$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e74be1-e7b5-3f2f-8750-d55d901cb8b4.roa File: c9e74be1-e7b5-3f2f-8750-d55d901cb8b4.roa (raw, json) Hash identifier: 2Cn8RGD9lID5bqZGuYyyw5lkKaVgsE7mYimuBMGr4MU= Subject key identifier: F4:37:BA:88:65:6D:83:13:09:C2:C0:FF:B0:A9:87:85:8A:E7:97:7C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E1EB344568FCA7F469C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e74be1-e7b5-3f2f-8750-d55d901cb8b4.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14979 IP address blocks: 66.160.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e1:eb:34:45:68:fc:a7:f4:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=086781f7-7b59-4cb6-9437-ce9a7a489950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:df:65:13:51:89:11:62:71:3d:6e:85:95: 3f:72:81:42:50:b7:c8:69:67:20:6c:5e:d2:25:83: 04:7d:82:ff:67:43:f0:3f:eb:af:f2:8b:80:c2:fd: 94:e1:61:b4:4b:df:f8:ad:fc:7a:81:1b:bd:3a:52: a9:2b:cb:2d:d5:83:5b:36:be:05:56:70:50:ec:27: da:48:31:77:a4:97:c4:40:c4:03:a8:29:60:ff:ac: 5a:fa:ae:0a:a8:e3:2b:bb:88:77:39:af:d9:9c:32: 98:a9:63:78:84:91:20:de:c6:5c:53:60:57:fb:cd: 6a:e7:40:b3:cd:fe:62:ff:c2:33:9b:a3:a9:a3:ae: dc:a6:6f:b6:d6:7c:96:f4:00:48:b8:37:8b:73:e4: 7e:87:96:9b:8e:d5:23:68:af:c4:3e:7f:2c:2f:0e: 9e:b8:51:51:9f:0f:65:59:33:fc:c1:56:1c:e0:05: 45:8e:b8:fe:51:68:76:7e:fb:b9:ae:90:e4:0d:7f: 26:4b:da:44:ed:03:73:b2:bd:36:5f:33:31:83:30: a7:f3:41:ab:d6:78:f5:28:bf:2d:a1:8a:e3:07:5f: 1d:66:81:27:c1:cd:46:89:13:a0:a9:42:60:c2:01: 50:e9:75:01:a8:54:60:11:12:08:be:87:c1:ee:c9: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:37:BA:88:65:6D:83:13:09:C2:C0:FF:B0:A9:87:85:8A:E7:97:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e74be1-e7b5-3f2f-8750-d55d901cb8b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:c4:54:3e:bb:ad:19:2a:f8:63:a3:36:8a:93:eb:95:be:3f: 3f:e5:9f:ed:30:1c:fa:dd:a5:c3:7f:ea:df:34:e3:01:57:41: 7e:5f:52:f2:94:b4:c8:48:ca:ff:06:d9:02:3e:f2:61:89:a2: 6a:0f:75:67:0b:85:8d:bc:31:56:03:0b:64:86:46:3a:2a:d4: b8:33:cd:55:5c:73:74:9a:bc:36:7b:33:48:fe:35:77:09:7d: c6:a0:f7:47:86:46:b9:5e:58:ba:6d:59:6b:f9:e6:dc:92:1d: 09:f7:ae:e4:c3:51:a8:8e:49:d2:d5:1a:a3:85:d8:21:6a:d3: 10:c4:2f:0a:d1:a8:e9:77:9f:fd:89:e3:1f:2f:38:79:04:24: 8e:b1:71:68:8f:05:ec:22:5c:73:9c:12:c8:df:0a:22:18:c3: de:26:f6:2e:d4:ad:ac:56:c3:0c:5f:5d:42:9e:e5:02:af:66: 7f:ab:dc:e1:0a:c3:b3:c3:12:ca:e2:d9:4c:d1:db:f7:5f:ad: da:92:60:14:1a:74:59:29:70:bb:ec:47:73:80:e6:56:f3:7f: 05:c4:84:bc:45:ac:3e:a8:a0:fd:2b:73:f8:01:a4:51:f6:dc: ae:6f:ea:60:70:bd:0f:ec:02:11:da:46:cc:05:53:35:cb:5f: cc:00:3f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+HrNEVo/Kf0acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDg2NzgxZjctN2I1OS00Y2I2LTk0MzctY2U5YTdhNDg5OTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLvfZRNRiRFicT1uhZU/coFCULfIaWcgbF7S JYMEfYL/Z0PwP+uv8ouAwv2U4WG0S9/4rfx6gRu9OlKpK8st1YNbNr4FVnBQ7Cfa SDF3pJfEQMQDqClg/6xa+q4KqOMru4h3Oa/ZnDKYqWN4hJEg3sZcU2BX+81q50Cz zf5i/8Izm6Opo67cpm+21nyW9ABIuDeLc+R+h5abjtUjaK/EPn8sLw6euFFRnw9l WTP8wVYc4AVFjrj+UWh2fvu5rpDkDX8mS9pE7QNzsr02XzMxgzCn80Gr1nj1KL8t oYrjB18dZoEnwc1GiROgqUJgwgFQ6XUBqFRgERIIvofB7slhUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ3uohlbYMTCcLA/7Cph4WK55d8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzllNzRiZTEtZTdiNS0z ZjJmLTg3NTAtZDU1ZDkwMWNiOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3EVD67rRkq+GOjNoqT65W+Pz/ln+0wHPrdpcN/6t804wFXQX5fUvKU tMhIyv8G2QI+8mGJomoPdWcLhY28MVYDC2SGRjoq1LgzzVVcc3SavDZ7M0j+NXcJ fcag90eGRrleWLptWWv55tySHQn3ruTDUaiOSdLVGqOF2CFq0xDELwrRqOl3n/2J 4x8vOHkEJI6xcWiPBewiXHOcEsjfCiIYw94m9i7UraxWwwxfXUKe5QKvZn+r3OEK w7PDEsri2UzR2/dfrdqSYBQadFkpcLvsR3OA5lbzfwXEhLxFrD6ooP0rc/gBpFH2 3K5v6mBwvQ/sAhHaRswFUzXLX8wAP9c= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:01 2025 by rpki-client