:db:da:ff:28:4f:2b:81:c7:77:a1: ec:80:04:0d:46:c0:66:5c:c6:52:87:23:f6:36:7e: 20:99:6c:91:0a:3d:ca:f7:4b:68:02:1f:22:af:d0: 9b:7a:b5:30:35:57:55:f3:25:ab:b9:1a:f0:e6:77: b9:0e:bf:d5:df:be:fc:d9:e3:15:c7:b5:e3:7e:e0: ee:86:cb:62:7e:67:f7:ad:9b:ae:95:3b:7b:f9:5e: 04:8c:53:fc:83:5c:f7:c6:22:4c:a5:14:17:a0:dd: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0C:94:DC:C2:49:DF:34:7F:C4:9E:BA:25:9C:DC:30:C5:A2:58:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5f9f509-a0f4-38d5-bd69-5afaabc9b1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.218.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:a9:a6:a6:9b:3a:2a:89:6c:34:b8:f3:52:3b:9f:26:b4:66: e1:df:6c:41:3e:ab:6e:ab:53:43:bb:c9:cd:52:a3:dd:73:da: 8d:ba:c9:86:3b:46:82:2f:7f:66:0f:f4:ef:05:2b:2f:aa:20: c3:18:e1:34:c3:02:25:96:be:36:44:56:2c:71:b2:a0:83:7e: d5:fd:e1:2e:05:53:b2:fb:34:16:58:e0:db:1e:84:74:25:56: a4:1b:52:47:39:10:18:71:f3:de:80:88:0e:0a:69:34:ca:8d: 8d:99:90:4f:6a:cd:21:f0:9e:21:9a:18:86:42:6b:fc:eb:ab: cc:fb:e8:8e:83:1d:1c:dd:0b:55:39:ea:f6:72:d7:7f:09:ba: c3:af:7b:be:fb:df:71:0d:b8:fa:7c:d8:96:1d:b9:0e:af:7d: c6:fa:a9:ed:ed:72:48:60:fe:0b:d1:20:8c:0a:f3:8b:a3:31: 72:ec:60:15:c1:8a:76:0a:b3:06:55:b4:6b:b1:d8:b2:8e:05: 3f:66:03:07:92:21:0d:14:c1:ac:19:41:11:29:7e:bb:41:b1: bb:83:d8:0c:7d:87:26:17:66:24:79:81:22:92:ad:35:18:a0: 9a:d5:ac:7b:8d:01:55:1b:8f:a6:06:e4:f0:4e:f7:0a:44:cf: f6:9e:c0:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+OkdhoBW5EwUQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDA2ODg5NzItMTExYy00OTljLWE2ZTUtZGZmNzJlZDA1OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjYtkeoYDZqRUI8sjyA8vdV3edSQGqjFHkIf gX8YXBz8QnjVb1mq8cmE9NhLKDVFGp7HuT3hlAT70Ufu+bQkgH5vAcQCxe+hkIRD hafz2J3N5+cOgATErIITiPQt4JDj/Z9ltuqjb5FLO2S0XqcgmBaatc97kPHBHUms t/kmqHuMk3TDvfqH1nKi4rKhGxydfxzQG4Bnne/8xdva/yhPK4HHd6HsgAQNRsBm XMZShyP2Nn4gmWyRCj3K90toAh8ir9CberUwNVdV8yWruRrw5ne5Dr/V37782eMV x7XjfuDuhstifmf3rZuulTt7+V4EjFP8g1z3xiJMpRQXoN0SbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4MlNzCSd80f8SeuiWc3DDFolhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjVmOWY1MDktYTBmNC0z OGQ1LWJkNjktNWFmYWFiYzliMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCppqabOiqJbDS481I7nya0ZuHfbEE+q26rU0O7yc1So91z2o26yYY7 RoIvf2YP9O8FKy+qIMMY4TTDAiWWvjZEVixxsqCDftX94S4FU7L7NBZY4NsehHQl VqQbUkc5EBhx896AiA4KaTTKjY2ZkE9qzSHwniGaGIZCa/zrq8z76I6DHRzdC1U5 6vZy138JusOve77733ENuPp82JYduQ6vfcb6qe3tckhg/gvRIIwK84ujMXLsYBXB inYKswZVtGux2LKOBT9mAweSIQ0UwawZQREpfrtBsbuD2Ax9hyYXZiR5gSKSrTUY oJrVrHuNAVUbj6YG5PBO9wpEz/aewMA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:45 2025 by rpki-client