$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e8541f96-8d0c-34a8-8a2c-41121cd00ad2.roa File: e8541f96-8d0c-34a8-8a2c-41121cd00ad2.roa (raw, json) Hash identifier: orVYzEekbM18rzWUfPq0gocC4t93uQNLinXhyT8280c= Subject key identifier: 12:FF:65:88:EB:A2:FA:53:23:5D:A3:07:FC:B0:8F:CF:A4:99:A4:DF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BAD37BC0D485FAA9CC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e8541f96-8d0c-34a8-8a2c-41121cd00ad2.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 7784 IP address blocks: 65.49.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ba:d3:7b:c0:d4:85:fa:a9:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bd8b9cae-73f2-43e7-9e65-642bc25cb1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:e7:8a:85:46:1d:f0:a7:bd:49:35:f1:c1: a6:26:1f:9d:06:e5:60:38:d1:83:dd:0f:69:e9:bf: 94:4b:8f:ba:31:13:84:d1:e3:f5:c2:24:cc:eb:b2: 8c:d3:ff:b4:fd:1b:80:9c:af:df:45:cb:b0:f0:62: 09:c8:95:3b:94:2d:59:ad:ef:d3:4c:bf:60:6b:37: e6:be:ed:b5:f3:f1:c3:54:c6:72:92:e5:f3:da:98: 5b:7e:10:95:68:e3:50:96:26:ac:33:0a:61:7f:7c: 68:3e:a1:d1:5e:74:8e:b1:35:14:c8:5f:ec:0d:39: 09:40:52:48:38:13:d8:64:ca:9f:fa:57:d1:f1:13: 52:e4:7c:dd:37:3d:b8:86:ed:e2:cc:28:10:00:1c: f5:a0:ee:f3:5d:2b:19:19:67:ed:a6:82:de:4c:95: 39:ef:c3:3f:2b:b1:7d:39:a8:50:f8:72:06:ea:08: 5e:70:49:cd:65:19:21:dd:14:70:5c:82:90:e6:bf: d5:8d:dd:f5:6e:43:27:ce:62:de:8b:2a:94:67:b5: eb:fc:36:be:5a:6a:d1:00:65:00:54:a1:0b:28:bb: e9:da:d9:6b:da:30:e7:13:e6:5b:42:10:63:3f:04: 61:55:88:3e:98:79:6f:38:b0:af:c4:47:f5:6e:b9: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FF:65:88:EB:A2:FA:53:23:5D:A3:07:FC:B0:8F:CF:A4:99:A4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e8541f96-8d0c-34a8-8a2c-41121cd00ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9f:17:22:e9:5b:98:34:a0:45:9e:a8:bd:0b:4a:0e:6c:44: a2:9a:77:d0:09:a5:d5:f7:8e:05:8f:4d:48:05:f1:f1:9e:99: 5e:86:30:e1:60:f6:4a:96:dd:f1:d2:04:3f:f4:ac:83:7d:64: e2:99:af:cf:46:c7:81:3a:f2:4c:7e:e3:c7:f8:f2:ee:f3:7f: 80:0a:4e:9b:2a:9a:f1:2a:df:0c:3d:96:ee:59:ae:b8:ae:1c: b5:24:32:07:85:5f:08:8d:24:e5:6f:33:7d:e4:45:7f:ed:89: 36:59:9a:52:e0:07:79:86:63:b6:11:3f:cc:42:d1:6f:dc:69: 91:2e:16:67:64:ee:02:25:53:79:6d:06:76:e2:78:d0:29:69: 4e:b8:ed:1d:d2:d5:3e:51:c6:fc:a1:93:c1:ee:c2:88:bb:43: c1:08:ca:e8:3f:9f:9f:72:54:dc:13:41:67:f4:90:d4:33:25: 18:9b:18:46:9b:2e:14:ff:ac:79:2b:10:4b:56:3b:c2:d3:e2: be:62:37:93:6c:22:54:be:f3:bb:cc:7a:1c:77:e4:41:ed:7c: 59:4a:ed:78:bd:6e:75:43:76:f9:ae:cf:09:ac:66:53:8b:86: 1f:52:c7:6a:73:ad:d8:00:f9:6d:de:03:08:d3:28:c4:5d:37: c6:30:27:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17rTe8DUhfqpzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmQ4YjljYWUtNzNmMi00M2U3LTllNjUtNjQyYmMyNWNiMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQfnioVGHfCnvUk18cGmJh+dBuVgONGD3Q9p 6b+US4+6MROE0eP1wiTM67KM0/+0/RuAnK/fRcuw8GIJyJU7lC1Zre/TTL9gazfm vu218/HDVMZykuXz2phbfhCVaONQliasMwphf3xoPqHRXnSOsTUUyF/sDTkJQFJI OBPYZMqf+lfR8RNS5HzdNz24hu3izCgQABz1oO7zXSsZGWftpoLeTJU578M/K7F9 OahQ+HIG6ghecEnNZRkh3RRwXIKQ5r/Vjd31bkMnzmLeiyqUZ7Xr/Da+WmrRAGUA VKELKLvp2tlr2jDnE+ZbQhBjPwRhVYg+mHlvOLCvxEf1brmJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL/ZYjrovpTI12jB/ywj8+kmaTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTg1NDFmOTYtOGQwYy0z NGE4LThhMmMtNDExMjFjZDAwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFufFyLpW5g0oEWeqL0LSg5sRKKad9AJpdX3jgWPTUgF8fGemV6GMOFg 9kqW3fHSBD/0rIN9ZOKZr89Gx4E68kx+48f48u7zf4AKTpsqmvEq3ww9lu5Zrriu HLUkMgeFXwiNJOVvM33kRX/tiTZZmlLgB3mGY7YRP8xC0W/caZEuFmdk7gIlU3lt BnbieNApaU647R3S1T5Rxvyhk8Huwoi7Q8EIyug/n59yVNwTQWf0kNQzJRibGEab LhT/rHkrEEtWO8LT4r5iN5NsIlS+87vMehx35EHtfFlK7Xi9bnVDdvmuzwmsZlOL hh9Sx2pzrdgA+W3eAwjTKMRdN8YwJ3k= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:43 2025 by rpki-client