$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa File: d88a912e-dbfe-3d36-b104-8cc39e60b039.roa (raw, json) Hash identifier: a2e92MB3ULix14+wDKu2cyRr3gkhe07iD/aAK1vBQBs= Subject key identifier: 4D:1F:C0:91:6A:2A:67:6B:10:6D:88:D2:57:D2:07:0D:92:02:5A:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EAB12319C216953A1940 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22369 IP address blocks: 66.160.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ea:b1:23:19:c2:16:95:3a:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4e3ea78d-d793-402e-87c1-5f506ca90802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:52:2d:a9:78:12:47:7e:14:43:c5:dd:35: a3:49:cd:6f:d7:a2:bc:3a:f5:60:5f:53:64:14:ea: 9e:5e:ee:0e:4e:e2:5b:76:e2:95:e2:5b:b2:d3:5c: 3e:7f:66:15:b1:b7:0e:d5:a9:aa:6a:72:5c:cf:2c: e6:a3:60:a5:9b:b5:f8:b8:43:b5:8e:94:c8:65:6c: 89:f7:16:20:8b:19:2f:e1:f2:8f:1b:5e:0d:e9:cb: f0:eb:32:52:ed:79:76:6c:fc:e4:8d:31:51:27:b7: 47:59:41:44:1a:53:20:18:13:cb:90:b8:14:33:5a: 78:21:7d:f1:2e:b3:2e:6d:e3:79:6e:bd:9f:92:49: 0c:26:a2:9c:69:af:d2:20:e3:b7:af:7c:a2:4b:fc: fd:26:27:41:10:43:60:f2:32:16:a5:0a:af:15:f4: a2:f8:39:e1:26:c9:35:6e:76:59:b5:e9:21:55:9e: 74:a4:93:11:8a:5b:6a:3e:aa:06:36:51:04:b9:b1: c5:69:f9:57:45:dc:6c:32:20:bf:ac:8f:92:fe:dd: 0c:38:a8:d1:7e:aa:43:2a:15:48:51:c6:da:fc:76: b9:c5:55:71:89:f5:3f:7b:55:87:9b:a0:f6:5d:0a: ba:22:c3:3a:ac:6a:61:89:2f:62:d1:26:4a:6a:44: 99:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:C0:91:6A:2A:67:6B:10:6D:88:D2:57:D2:07:0D:92:02:5A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d88a912e-dbfe-3d36-b104-8cc39e60b039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:e3:37:62:de:70:23:ad:b5:dd:cd:b2:af:24:01:be:41:a7: 2d:d4:a4:78:94:d2:5e:1a:f4:36:47:2d:8b:d0:16:04:55:f6: 4e:1a:87:39:ba:d2:96:ce:33:28:9f:79:42:02:0e:ed:00:fe: 9c:d3:52:fb:39:51:8f:a0:4e:d9:bc:88:7c:6c:58:60:ad:50: 90:0b:b8:47:40:bb:4f:e4:aa:c8:c0:a2:92:00:cb:bc:d7:5e: 00:97:d3:6a:54:df:4d:a5:af:90:7f:8a:a3:3d:34:8e:b8:5b: 2c:5b:1d:ce:4a:a0:49:e4:fa:67:ec:11:38:cb:f9:68:45:ea: 3c:e6:73:df:0a:7b:66:2e:b3:de:ce:55:5e:14:12:d3:99:77: e4:d8:3d:28:41:fd:7b:1c:e8:c0:b5:37:8c:ce:78:d3:b7:ac: da:ef:04:f0:6d:11:5f:b2:f7:11:4c:fa:bb:66:ee:e6:43:12: c3:4a:87:c7:d4:55:e3:4e:12:a2:90:be:07:bb:f4:5f:54:79: 0f:b5:ec:21:4b:1c:a4:14:1b:be:db:ba:3b:f2:a3:c0:90:d2: ab:d4:ad:7e:bb:f9:d0:41:dd:c2:db:7a:c1:09:35:bc:61:4a: 45:80:95:69:f8:c3:e7:b2:e8:27:37:49:98:7f:c0:63:5c:bc: e2:be:0a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+qxIxnCFpU6GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NGUzZWE3OGQtZDc5My00MDJlLTg3YzEtNWY1MDZjYTkwODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m1SLal4Ekd+FEPF3TWjSc1v16K8OvVgX1Nk FOqeXu4OTuJbduKV4luy01w+f2YVsbcO1amqanJczyzmo2Clm7X4uEO1jpTIZWyJ 9xYgixkv4fKPG14N6cvw6zJS7Xl2bPzkjTFRJ7dHWUFEGlMgGBPLkLgUM1p4IX3x LrMubeN5br2fkkkMJqKcaa/SIOO3r3yiS/z9JidBEENg8jIWpQqvFfSi+DnhJsk1 bnZZtekhVZ50pJMRiltqPqoGNlEEubHFaflXRdxsMiC/rI+S/t0MOKjRfqpDKhVI Ucba/Ha5xVVxifU/e1WHm6D2XQq6IsM6rGphiS9i0SZKakSZOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0fwJFqKmdrEG2I0lfSBw2SAlrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDg4YTkxMmUtZGJmZS0z ZDM2LWIxMDQtOGNjMzllNjBiMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqCrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7jN2LecCOttd3Nsq8kAb5Bpy3UpHiU0l4a9DZHLYvQFgRV9k4ahzm6 0pbOMyifeUICDu0A/pzTUvs5UY+gTtm8iHxsWGCtUJALuEdAu0/kqsjAopIAy7zX XgCX02pU302lr5B/iqM9NI64WyxbHc5KoEnk+mfsETjL+WhF6jzmc98Ke2Yus97O VV4UEtOZd+TYPShB/Xsc6MC1N4zOeNO3rNrvBPBtEV+y9xFM+rtm7uZDEsNKh8fU VeNOEqKQvge79F9UeQ+17CFLHKQUG77bujvyo8CQ0qvUrX67+dBB3cLbesEJNbxh SkWAlWn4w+ey6Cc3SZh/wGNcvOK+Ch0= -----END CERTIFICATE-----Generated at Wed Oct 22 10:44:05 2025 by rpki-client