$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa File: a854a339-946b-37a9-aece-f00e7f2492da.roa (raw, json) Hash identifier: Pi/aTcfBI98GO/+hdvr5kRvkQLtZzvUWm8QwbM304Ek= Subject key identifier: 30:45:33:A2:30:35:37:E3:89:2B:7D:EA:8F:4B:70:AC:92:68:58:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584B7B21FF9A9E844AD975F0E100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 214315 IP address blocks: 216.66.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:ff:9a:9e:84:4a:d9:75:f0:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=6a3b1ba8-ac0c-4d66-9f12-b73c1e94b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:00:06:48:bd:39:9e:ba:b4:4b:08:17:8b: 74:05:ac:55:8c:2f:66:da:b9:9a:17:d1:ad:8a:1f: 85:16:91:7e:37:0d:47:0d:ee:02:fb:e7:85:6e:c6: fb:89:39:91:3c:55:93:79:af:a6:49:9a:e6:74:9a: 98:86:9e:0d:84:90:9a:66:fd:71:41:ac:e7:f6:b1: bc:8a:e3:01:71:b3:30:dd:7d:43:00:94:b4:7c:0c: 81:f4:ac:73:e0:a2:12:47:a1:d6:0f:ec:0e:d9:7d: 94:aa:ee:3b:cc:e9:2f:76:ec:a0:62:d6:8e:72:a6: 6c:a5:4a:18:b7:f8:76:f2:ba:f9:6e:3c:43:f9:20: fe:09:14:c1:9c:6f:b1:ae:63:43:23:99:77:81:7e: b8:20:a4:88:07:63:11:ca:7c:26:7e:fb:1c:73:c6: 44:b0:c5:6e:5d:ca:14:14:6a:5c:44:8f:21:00:73: 5e:a1:65:a5:14:0a:60:7f:01:35:ce:dd:31:a3:c2: 5a:f5:79:95:3d:09:26:88:96:05:5f:f2:de:fa:99: 5b:8d:bd:84:a9:9f:7d:22:c5:ad:7a:85:22:a5:64: ea:06:82:90:d9:8d:7f:46:51:de:c9:a9:4c:b8:d7: 44:d1:6e:1a:45:ad:33:2e:fe:ee:18:70:70:d2:35: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:45:33:A2:30:35:37:E3:89:2B:7D:EA:8F:4B:70:AC:92:68:58:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b2:0f:61:88:e3:e8:05:f0:48:8b:da:79:88:51:15:c5:32: b0:d2:8f:8f:79:35:f4:b9:d6:f8:6d:ec:91:de:08:35:fe:2e: 42:af:99:b9:31:35:9e:e4:1c:16:75:21:2b:a5:8e:98:86:1e: 6a:0e:28:21:cc:a5:f1:ec:7d:44:4d:31:94:12:f6:8b:e8:c6: 95:22:5b:9b:c7:20:1a:12:05:61:23:5d:2c:ef:79:82:6e:90: a4:df:c5:fc:d0:d7:a0:68:38:2a:05:a0:f5:a4:41:a2:b7:e6: 51:a3:45:07:40:1e:1f:fc:f9:a1:6c:21:7b:28:98:bd:db:c4: 48:9f:40:04:14:90:61:74:64:39:66:c9:0a:20:70:cc:74:e5: d7:ca:a9:e8:ef:fa:0c:b2:64:27:99:a1:65:ae:90:a8:f7:34: 2a:ad:55:61:ca:47:22:44:8d:45:46:b3:eb:86:df:1f:be:7d: c3:f7:bc:53:b2:a2:bf:fb:b6:fa:b1:21:ae:9a:98:37:08:18: 89:b2:a0:2b:6b:90:56:56:13:44:dc:a4:44:73:6d:1f:a4:5c: c2:5b:1b:11:4e:35:fc:4a:1f:2e:c7:b1:45:2c:23:66:fc:fc: c6:f0:f4:bc:00:8b:47:1e:84:11:42:51:f8:6a:da:b8:3b:fc: 27:f4:4e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If+anoRK2XXw4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NmEzYjFiYTgtYWMwYy00ZDY2LTlmMTItYjczYzFlOTRiNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ckABki9OZ66tEsIF4t0BaxVjC9m2rmaF9Gt ih+FFpF+Nw1HDe4C++eFbsb7iTmRPFWTea+mSZrmdJqYhp4NhJCaZv1xQazn9rG8 iuMBcbMw3X1DAJS0fAyB9Kxz4KISR6HWD+wO2X2Uqu47zOkvduygYtaOcqZspUoY t/h28rr5bjxD+SD+CRTBnG+xrmNDI5l3gX64IKSIB2MRynwmfvscc8ZEsMVuXcoU FGpcRI8hAHNeoWWlFApgfwE1zt0xo8Ja9XmVPQkmiJYFX/Le+plbjb2EqZ99IsWt eoUipWTqBoKQ2Y1/RlHeyalMuNdE0W4aRa0zLv7uGHBw0jXfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBFM6IwNTfjiSt96o9LcKySaFhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTg1NGEzMzktOTQ2Yi0z N2E5LWFlY2UtZjAwZTdmMjQ5MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeyD2GI4+gF8EiL2nmIURXFMrDSj495NfS51vht7JHeCDX+LkKvmbkx NZ7kHBZ1ISuljpiGHmoOKCHMpfHsfURNMZQS9ovoxpUiW5vHIBoSBWEjXSzveYJu kKTfxfzQ16BoOCoFoPWkQaK35lGjRQdAHh/8+aFsIXsomL3bxEifQAQUkGF0ZDlm yQogcMx05dfKqejv+gyyZCeZoWWukKj3NCqtVWHKRyJEjUVGs+uG3x++fcP3vFOy or/7tvqxIa6amDcIGImyoCtrkFZWE0TcpERzbR+kXMJbGxFONfxKHy7HsUUsI2b8 /Mbw9LwAi0cehBFCUfhq2rg7/Cf0Tkk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:51 2025 by rpki-client