$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18e4ba8-35de-3005-a800-388321442118.roa File: e18e4ba8-35de-3005-a800-388321442118.roa (raw, json) Hash identifier: +3WCSj0crNVpZP3bgxyc+waMJOS3OEbkS+NBCPC5m3w= Subject key identifier: CD:EB:95:E4:CC:1B:5B:43:DD:02:D1:DE:8C:1B:D4:D4:14:C3:8A:D6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B99D7C15812CFE95ED0BDEE40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18e4ba8-35de-3005-a800-388321442118.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 398576 IP address blocks: 216.66.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:c1:58:12:cf:e9:5e:d0:bd:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=44ef087e-ae9b-44a9-af83-15c4c8e0df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:5b:29:2c:e3:68:67:bb:ae:70:b5:b8:d4: 91:98:48:61:a0:08:60:f1:01:02:5b:84:06:d1:f7: 94:b4:d9:f5:1d:b9:4c:39:c8:bf:6d:f4:5a:59:4a: b1:9c:97:4d:84:47:35:ee:23:df:e8:ef:1b:33:f6: 0f:29:39:5a:5c:cc:15:dd:93:3d:e6:1e:11:09:eb: 01:21:a2:dc:1e:92:88:ff:d8:6b:a7:fb:3b:9a:7d: 24:b4:42:b7:12:34:dc:d7:d9:50:05:cd:4a:59:62: 69:9b:76:da:0f:ca:38:00:56:83:10:5c:22:e8:ce: 24:88:0f:71:42:94:cc:dd:b5:14:16:20:5b:8c:6d: 72:83:25:ea:64:32:ff:41:fc:aa:40:db:52:a7:19: 21:44:d7:2a:54:71:3c:44:f3:2e:2d:02:e6:eb:24: d9:b4:db:dd:36:d1:1d:6a:6a:9c:81:34:65:41:e1: 99:1d:12:21:8e:80:0a:74:8b:b5:d1:36:c3:2c:4c: 61:c7:40:57:7b:49:82:5d:05:37:da:3f:97:3a:83: c6:e3:ee:37:1b:0d:b8:37:71:7d:5a:96:fd:5a:e8: 2b:cc:32:ee:64:ec:1d:bd:5c:26:dc:20:e5:45:dc: 66:28:c4:cd:62:b8:ff:5e:56:8f:8f:d8:e6:e7:3b: f2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:95:E4:CC:1B:5B:43:DD:02:D1:DE:8C:1B:D4:D4:14:C3:8A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e18e4ba8-35de-3005-a800-388321442118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:dc:08:08:27:dc:70:2f:08:1c:a8:63:e6:a6:b9:ea:fa:2e: 7e:e0:83:5f:e9:62:38:39:35:f0:3f:8b:09:01:99:c7:23:3b: 35:9f:5d:3f:07:39:ee:08:b8:43:fa:68:fd:a4:ca:44:f4:78: 0b:6d:7c:af:18:72:72:12:03:fa:1d:ad:68:62:d9:5e:3d:66: 05:45:a1:bb:c5:9e:e9:cf:b3:5c:d7:11:75:58:51:cc:99:24: be:f4:73:c9:e6:c2:bf:ed:d4:29:fe:c6:90:96:8f:f8:a3:93: 69:90:92:2a:7a:c4:1d:3a:41:d5:bc:e8:58:c8:3a:32:72:90: 6f:12:bb:02:6d:5e:31:89:48:f3:f7:55:4b:4f:b4:cf:74:ba: 04:41:05:a8:da:d5:1b:f5:df:6c:df:73:cb:39:5c:7c:14:95: 2b:e2:1a:4d:74:07:9b:03:f7:1a:00:ab:9a:ad:81:c6:4a:9b: 0a:ed:9d:aa:8a:ab:b1:a5:f4:cf:a1:9b:3c:de:79:77:c4:95: 2b:11:ce:55:2d:fb:bc:3b:67:c4:9a:2f:d9:66:bf:2a:36:4c: ca:c4:b1:52:6c:c7:fd:ea:d2:c6:bb:68:a5:6f:e5:d3:a9:f6: 43:d4:48:ef:25:21:d1:43:1c:67:e7:45:b4:e5:2a:f4:ca:27: 51:e2:bb:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ18FYEs/pXtC97kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDRlZjA4N2UtYWU5Yi00NGE5LWFmODMtMTVjNGM4ZTBkZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptBbKSzjaGe7rnC1uNSRmEhhoAhg8QECW4QG 0feUtNn1HblMOci/bfRaWUqxnJdNhEc17iPf6O8bM/YPKTlaXMwV3ZM95h4RCesB IaLcHpKI/9hrp/s7mn0ktEK3EjTc19lQBc1KWWJpm3baD8o4AFaDEFwi6M4kiA9x QpTM3bUUFiBbjG1ygyXqZDL/QfyqQNtSpxkhRNcqVHE8RPMuLQLm6yTZtNvdNtEd amqcgTRlQeGZHRIhjoAKdIu10TbDLExhx0BXe0mCXQU32j+XOoPG4+43Gw24N3F9 Wpb9WugrzDLuZOwdvVwm3CDlRdxmKMTNYrj/XlaPj9jm5zvyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3rleTMG1tD3QLR3owb1NQUw4rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTE4ZTRiYTgtMzVkZS0z MDA1LWE4MDAtMzg4MzIxNDQyMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDcCAgn3HAvCByoY+amuer6Ln7gg1/pYjg5NfA/iwkBmccjOzWfXT8H Oe4IuEP6aP2kykT0eAttfK8YcnISA/odrWhi2V49ZgVFobvFnunPs1zXEXVYUcyZ JL70c8nmwr/t1Cn+xpCWj/ijk2mQkip6xB06QdW86FjIOjJykG8SuwJtXjGJSPP3 VUtPtM90ugRBBaja1Rv132zfc8s5XHwUlSviGk10B5sD9xoAq5qtgcZKmwrtnaqK q7Gl9M+hmzzeeXfElSsRzlUt+7w7Z8SaL9lmvyo2TMrEsVJsx/3q0sa7aKVv5dOp 9kPUSO8lIdFDHGfnRbTlKvTKJ1Hiuwg= -----END CERTIFICATE-----Generated at Wed Oct 29 09:14:37 2025 by rpki-client