$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa File: 1fa2a60f-090f-357d-9108-2c2af7b2defa.roa (raw, json) Hash identifier: XdnF/TsYjZBiyf6NzXqWFzufdH0DBXYU/Qr6P4aRfxU= Subject key identifier: EA:73:3A:AA:B9:A7:02:CB:0A:3E:18:65:53:72:9A:5B:1F:C8:41:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BCF9288BB3FD1574CEA0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 53813 IP address blocks: 216.66.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bc:f9:28:8b:b3:fd:15:74:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2a6a9733-32b8-4c1c-bf00-fa5538159fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:4e:b6:0c:22:93:bf:91:87:67:49:99:bd: 43:12:f7:30:65:db:47:18:1c:5f:25:b9:5d:ef:f0: f7:19:c3:48:c8:06:12:a1:f2:fb:cb:8d:72:b0:49: ed:b9:28:04:75:c9:82:f5:aa:b5:0c:b1:09:76:72: f8:ae:44:35:f4:c0:07:95:5d:34:4e:4b:d2:62:0c: 6a:37:85:5d:d0:4a:07:7e:19:20:cc:77:94:82:44: 28:89:50:cd:94:1e:4b:62:ee:2c:d9:48:27:ad:6b: 26:2b:9c:61:f1:e3:64:7c:43:df:1e:70:10:6b:35: 3e:ab:3a:fd:eb:09:42:ee:e3:23:61:80:9b:b5:75: 20:e5:7f:b1:3d:23:a5:84:7d:79:ea:87:f9:eb:93: d8:1c:39:4c:81:98:b8:6d:bd:41:a7:29:71:52:40: e9:f8:31:f3:4d:cd:10:cf:a8:18:dd:00:c1:e0:cb: dc:bb:10:cc:95:e4:da:4c:89:af:52:01:d6:f1:5c: 05:b2:58:22:e7:c2:00:e8:85:6c:e6:15:88:e6:04: 99:6c:cb:42:69:18:56:e4:aa:c1:fe:0e:92:e8:41: 15:90:14:cd:09:2b:c4:aa:5f:29:ae:fe:2e:c4:cc: 34:ef:13:e8:e5:39:b3:60:83:6b:7c:0b:c1:b7:f0: f5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:3A:AA:B9:A7:02:CB:0A:3E:18:65:53:72:9A:5B:1F:C8:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cb:c0:ef:26:af:3d:f1:e7:82:30:8b:e6:49:19:89:1b:07: 74:84:a5:3f:b4:9e:af:4a:b4:78:18:85:ec:45:c5:d7:ab:0d: d9:4e:a5:f0:7e:d9:86:c8:a1:23:0f:f9:77:b1:e1:53:b5:7c: 63:0c:81:09:e8:a6:24:5f:07:16:b1:8f:83:50:6d:e0:20:ea: 42:23:af:ed:ee:73:a9:54:c3:84:5b:e9:05:5e:0c:c0:ef:7b: bd:6e:c4:30:86:a9:7d:fb:36:21:df:db:6c:ac:c1:7c:a4:7c: 54:3c:24:d9:b8:34:bb:f0:ba:20:02:f9:2c:af:46:12:32:d8: 31:bf:b9:50:22:7f:5d:a7:0f:36:23:5d:1f:45:0f:41:d1:07: 31:38:9a:ef:50:a0:67:19:93:05:82:c7:4a:06:0c:a4:3e:bd: be:3a:4a:fd:09:d7:a0:fe:86:a3:1d:5e:ce:1c:2a:17:e6:0d: b1:08:0b:d1:53:c8:57:dd:3e:2a:1d:1f:7b:c7:1f:8c:ff:ec: 1b:9a:33:0d:42:b8:5a:1c:85:3a:5a:a3:73:10:0a:96:98:46: a0:89:49:bb:8e:48:ce:0d:ba:b0:da:fd:cd:91:34:aa:0c:17: b3:82:10:5e:16:63:39:8b:c6:a0:cd:9d:24:12:5e:91:a5:e7: 09:6b:5d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17z5KIuz/RV0zqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmE2YTk3MzMtMzJiOC00YzFjLWJmMDAtZmE1NTM4MTU5ZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt35Otgwik7+Rh2dJmb1DEvcwZdtHGBxfJbld 7/D3GcNIyAYSofL7y41ysEntuSgEdcmC9aq1DLEJdnL4rkQ19MAHlV00TkvSYgxq N4Vd0EoHfhkgzHeUgkQoiVDNlB5LYu4s2UgnrWsmK5xh8eNkfEPfHnAQazU+qzr9 6wlC7uMjYYCbtXUg5X+xPSOlhH156of565PYHDlMgZi4bb1BpylxUkDp+DHzTc0Q z6gY3QDB4MvcuxDMleTaTImvUgHW8VwFslgi58IA6IVs5hWI5gSZbMtCaRhW5KrB /g6S6EEVkBTNCSvEql8prv4uxMw07xPo5TmzYINrfAvBt/D1awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpzOqq5pwLLCj4YZVNymlsfyEEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWZhMmE2MGYtMDkwZi0z NTdkLTkxMDgtMmMyYWY3YjJkZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvLwO8mrz3x54Iwi+ZJGYkbB3SEpT+0nq9KtHgYhexFxderDdlOpfB+ 2YbIoSMP+Xex4VO1fGMMgQnopiRfBxaxj4NQbeAg6kIjr+3uc6lUw4Rb6QVeDMDv e71uxDCGqX37NiHf22yswXykfFQ8JNm4NLvwuiAC+SyvRhIy2DG/uVAif12nDzYj XR9FD0HRBzE4mu9QoGcZkwWCx0oGDKQ+vb46Sv0J16D+hqMdXs4cKhfmDbEIC9FT yFfdPiodH3vHH4z/7BuaMw1CuFochTpao3MQCpaYRqCJSbuOSM4NurDa/c2RNKoM F7OCEF4WYzmLxqDNnSQSXpGl5wlrXf0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:56:26 2025 by rpki-client