$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa File: b33af0fc-e9a0-358c-8666-2e266d81251f.roa (raw, json) Hash identifier: 2hmY1Tzj9Fmxw0LFdYgPZBIGFiqX2Vv3EfA99n1H/AA= Subject key identifier: FF:F4:32:CE:BA:7C:F8:A1:B7:80:12:60:51:11:55:26:98:4A:72:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AF7EBE21CC5ABFDDCC80672D2 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 6939 IP address blocks: 216.66.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e2:1c:c5:ab:fd:dc:c8:06:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=57282fd6-7bfc-4c42-9fdf-91f60d2ecf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a4:15:59:47:a8:8e:3e:74:8d:dc:5c:ca:a5: 25:65:1b:26:cb:be:99:06:14:36:27:17:2b:87:74: 16:ab:a5:6c:4f:74:a4:10:4b:85:6e:2f:e3:52:16: 74:68:a3:ce:30:34:2f:a2:55:f1:d7:94:55:e6:a5: d1:3e:ec:f9:9f:a6:f0:73:91:2b:12:a0:57:df:fe: 07:1a:e6:9d:e5:2b:db:8e:57:3f:2e:ff:51:38:7e: 56:47:fb:2e:64:b0:d3:46:74:5a:a7:73:4f:99:c0: 8d:ef:57:38:cd:ad:3b:b1:c7:50:48:eb:d7:0b:e6: 2c:f3:70:29:a2:98:16:d8:92:b3:80:1b:2f:df:b2: cc:95:d4:e1:4d:91:91:32:10:49:eb:dc:f5:55:18: 34:de:46:40:ce:5c:fb:e7:dc:37:da:65:ff:e7:ef: 02:ce:b1:28:ca:ed:18:7f:21:37:93:19:d1:5a:26: 26:3e:86:ff:c7:9f:36:42:69:43:f6:4d:85:34:00: 60:5b:69:dc:d9:b8:b1:e5:ea:75:6b:11:a7:1f:5d: 39:ec:9a:49:d8:e8:80:70:d5:c7:b1:40:b1:7a:12: f2:d9:6e:c2:8c:16:23:e5:a7:82:be:b5:d3:30:bf: 27:d2:be:b7:36:dc:e5:d2:57:a8:e9:28:e3:00:6b: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:32:CE:BA:7C:F8:A1:B7:80:12:60:51:11:55:26:98:4A:72:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:58:e4:99:99:69:02:f5:21:8a:26:32:a9:7c:3a:82:b8:5f: 4e:23:a6:e3:33:30:ad:3e:cc:d7:41:b6:12:6d:e8:94:c6:13: 7a:7a:3f:bf:3d:98:68:57:d8:24:62:a6:bd:02:9f:40:58:a5: 59:10:09:66:c7:c7:d4:d3:23:38:9d:97:c8:41:81:c7:27:41: b8:d8:cf:1d:dc:9b:a5:89:a4:98:16:88:8e:52:cf:19:eb:5b: b2:77:52:b0:a4:de:42:b7:cd:5c:20:b9:2e:5e:c8:f7:1b:65: 7a:b3:08:ec:e8:04:f9:d0:3c:d6:4d:b4:91:ce:9a:a2:8f:0b: 30:4d:df:d4:a0:fa:88:76:60:60:1b:7d:4d:0c:f6:8c:d2:87: 85:ab:0f:40:f5:bb:1a:f4:7c:91:5e:bd:17:ea:b2:47:cc:5b: 4b:32:cb:4c:5a:73:37:2f:6d:02:d2:60:fe:66:eb:5a:4b:f6: 37:ef:6d:62:92:cd:1c:51:4e:ea:59:72:a1:4f:7e:73:2b:ac: 2d:15:4c:1d:7a:4b:7b:da:57:20:ed:0d:67:39:5e:31:8b:e3: 27:35:a5:b6:eb:53:2d:5b:11:a1:ba:e9:69:96:8f:78:ff:10: 60:df:73:46:19:d2:85:e2:d4:f9:b3:07:55:64:a9:07:57:5f: dd:32:b7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+Icxav93MgGctIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NTcyODJmZDYtN2JmYy00YzQyLTlmZGYtOTFmNjBkMmVjZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aQVWUeojj50jdxcyqUlZRsmy76ZBhQ2Jxcr h3QWq6VsT3SkEEuFbi/jUhZ0aKPOMDQvolXx15RV5qXRPuz5n6bwc5ErEqBX3/4H Guad5Svbjlc/Lv9ROH5WR/suZLDTRnRap3NPmcCN71c4za07scdQSOvXC+Ys83Ap opgW2JKzgBsv37LMldThTZGRMhBJ69z1VRg03kZAzlz759w32mX/5+8CzrEoyu0Y fyE3kxnRWiYmPob/x582QmlD9k2FNABgW2nc2bix5ep1axGnH1057JpJ2OiAcNXH sUCxehLy2W7CjBYj5aeCvrXTML8n0r63Ntzl0leo6SjjAGs6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/0Ms66fPiht4ASYFERVSaYSnKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjMzYWYwZmMtZTlhMC0z NThjLTg2NjYtMmUyNjZkODEyNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2EIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFY5JmZaQL1IYomMql8OoK4X04jpuMzMK0+zNdBthJt6JTGE3p6P789 mGhX2CRipr0Cn0BYpVkQCWbHx9TTIzidl8hBgccnQbjYzx3cm6WJpJgWiI5Szxnr W7J3UrCk3kK3zVwguS5eyPcbZXqzCOzoBPnQPNZNtJHOmqKPCzBN39Sg+oh2YGAb fU0M9ozSh4WrD0D1uxr0fJFevRfqskfMW0syy0xaczcvbQLSYP5m61pL9jfvbWKS zRxRTupZcqFPfnMrrC0VTB16S3vaVyDtDWc5XjGL4yc1pbbrUy1bEaG66WmWj3j/ EGDfc0YZ0oXi1PmzB1VkqQdXX90yt+k= -----END CERTIFICATE-----Generated at Tue Sep 16 17:23:21 2025 by rpki-client