$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bf5e969-ab08-35a8-8d46-555e4b531f92.roa File: 2bf5e969-ab08-35a8-8d46-555e4b531f92.roa (raw, json) Hash identifier: gmG4jxTikOpvlGFEb9AA5U8QXQVmFAgGPuz5XafN+6o= Subject key identifier: 8F:2F:5A:E6:D8:01:6D:82:60:A2:73:9B:02:E5:B1:4F:B7:D9:27:7C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C3ED75BE0BE5F8349100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bf5e969-ab08-35a8-8d46-555e4b531f92.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36286 IP address blocks: 66.160.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c3:ed:75:be:0b:e5:f8:34:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2d9c72b2-a1b2-4b9d-9cc1-0ce5bd85b0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:d5:d1:37:19:f1:6d:0a:d5:21:a8:43:40: 5b:d2:56:bf:6f:24:cf:fb:c7:65:a8:39:47:89:3c: 73:47:2b:8d:96:51:92:67:58:57:d8:2c:b4:ba:66: 60:a2:58:6b:84:c6:f1:3b:15:d3:f8:9f:8e:f7:9f: 15:08:42:01:50:68:e0:07:c9:a3:59:64:b9:bd:1e: d6:7c:39:57:cd:60:3d:d4:0e:85:20:18:35:7b:56: 31:48:2d:1c:17:09:d9:5e:8b:af:eb:49:6c:57:5d: 4e:3f:25:fc:0a:ee:97:52:0d:35:79:3c:15:ef:7b: d0:04:4b:99:e6:eb:26:8f:9e:21:4f:0a:6c:20:08: e7:af:a3:af:c4:3a:d1:6d:f1:89:e6:9a:dd:cc:28: 22:49:e3:28:df:df:a3:73:94:29:0e:7f:0f:0f:89: a5:45:67:a9:51:6c:fc:3b:e0:d6:93:80:70:ac:95: ef:a7:4b:82:27:aa:fd:f9:dc:7c:f5:d9:01:6e:c1: dc:d4:69:02:f9:66:ac:47:78:cc:1d:42:c6:f9:e0: 56:5d:67:2a:07:b1:1c:84:60:e3:62:b3:c9:3b:84: f9:e0:e9:95:5c:a3:e1:a3:fc:ce:c1:e1:f7:a8:0f: d8:72:0a:54:0e:09:45:ff:b2:dc:8b:6a:2a:cb:28: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2F:5A:E6:D8:01:6D:82:60:A2:73:9B:02:E5:B1:4F:B7:D9:27:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2bf5e969-ab08-35a8-8d46-555e4b531f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:98:67:d1:54:2a:ac:df:e4:1d:f5:34:87:64:78:be:93:6b: ea:15:89:7a:eb:54:22:80:32:e7:9d:18:a2:f5:58:81:91:eb: 02:79:df:ed:c4:21:65:b4:32:cf:bf:53:f7:de:8c:5b:5f:83: 84:71:02:b9:ec:7a:a2:d0:e7:83:85:05:2a:34:ad:ec:ce:55: 79:7e:ac:c3:9d:67:c3:03:c1:87:15:23:ee:17:33:fc:6e:34: c4:f1:0b:78:7c:53:bf:0f:21:f2:46:a5:d5:36:0d:52:57:5b: 40:70:17:91:ed:19:3f:27:ff:bb:8e:73:50:9b:82:63:60:a2: 28:a4:36:7e:67:1c:92:29:37:e4:e6:b3:bd:77:e3:7f:89:05: ee:41:b8:22:ef:24:95:72:57:2f:42:9f:43:63:7c:21:e3:14: 93:24:9f:6b:ad:3b:1b:a7:90:25:ad:e9:9a:e9:38:2e:d9:43: 96:86:72:20:0f:e0:c7:3c:04:8d:d2:2d:96:85:0b:a1:7b:3b: 5b:ba:83:b2:38:6a:b2:1f:74:b4:f9:f0:bb:6e:85:f2:fb:db: 67:1f:eb:9c:ab:82:db:0f:79:86:20:3d:71:aa:fb:70:91:24: 59:ac:2a:1c:71:4c:6d:cd:83:c1:a8:75:80:46:be:1f:14:cd: a0:e1:62:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ18Ptdb4L5fg0kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmQ5YzcyYjItYTFiMi00YjlkLTljYzEtMGNlNWJkODViMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip7V0TcZ8W0K1SGoQ0Bb0la/byTP+8dlqDlH iTxzRyuNllGSZ1hX2Cy0umZgolhrhMbxOxXT+J+O958VCEIBUGjgB8mjWWS5vR7W fDlXzWA91A6FIBg1e1YxSC0cFwnZXouv60lsV11OPyX8Cu6XUg01eTwV73vQBEuZ 5usmj54hTwpsIAjnr6OvxDrRbfGJ5prdzCgiSeMo39+jc5QpDn8PD4mlRWepUWz8 O+DWk4BwrJXvp0uCJ6r9+dx89dkBbsHc1GkC+WasR3jMHULG+eBWXWcqB7EchGDj YrPJO4T54OmVXKPho/zOweH3qA/YcgpUDglF/7Lci2oqyyg18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8vWubYAW2CYKJzmwLlsU+32Sd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmJmNWU5NjktYWIwOC0z NWE4LThkNDYtNTU1ZTRiNTMxZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmYZ9FUKqzf5B31NIdkeL6Ta+oViXrrVCKAMuedGKL1WIGR6wJ53+3E IWW0Ms+/U/fejFtfg4RxArnseqLQ54OFBSo0rezOVXl+rMOdZ8MDwYcVI+4XM/xu NMTxC3h8U78PIfJGpdU2DVJXW0BwF5HtGT8n/7uOc1CbgmNgoiikNn5nHJIpN+Tm s71343+JBe5BuCLvJJVyVy9Cn0NjfCHjFJMkn2utOxunkCWt6ZrpOC7ZQ5aGciAP 4Mc8BI3SLZaFC6F7O1u6g7I4arIfdLT58LtuhfL722cf65yrgtsPeYYgPXGq+3CR JFmsKhxxTG3Ng8GodYBGvh8UzaDhYmE= -----END CERTIFICATE-----Generated at Wed Oct 22 17:56:41 2025 by rpki-client