$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa File: d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa (raw, json) Hash identifier: BVJK09uLGsRL2p9njpR3MSa6VPsGNNTq2EMLmuceQtM= Subject key identifier: D8:3C:61:3F:BA:FE:D7:E0:5D:52:41:6D:D1:6F:8B:87:D1:90:39:14 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BC6EF12003DF0EEEEE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 397659 IP address blocks: 216.66.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bc:6e:f1:20:03:df:0e:ee:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9583cfa0-8c84-4caa-b458-9e8ebfbd1370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:fd:0e:e8:af:21:38:5f:bf:f2:7b:d3:48: 03:30:1e:1e:1c:6c:1b:53:5e:71:f9:2e:b4:35:68: 9d:a3:cf:57:82:42:b3:90:61:19:da:ce:19:c3:7c: b9:78:3e:b5:f7:f2:91:a9:ab:ec:a7:af:c0:3c:2e: cb:94:08:64:7c:fe:82:89:27:93:4f:f2:fb:6a:0b: 51:a4:80:36:27:a9:63:91:9f:2d:b4:9c:b4:2c:57: c1:30:52:62:ce:81:68:e9:cf:a4:77:15:77:f6:00: dc:b4:3b:5f:d2:83:1c:15:4a:72:f0:64:15:c3:1c: b2:aa:c2:04:56:c8:8c:3d:10:b3:b3:33:f5:8b:b9: 38:62:32:43:47:72:12:1b:b1:d6:1a:c8:1b:19:d4: 20:f1:9b:62:62:cf:1d:3e:47:31:3f:05:a1:f3:30: 42:2d:b6:f3:dc:40:8a:a6:6d:52:a3:15:5a:5b:51: fc:b6:3a:f2:52:24:98:08:c3:a3:25:da:12:c6:bf: f3:7b:c6:32:67:28:63:53:d4:59:8d:6a:a0:3a:2c: e4:39:c6:48:b2:a5:93:dc:eb:ac:fa:0d:1c:ec:bf: 55:fd:0d:75:4d:5f:51:da:88:6a:ba:7e:e6:f1:ed: 73:fb:70:7e:f2:96:d0:9e:84:72:b6:84:c2:39:09: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:61:3F:BA:FE:D7:E0:5D:52:41:6D:D1:6F:8B:87:D1:90:39:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8ab7577-6ab3-3ba8-885e-129bbb1da814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:33:70:ee:fb:f0:95:3b:95:18:31:85:78:3d:7b:fd:28:61: db:c4:47:48:ad:f4:d7:5b:da:31:40:28:fd:46:ca:06:dd:f6: 41:bb:e3:b0:70:12:6f:18:db:05:97:b1:89:ef:83:31:3c:5d: f5:90:54:60:ff:9a:45:74:ab:10:20:99:db:6d:f2:42:df:90: 7e:5b:3d:06:63:3f:21:14:2c:5e:c2:12:e6:e0:94:f4:f5:50: b4:76:64:d7:2d:f3:99:80:bb:80:bb:3d:5e:a0:65:d5:9e:cc: ee:8e:50:cb:6d:71:d0:4c:8d:ca:ee:8d:88:ed:d6:0e:19:a8: 93:f1:4e:08:f2:c6:d3:70:56:f2:6f:9e:da:a3:b0:c7:b6:bb: a4:91:5e:b1:8d:6e:84:aa:61:b7:29:2e:d0:d6:11:79:21:3a: bf:bd:ad:ff:f8:69:7a:b5:86:63:b6:da:4c:51:fd:ee:e4:42: 30:07:aa:d3:c4:3a:1a:f8:64:c1:24:41:52:05:9e:39:94:75: f1:16:14:59:12:91:6c:25:d3:41:16:c7:07:ea:ff:bb:8b:f2: a8:cc:04:68:1c:04:12:ba:c2:a8:57:9e:89:4f:72:be:9c:a8: a5:f9:4f:39:9f:a4:25:42:4c:56:2f:a1:7a:d0:72:50:58:d8: 2d:12:bc:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17xu8SAD3w7u7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTU4M2NmYTAtOGM4NC00Y2FhLWI0NTgtOWU4ZWJmYmQxMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ79DuivIThfv/J700gDMB4eHGwbU15x+S60 NWido89XgkKzkGEZ2s4Zw3y5eD619/KRqavsp6/APC7LlAhkfP6CiSeTT/L7agtR pIA2J6ljkZ8ttJy0LFfBMFJizoFo6c+kdxV39gDctDtf0oMcFUpy8GQVwxyyqsIE VsiMPRCzszP1i7k4YjJDR3ISG7HWGsgbGdQg8ZtiYs8dPkcxPwWh8zBCLbbz3ECK pm1SoxVaW1H8tjryUiSYCMOjJdoSxr/ze8YyZyhjU9RZjWqgOizkOcZIsqWT3Ous +g0c7L9V/Q11TV9R2ohqun7m8e1z+3B+8pbQnoRytoTCOQkF4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg8YT+6/tfgXVJBbdFvi4fRkDkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDhhYjc1NzctNmFiMy0z YmE4LTg4NWUtMTI5YmJiMWRhODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACozcO778JU7lRgxhXg9e/0oYdvER0it9Ndb2jFAKP1Gygbd9kG747Bw Em8Y2wWXsYnvgzE8XfWQVGD/mkV0qxAgmdtt8kLfkH5bPQZjPyEULF7CEubglPT1 ULR2ZNct85mAu4C7PV6gZdWezO6OUMttcdBMjcrujYjt1g4ZqJPxTgjyxtNwVvJv ntqjsMe2u6SRXrGNboSqYbcpLtDWEXkhOr+9rf/4aXq1hmO22kxR/e7kQjAHqtPE Ohr4ZMEkQVIFnjmUdfEWFFkSkWwl00EWxwfq/7uL8qjMBGgcBBK6wqhXnolPcr6c qKX5TzmfpCVCTFYvoXrQclBY2C0SvCQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:50 2025 by rpki-client