$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa File: 3efa705f-91fa-31b8-b37a-2e64bf636213.roa (raw, json) Hash identifier: aQ3sbJUD4EuFRQd3F9fcrNyPWX+Jq0xqJvipMj93YNU= Subject key identifier: A7:4E:52:AD:36:83:FB:3E:20:0C:7E:39:2C:8E:CA:BC:A9:17:ED:40 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BF655DFB74CF41CD2100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395880 IP address blocks: 209.51.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:65:5d:fb:74:cf:41:cd:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=f5ce383a-2fab-43d7-a9ea-4fdfc85586e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:22:e4:4e:11:d8:2c:04:1c:06:2f:dd:82:11: 7e:92:65:02:9b:45:f9:c5:ab:e4:8f:82:72:ba:03: aa:ca:32:ab:d3:10:8e:12:50:60:12:fc:a1:58:72: 74:66:40:a8:6d:f6:44:9f:aa:13:a2:96:27:8f:f7: a5:eb:f1:8a:0d:bd:d5:c1:10:fa:1d:a3:97:1f:0b: 2c:55:8b:4c:90:a7:8d:7b:66:90:c5:7a:79:73:84: 45:10:05:5e:82:ed:da:8c:94:80:03:72:c5:37:73: 8f:b8:d9:03:1f:56:0a:f0:05:4d:6b:0b:54:d1:4f: a4:0f:a0:64:6c:a7:56:7a:65:cb:1a:fb:b1:ff:a2: a8:38:fe:ac:e5:3d:67:a6:7e:95:31:47:6a:44:53: 51:7b:ab:d3:e4:2c:3d:d9:7e:64:51:69:a9:69:f7: 43:ad:ec:bf:b2:57:65:32:54:d1:15:c0:ff:46:95: a2:27:9a:c5:c2:06:3d:34:ff:46:30:ba:d0:c3:a8: c0:c8:2d:35:42:60:c3:c3:7d:f9:ad:09:bd:84:5e: 87:ff:84:bf:7c:47:ef:0f:4f:ca:d7:e3:c1:d4:18: df:30:b4:d3:a4:bd:bc:0c:0a:56:92:d0:83:77:34: 40:be:8c:14:8e:fc:38:1e:fb:63:7c:63:9c:03:42: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:52:AD:36:83:FB:3E:20:0C:7E:39:2C:8E:CA:BC:A9:17:ED:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3efa705f-91fa-31b8-b37a-2e64bf636213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e6:92:35:42:46:f8:0b:cb:9f:ae:14:fa:bc:9a:6e:b3:69: 6e:60:8c:eb:01:4b:1c:5b:4c:8f:aa:d0:19:6d:a8:9e:91:18: be:0e:8c:8b:7b:bf:c2:6d:23:83:ad:96:7c:c3:17:f7:db:0a: 30:e3:77:6a:92:a3:31:7b:54:27:6e:7b:4c:b6:ce:bd:74:bf: fe:a9:ac:79:3a:6d:93:ac:42:46:ef:da:91:a4:7f:e1:02:ac: 7c:c4:ba:c1:0f:ea:2d:94:f5:6b:50:15:c7:6f:2f:f8:85:f6: 96:ff:c0:a2:31:49:17:23:02:ef:2a:c9:15:c4:35:2a:a7:33: ab:7c:51:af:58:93:43:9c:82:83:ee:5f:53:5b:93:fb:c3:df: 49:2b:1a:dd:8f:87:96:b6:79:2a:10:ff:b4:64:7a:c1:a7:8b: 45:c3:e8:eb:d4:d6:f8:c0:46:fb:1d:2a:5e:0f:5a:64:41:85: 80:4f:fb:9e:4d:40:14:10:e4:04:cd:fa:cc:32:c9:47:91:f0: 74:e3:4e:e5:d6:4d:35:f7:69:3c:5d:84:40:2f:72:71:bc:e2: 41:9c:a7:a9:63:4d:ab:fa:ac:22:b3:80:42:5d:57:08:f8:32: 51:fe:08:67:99:85:8b:92:7f:b9:d0:d6:2d:80:55:4d:74:0f: 2e:4d:24:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ179lXft0z0HNIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZjVjZTM4M2EtMmZhYi00M2Q3LWE5ZWEtNGZkZmM4NTU4NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yLkThHYLAQcBi/dghF+kmUCm0X5xavkj4Jy ugOqyjKr0xCOElBgEvyhWHJ0ZkCobfZEn6oTopYnj/el6/GKDb3VwRD6HaOXHwss VYtMkKeNe2aQxXp5c4RFEAVegu3ajJSAA3LFN3OPuNkDH1YK8AVNawtU0U+kD6Bk bKdWemXLGvux/6KoOP6s5T1npn6VMUdqRFNRe6vT5Cw92X5kUWmpafdDrey/sldl MlTRFcD/RpWiJ5rFwgY9NP9GMLrQw6jAyC01QmDDw335rQm9hF6H/4S/fEfvD0/K 1+PB1BjfMLTTpL28DApWktCDdzRAvowUjvw4HvtjfGOcA0I3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdOUq02g/s+IAx+OSyOyrypF+1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VmYTcwNWYtOTFmYS0z MWI4LWIzN2EtMmU2NGJmNjM2MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTmkjVCRvgLy5+uFPq8mm6zaW5gjOsBSxxbTI+q0BltqJ6RGL4OjIt7 v8JtI4OtlnzDF/fbCjDjd2qSozF7VCdue0y2zr10v/6prHk6bZOsQkbv2pGkf+EC rHzEusEP6i2U9WtQFcdvL/iF9pb/wKIxSRcjAu8qyRXENSqnM6t8Ua9Yk0OcgoPu X1Nbk/vD30krGt2Ph5a2eSoQ/7RkesGni0XD6OvU1vjARvsdKl4PWmRBhYBP+55N QBQQ5ATN+swyyUeR8HTjTuXWTTX3aTxdhEAvcnG84kGcp6ljTav6rCKzgEJdVwj4 MlH+CGeZhYuSf7nQ1i2AVU10Dy5NJPc= -----END CERTIFICATE-----Generated at Sat Nov 1 00:55:46 2025 by rpki-client