$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5d577-6ba2-3dad-ae86-0003e5e77005.roa File: 2af5d577-6ba2-3dad-ae86-0003e5e77005.roa (raw, json) Hash identifier: u8Cc8bPcWZRGobPuwC++h5ib6AVDytC+O/FmkX+a3uI= Subject key identifier: A3:60:76:2C:5F:32:D5:89:E0:50:5B:93:4E:EC:5D:8E:D3:D0:2D:5D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7E17DB4E66A3F182F8840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5d577-6ba2-3dad-ae86-0003e5e77005.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 133929 IP address blocks: 65.49.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:e1:7d:b4:e6:6a:3f:18:2f:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=164c7de0-742b-448a-acb6-f2e79d4678ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:18:9b:90:d9:2b:ff:ad:42:53:b1:35:ab: e2:50:7d:ea:68:3b:df:cb:b9:c4:dd:6b:de:1d:30: 02:ab:f5:b9:9b:ea:43:73:54:8a:05:aa:6b:94:12: d1:82:11:8e:78:85:fc:b0:68:3e:8f:03:e3:41:ce: 3a:24:f6:d6:1e:f2:aa:59:c3:8f:12:f1:70:cb:09: 41:81:cf:73:f6:5e:25:e8:30:b4:d5:0c:b0:bd:d9: 4d:10:9a:67:86:f4:e7:7f:b6:86:42:47:0d:9a:ff: 46:0b:87:37:bb:cd:bf:6e:56:9b:93:18:fc:e2:6f: fc:5b:9a:41:74:48:6f:db:b7:fb:fe:1e:1c:db:ea: 96:e5:8d:41:15:ce:38:5e:0a:78:ed:16:48:3e:b7: 3e:ec:0f:cc:7d:62:75:5f:39:15:54:8b:49:d1:17: 1d:85:73:20:97:29:40:4b:63:62:fb:17:7a:8e:c0: ed:15:2c:d3:a3:85:bc:80:0b:31:02:9f:1a:27:d6: 20:35:b4:28:9e:31:18:bb:26:ad:73:c0:3f:b9:18: 47:04:b1:04:d4:0b:37:f2:11:be:0c:d2:cb:45:3c: 4f:fc:92:63:bf:29:80:29:0d:41:1a:df:93:d2:32: da:c7:f8:c8:51:2e:46:e5:d0:94:91:ea:35:7f:b9: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:76:2C:5F:32:D5:89:E0:50:5B:93:4E:EC:5D:8E:D3:D0:2D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2af5d577-6ba2-3dad-ae86-0003e5e77005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:46:03:17:99:11:37:79:cf:03:a3:c5:ce:f8:eb:87:80:04: ae:8b:79:ba:40:00:f1:33:62:38:60:83:c1:7e:13:66:a8:44: 37:eb:92:01:49:59:d0:02:19:a7:ab:89:7a:b5:21:02:d0:17: 4f:d6:a1:07:91:41:e2:3c:5a:cc:70:0b:6a:b4:ff:e4:26:f4: a9:a7:51:77:4b:36:df:13:3c:60:eb:2c:22:43:ba:eb:d8:16: 65:7f:57:ad:e5:ab:e8:46:71:e8:42:81:34:38:e7:f1:13:28: 0a:76:b0:1d:ef:8a:49:c7:29:35:05:d6:68:bb:bc:a1:3d:c2: 3a:4f:17:6e:8f:09:18:d1:2b:5c:79:0f:65:44:da:13:66:55: 2d:6b:c5:33:0a:3b:f4:ee:d8:75:e2:38:64:8d:eb:5f:20:b2: 73:53:74:c9:aa:fb:c0:08:3b:39:3c:b7:2a:6a:1a:fb:78:ba: 7d:81:f6:65:13:7c:63:ca:2a:7b:88:cf:f2:93:1f:f7:bf:83: bb:4f:46:ac:de:5a:41:d3:d8:dd:5c:b3:24:b3:05:85:ff:b0: 76:c0:51:5e:0e:3b:ac:10:32:31:15:2e:bc:11:77:8e:88:20: 43:96:cf:13:d7:58:b4:00:c8:44:df:41:a2:31:47:bf:f6:e8: 92:82:2f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+F9tOZqPxgviEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MTY0YzdkZTAtNzQyYi00NDhhLWFjYjYtZjJlNzlkNDY3OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOAYm5DZK/+tQlOxNaviUH3qaDvfy7nE3Wve HTACq/W5m+pDc1SKBaprlBLRghGOeIX8sGg+jwPjQc46JPbWHvKqWcOPEvFwywlB gc9z9l4l6DC01QywvdlNEJpnhvTnf7aGQkcNmv9GC4c3u82/blabkxj84m/8W5pB dEhv27f7/h4c2+qW5Y1BFc44Xgp47RZIPrc+7A/MfWJ1XzkVVItJ0RcdhXMglylA S2Ni+xd6jsDtFSzTo4W8gAsxAp8aJ9YgNbQonjEYuyatc8A/uRhHBLEE1As38hG+ DNLLRTxP/JJjvymAKQ1BGt+T0jLax/jIUS5G5dCUkeo1f7kX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNgdixfMtWJ4FBbk07sXY7T0C1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmFmNWQ1NzctNmJhMi0z ZGFkLWFlODYtMDAwM2U1ZTc3MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQTFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJGAxeZETd5zwOjxc7464eABK6LebpAAPEzYjhgg8F+E2aoRDfrkgFJ WdACGaeriXq1IQLQF0/WoQeRQeI8WsxwC2q0/+Qm9KmnUXdLNt8TPGDrLCJDuuvY FmV/V63lq+hGcehCgTQ45/ETKAp2sB3viknHKTUF1mi7vKE9wjpPF26PCRjRK1x5 D2VE2hNmVS1rxTMKO/Tu2HXiOGSN618gsnNTdMmq+8AIOzk8typqGvt4un2B9mUT fGPKKnuIz/KTH/e/g7tPRqzeWkHT2N1csySzBYX/sHbAUV4OO6wQMjEVLrwRd46I IEOWzxPXWLQAyETfQaIxR7/26JKCL4E= -----END CERTIFICATE-----Generated at Fri Oct 24 04:31:02 2025 by rpki-client