$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa File: b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa (raw, json) Hash identifier: enp3OnpuqghblamF9a0b0oDNTLT4eKULaVOr0x435So= Subject key identifier: 36:42:35:2E:B1:A5:23:EE:91:F4:F0:80:D9:74:BD:FC:BA:E8:29:ED Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7BFFD24300A6F89323780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398576 IP address blocks: 209.51.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:bf:fd:24:30:0a:6f:89:32:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7ed141a2-2296-49b4-a293-3ca5ff671e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:2c:7b:d4:45:1e:ad:49:ec:ac:21:5c:75: c4:f2:f1:ff:cb:c2:88:49:4f:0b:76:5c:d5:7d:a0: 80:14:30:d9:5c:89:eb:cc:36:3a:35:d1:f7:41:1b: 0c:28:59:58:af:0b:7d:cb:e4:62:3d:29:67:34:a6: c3:c6:4d:d7:c7:fa:da:bd:85:8c:c6:a8:e7:32:8b: aa:ea:5a:c5:c6:9e:36:4e:72:e6:6e:61:ef:7a:17: f1:78:92:0f:2c:7a:3b:ad:4a:40:1f:07:8a:6d:ad: 8c:9e:f1:80:cc:99:33:29:5a:3c:40:46:d6:3c:37: 08:a0:5b:08:da:1b:55:3b:e1:87:33:a1:05:ea:15: 4d:d7:16:00:60:dd:6d:d0:38:ff:57:4d:cb:d8:8c: 8d:f9:c0:35:60:d0:78:b3:7c:08:2e:28:fe:c6:49: ce:be:ca:3c:3e:72:e3:b4:a7:4b:00:57:a5:bc:63: 39:0b:d2:47:0f:6f:54:44:f4:1d:25:7e:cb:fa:44: 32:cf:6a:aa:f5:b9:c9:0e:4a:6b:d3:f7:a8:68:bb: e9:f9:c9:3c:6a:d9:48:37:10:93:3a:9f:18:7d:d3: 9c:bc:39:56:a5:7f:5d:7a:2d:c9:90:9d:5b:b0:2f: 91:19:5a:53:3b:70:8a:7b:9e:97:ef:4b:a3:7b:70: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:35:2E:B1:A5:23:EE:91:F4:F0:80:D9:74:BD:FC:BA:E8:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a6:29:61:be:54:7a:62:3c:82:a3:00:e1:23:a0:59:a8:9f: 64:07:b4:4c:e0:8f:a1:0d:5a:05:ed:2e:85:9e:01:5a:9f:eb: a0:ec:dd:a3:e4:b8:aa:07:e5:c2:9a:58:61:01:d9:07:75:61: c8:85:3f:07:a0:60:d6:e8:7b:80:17:1c:49:20:aa:4d:14:6b: 13:0b:19:e4:d4:49:7d:e1:7b:05:97:b9:f7:df:63:69:4c:71: 24:3e:f6:13:31:09:66:21:f2:4b:2c:b6:e3:44:af:c3:e8:74: fb:b2:c1:67:80:36:f5:f5:b0:66:c5:11:e6:fd:f6:89:ca:26: f2:63:f4:17:e6:d1:02:18:1b:21:c2:4b:28:fb:d3:7b:e3:ba: 98:05:2f:40:09:18:e2:c6:25:9d:16:4d:da:cd:4c:4c:fd:30: e7:d7:dd:fe:03:b4:fe:14:c3:ff:65:88:bd:8d:57:6a:d9:cf: e9:da:a9:0f:e8:08:dc:ae:82:1b:5a:32:0b:28:3b:c9:15:fb: 9f:36:c3:f3:69:2b:7c:92:84:24:a9:99:4f:72:bb:f5:7e:09: 93:d7:7d:c7:0d:66:e0:71:64:70:79:7f:94:ea:5f:e7:84:12: 63:18:3b:85:6c:b5:27:be:81:22:c3:9a:05:d7:d1:f6:da:0f: 92:2c:f0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17/9JDAKb4kyN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk N2VkMTQxYTItMjI5Ni00OWI0LWEyOTMtM2NhNWZmNjcxZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dwse9RFHq1J7KwhXHXE8vH/y8KISU8LdlzV faCAFDDZXInrzDY6NdH3QRsMKFlYrwt9y+RiPSlnNKbDxk3Xx/ravYWMxqjnMouq 6lrFxp42TnLmbmHvehfxeJIPLHo7rUpAHweKba2MnvGAzJkzKVo8QEbWPDcIoFsI 2htVO+GHM6EF6hVN1xYAYN1t0Dj/V03L2IyN+cA1YNB4s3wILij+xknOvso8PnLj tKdLAFelvGM5C9JHD29URPQdJX7L+kQyz2qq9bnJDkpr0/eoaLvp+ck8atlINxCT Op8YfdOcvDlWpX9dei3JkJ1bsC+RGVpTO3CKe56X70uje3ALlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZCNS6xpSPukfTwgNl0vfy66CntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjViODUzZWYtOWE2Zi0z NzQyLWFiYzUtMzE0NTZlNzNlM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABimKWG+VHpiPIKjAOEjoFmon2QHtEzgj6ENWgXtLoWeAVqf66Ds3aPk uKoH5cKaWGEB2Qd1YciFPwegYNboe4AXHEkgqk0UaxMLGeTUSX3hewWXufffY2lM cSQ+9hMxCWYh8ksstuNEr8PodPuywWeANvX1sGbFEeb99onKJvJj9Bfm0QIYGyHC Syj703vjupgFL0AJGOLGJZ0WTdrNTEz9MOfX3f4DtP4Uw/9liL2NV2rZz+naqQ/o CNyughtaMgsoO8kV+582w/NpK3yShCSpmU9yu/V+CZPXfccNZuBxZHB5f5TqX+eE EmMYO4VstSe+gSLDmgXX0fbaD5Is8DI= -----END CERTIFICATE-----Generated at Wed Oct 29 09:10:33 2025 by rpki-client