$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa File: df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa (raw, json) Hash identifier: nCDPT6FBNOaKtuP2Mh3ZNnrKc3sE+ODpKCOFDwLNCAo= Subject key identifier: EE:85:CC:F8:2A:FF:9E:E5:10:1F:33:10:A9:74:C9:F3:70:B0:6F:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7EB252C13458248D3E400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22168 IP address blocks: 65.49.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:eb:25:2c:13:45:82:48:d3:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fc9e5cc2-2933-4e57-b0b3-bea5852649f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:05:b5:83:e1:65:09:82:65:c5:b1:43:14: 61:10:b2:b8:64:8a:52:a4:35:e3:50:45:de:b1:84: a8:1f:b0:b1:b8:8b:0e:07:03:b1:23:a0:3b:a8:76: 07:ba:3f:b0:92:97:ae:e7:77:61:44:2a:00:2e:bf: f7:b3:fd:d7:21:ff:cd:d0:7b:84:bb:5c:8b:39:e5: 23:19:fc:d8:aa:f8:ae:a4:51:b8:4e:0b:00:97:8f: ec:a8:89:0a:7c:4d:93:f9:62:42:5d:3e:05:a5:ca: 86:09:5c:eb:05:b6:af:ed:8c:e1:f6:64:e2:78:43: 29:d1:d1:5a:28:39:e6:24:b4:e2:43:5c:4f:6f:83: 44:6b:6b:97:3c:91:51:67:41:fa:b5:ec:4c:c4:d8: 8b:fd:a6:0b:e2:ad:22:d9:b9:86:76:3b:5d:1c:1e: 00:e0:46:e4:3f:0b:54:46:93:fd:f8:39:aa:e2:cb: 15:ea:e9:3d:9d:40:82:21:46:4c:cf:e6:3a:db:bf: 0d:12:8f:53:ec:d9:82:a4:a7:cc:7c:cd:46:f5:ed: 3e:b5:66:4b:1e:21:f0:c2:14:c4:26:5f:57:f2:66: 62:40:b3:4a:f7:39:2e:b3:42:86:14:64:62:df:70: 9d:d8:e4:f0:63:d5:e8:8d:56:e7:05:1e:02:a1:ab: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:CC:F8:2A:FF:9E:E5:10:1F:33:10:A9:74:C9:F3:70:B0:6F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f0:43:89:d8:fa:9e:67:81:71:e5:25:15:9c:5a:53:e7:54: 00:1f:22:cb:50:ce:ec:64:74:05:7c:a3:eb:79:20:0d:5c:5a: e9:8f:9e:b7:a5:2e:d2:31:49:66:b3:62:72:bb:8c:34:d5:d2: 12:dd:68:6e:f1:c5:2c:14:f0:70:76:d8:35:8b:52:cd:84:bf: 22:fe:8a:70:20:f0:9b:ff:53:eb:75:89:8f:83:f7:67:9d:d3: 73:d9:80:bd:c7:c7:c4:58:70:f4:22:a9:3a:75:89:b4:6f:ca: 43:6c:f9:d3:d7:2c:32:84:c3:43:19:28:b9:f3:9c:e8:63:8d: a2:e8:f6:94:b5:6a:96:ca:0a:64:e8:1c:e9:12:e7:cd:42:7f: e6:c7:75:61:f9:dc:dd:9e:4e:73:ca:9d:98:47:42:58:16:4a: c3:cc:37:2b:f4:a8:8a:63:dd:ba:52:36:22:cc:be:05:b9:e4: e0:f9:74:88:c8:7e:fe:13:04:09:36:b7:93:46:8e:79:24:12: 38:49:72:7a:c6:e1:8d:92:9f:a5:22:15:9c:c9:c2:46:ed:6d: 06:25:96:5f:58:b8:b7:e7:55:51:d4:05:3c:42:1d:ef:d9:be: 61:da:48:54:75:c6:75:16:59:04:8c:a3:1e:da:67:d4:c1:80: 25:1c:7b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1+slLBNFgkjT5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmM5ZTVjYzItMjkzMy00ZTU3LWIwYjMtYmVhNTg1MjY0OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uYFtYPhZQmCZcWxQxRhELK4ZIpSpDXjUEXe sYSoH7CxuIsOBwOxI6A7qHYHuj+wkpeu53dhRCoALr/3s/3XIf/N0HuEu1yLOeUj GfzYqviupFG4TgsAl4/sqIkKfE2T+WJCXT4FpcqGCVzrBbav7Yzh9mTieEMp0dFa KDnmJLTiQ1xPb4NEa2uXPJFRZ0H6texMxNiL/aYL4q0i2bmGdjtdHB4A4EbkPwtU RpP9+Dmq4ssV6uk9nUCCIUZMz+Y6278NEo9T7NmCpKfMfM1G9e0+tWZLHiHwwhTE Jl9X8mZiQLNK9zkus0KGFGRi33Cd2OTwY9XojVbnBR4CoauKBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6FzPgq/57lEB8zEKl0yfNwsG/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY4MTM0MGUtMGIwNC0z ZThmLWI4ZDYtNGJmMGVmZTM2NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHwQ4nY+p5ngXHlJRWcWlPnVAAfIstQzuxkdAV8o+t5IA1cWumPnrel LtIxSWazYnK7jDTV0hLdaG7xxSwU8HB22DWLUs2EvyL+inAg8Jv/U+t1iY+D92ed 03PZgL3Hx8RYcPQiqTp1ibRvykNs+dPXLDKEw0MZKLnznOhjjaLo9pS1apbKCmTo HOkS581Cf+bHdWH53N2eTnPKnZhHQlgWSsPMNyv0qIpj3bpSNiLMvgW55OD5dIjI fv4TBAk2t5NGjnkkEjhJcnrG4Y2Sn6UiFZzJwkbtbQYlll9YuLfnVVHUBTxCHe/Z vmHaSFR1xnUWWQSMox7aZ9TBgCUce+E= -----END CERTIFICATE-----Generated at Tue Nov 4 03:59:06 2025 by rpki-client