$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7a2cb9b-df80-3c16-bd5a-57fd498e3437.roa File: e7a2cb9b-df80-3c16-bd5a-57fd498e3437.roa (raw, json) Hash identifier: WMlKt28jOC6aW9J37Sq4wITpnPRJr3d4DmceRb9+aEQ= Subject key identifier: 6C:12:22:0B:90:A6:9C:7A:4E:DE:A5:5A:03:BF:36:96:AA:B0:3D:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BDDBC3EA770746F63480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7a2cb9b-df80-3c16-bd5a-57fd498e3437.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 54288 IP address blocks: 66.220.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bd:db:c3:ea:77:07:46:f6:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ef8ee3f7-3650-420c-b55e-a4e5311bcd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:70:02:3c:be:87:95:51:17:d1:61:9b:81: 46:49:62:af:8e:56:d5:bd:3c:0d:bb:2e:83:9d:e9: 98:98:69:43:d2:e1:be:63:8b:a3:d9:7d:32:4d:36: 45:4c:37:e5:c0:f9:5c:1f:4e:11:7f:2d:9b:c4:86: 23:8b:ba:38:5f:65:2c:c5:30:45:78:a5:fd:89:e7: ff:f2:7a:bc:86:75:4c:8f:cc:58:2a:34:74:14:ac: 01:6a:e9:3d:82:e9:5f:0b:82:bb:79:e6:8f:e0:59: 00:d2:c9:33:cd:4d:6f:c5:39:73:06:a1:4c:2d:57: 95:af:c2:6c:82:5a:9c:19:e3:8c:7e:db:fb:67:6e: 94:94:5d:7b:03:a0:f4:69:d9:93:bc:c7:47:34:2e: 28:cc:e3:70:40:fe:b1:ce:a6:a9:e2:19:84:84:98: bf:b5:d0:e2:36:22:a4:ea:fe:58:a4:33:33:2e:04: e7:33:c9:3c:47:08:93:5a:91:3d:50:92:42:2e:60: 95:59:20:88:17:ed:94:f5:02:c9:a5:09:e3:83:49: 44:d9:be:06:2e:13:9a:44:71:e0:31:cf:a8:a1:07: e7:21:41:ae:bf:1c:5f:1c:46:28:17:9f:9f:8a:ec: d8:c9:e1:4a:ff:b0:18:90:ec:54:7d:c1:01:1c:fe: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:22:0B:90:A6:9C:7A:4E:DE:A5:5A:03:BF:36:96:AA:B0:3D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e7a2cb9b-df80-3c16-bd5a-57fd498e3437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.220.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:37:72:19:f3:41:5b:72:ac:a9:04:f8:46:73:e3:73:82:45: ff:7f:65:d6:e0:b2:d7:04:93:b6:f7:e8:a1:e2:55:98:ab:8f: af:9a:b3:77:98:b9:d3:b3:a5:40:c1:e8:f7:81:10:02:7a:37: e3:6e:2f:8e:af:7c:f5:71:5d:da:84:e3:a8:03:59:34:86:ae: 21:c0:ea:3c:23:14:ad:ff:14:50:a5:93:e8:fb:2a:cb:7e:79: 19:2f:c6:bf:ae:0c:20:1c:0f:62:0b:0b:87:2f:1f:29:98:8f: 6b:fd:09:6f:13:34:50:5b:61:ab:f5:bd:09:cf:54:0d:33:fa: 74:2d:8c:1a:d6:97:c3:32:99:f5:b9:2e:45:69:6d:bb:77:fd: a2:d4:f8:44:c7:83:3e:64:f1:08:3c:bc:e2:dd:26:ad:92:02: b8:99:db:70:2f:77:55:10:4d:6e:08:5d:00:67:dd:2d:d1:3b: b8:4a:6b:15:82:93:38:8b:58:e6:20:93:52:30:03:12:d2:3c: 7c:2f:d7:fb:b8:a2:2a:60:e9:a8:0d:3a:a0:a1:2b:9f:5a:5e: b6:42:86:6c:29:75:a1:bb:37:fb:5b:2d:57:f3:f0:c6:e1:dc: 90:a1:d4:bf:d8:07:5a:4f:7a:9c:b3:46:54:77:f6:b4:de:85: 72:22:b0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ173bw+p3B0b2NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZWY4ZWUzZjctMzY1MC00MjBjLWI1NWUtYTRlNTMxMWJjZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJwAjy+h5VRF9Fhm4FGSWKvjlbVvTwNuy6D nemYmGlD0uG+Y4uj2X0yTTZFTDflwPlcH04Rfy2bxIYji7o4X2UsxTBFeKX9ief/ 8nq8hnVMj8xYKjR0FKwBauk9gulfC4K7eeaP4FkA0skzzU1vxTlzBqFMLVeVr8Js glqcGeOMftv7Z26UlF17A6D0admTvMdHNC4ozONwQP6xzqap4hmEhJi/tdDiNiKk 6v5YpDMzLgTnM8k8RwiTWpE9UJJCLmCVWSCIF+2U9QLJpQnjg0lE2b4GLhOaRHHg Mc+ooQfnIUGuvxxfHEYoF5+fiuzYyeFK/7AYkOxUfcEBHP4fWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwSIguQppx6Tt6lWgO/NpaqsD3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTdhMmNiOWItZGY4MC0z YzE2LWJkNWEtNTdmZDQ5OGUzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw3chnzQVtyrKkE+EZz43OCRf9/ZdbgstcEk7b36KHiVZirj6+as3eY udOzpUDB6PeBEAJ6N+NuL46vfPVxXdqE46gDWTSGriHA6jwjFK3/FFClk+j7Kst+ eRkvxr+uDCAcD2ILC4cvHymYj2v9CW8TNFBbYav1vQnPVA0z+nQtjBrWl8MymfW5 LkVpbbt3/aLU+ETHgz5k8Qg8vOLdJq2SAriZ23Avd1UQTW4IXQBn3S3RO7hKaxWC kziLWOYgk1IwAxLSPHwv1/u4oipg6agNOqChK59aXrZChmwpdaG7N/tbLVfz8Mbh 3JCh1L/YB1pPepyzRlR39rTehXIisLI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:18 2025 by rpki-client