$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/2958cab3-51ed-3091-ab1c-f8e181ffa3d2.roa File: 2958cab3-51ed-3091-ab1c-f8e181ffa3d2.roa (raw, json) Hash identifier: M+fy2r2jfsmtDfWckWa0zmK67wHNAWxgZzu3Cm8qbbE= Subject key identifier: 6B:96:5C:53:07:86:33:D6:43:94:B6:77:C7:A5:12:5E:F7:FE:A9:BB Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584F97E09F2F7981FBA4B88BC280 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/2958cab3-51ed-3091-ab1c-f8e181ffa3d2.roa Signing time: Fri 23 Oct 2026 03:15:06 +0000 ROA not before: Fri 23 Oct 2026 03:15:06 +0000 ROA not after: Thu 21 Jan 2027 04:15:06 +0000 asID: 11696 IP address blocks: 69.24.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:e0:9f:2f:79:81:fb:a4:b8:8b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 23 03:15:06 2026 GMT Not After : Jan 21 04:15:06 2027 GMT Subject: CN=50214ccc-f12a-4b2f-a692-cd8fffe0b7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:39:57:92:d4:26:a4:9c:05:c6:f4:fd:a0: 0e:f2:f9:fd:8c:18:37:90:1b:fc:59:b7:7a:7c:9e: b2:18:6d:aa:33:92:af:46:b8:f2:a7:19:db:f3:83: 95:17:1e:87:aa:e9:80:df:c0:23:02:10:3e:f7:fa: b1:cc:d8:cf:77:e4:37:e1:53:4c:9d:b2:5a:0a:65: 57:f6:06:61:da:e7:85:d8:4c:6f:85:ae:f1:40:47: c7:09:ac:92:b5:7e:08:be:d8:24:ae:9c:8d:39:d3: af:19:0e:d5:c2:d2:88:c8:2f:ac:b4:94:e8:24:1f: bc:53:1b:af:04:af:55:2e:de:e6:8a:ed:d7:e1:26: 1e:8a:db:3b:84:3d:0f:66:d7:4b:64:4a:59:47:01: bf:2b:7c:1a:c5:e9:5f:d0:7c:52:cf:d8:fb:38:6e: 34:3a:e3:2d:0b:1c:64:07:91:c8:4a:8f:0d:56:de: 12:c9:ba:85:d9:e2:dc:73:c8:4c:b5:24:81:a9:30: ca:52:01:ee:58:fa:50:75:de:8a:74:fa:bc:09:9d: 10:8f:e6:5d:08:44:f0:18:f5:c1:dc:38:c6:1b:a5: 16:4d:36:30:0f:9a:92:fd:d4:42:9e:d1:07:a9:2c: 6c:5c:64:fc:d6:46:a1:f3:3b:96:b6:f9:07:fb:75: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:96:5C:53:07:86:33:D6:43:94:B6:77:C7:A5:12:5E:F7:FE:A9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/2958cab3-51ed-3091-ab1c-f8e181ffa3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 69.24.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:22:b5:61:1e:63:68:88:f7:eb:c4:9c:ec:69:92:f4:34:f6: 21:80:32:2c:fd:6c:c4:e5:b0:93:d1:d7:48:41:df:e7:b9:39: 81:72:28:26:29:ae:0c:71:9f:a8:92:23:8b:02:db:a6:3f:3f: 59:85:7b:47:d8:1d:27:1d:56:16:78:ea:dc:2e:86:e4:4a:97: 87:62:b1:37:c5:df:4e:aa:4e:81:bc:ba:e6:d4:48:24:f8:51: f5:10:ea:46:ef:f9:16:e2:5f:57:7a:5b:d1:c8:14:21:87:ac: 14:63:b5:3e:6e:59:5c:c1:a6:3a:00:65:9c:e5:29:f8:45:2e: 14:92:c2:ea:a6:5f:34:99:44:dc:da:96:7f:c2:b2:1c:2f:c4: 14:7e:87:a7:42:72:8e:68:73:f9:04:7e:e2:1d:5e:e7:d8:68: f8:44:ea:67:17:7c:f2:a6:76:86:59:f5:d3:b1:5c:06:06:66: 06:14:66:3c:d0:d5:81:c9:d9:be:a7:3a:08:c3:0b:06:3c:e7: c2:53:6f:eb:38:f3:e7:11:00:db:4e:bd:ea:1c:fb:e8:42:07: 9a:aa:1d:f1:cd:12:58:e8:15:a8:96:22:36:55:86:b1:18:83: 28:85:6a:68:1e:e8:54:e6:7a:0c:d2:42:90:26:3f:50:e7:90: 84:0d:d9:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+X4J8veYH7pLiLwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyMzAzMTUwNloXDTI3MDEyMTA0MTUwNlowLzEtMCsGA1UEAxMk NTAyMTRjY2MtZjEyYS00YjJmLWE2OTItY2Q4ZmZmZTBiN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySo5V5LUJqScBcb0/aAO8vn9jBg3kBv8Wbd6 fJ6yGG2qM5KvRrjypxnb84OVFx6HqumA38AjAhA+9/qxzNjPd+Q34VNMnbJaCmVX 9gZh2ueF2Exvha7xQEfHCayStX4IvtgkrpyNOdOvGQ7VwtKIyC+stJToJB+8Uxuv BK9VLt7miu3X4SYeits7hD0PZtdLZEpZRwG/K3waxelf0HxSz9j7OG40OuMtCxxk B5HISo8NVt4SybqF2eLcc8hMtSSBqTDKUgHuWPpQdd6KdPq8CZ0Qj+ZdCETwGPXB 3DjGG6UWTTYwD5qS/dRCntEHqSxsXGT81kah8zuWtvkH+3XYowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuWXFMHhjPWQ5S2d8elEl73/qm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvMjk1OGNhYjMtNTFlZC0z MDkxLWFiMWMtZjhlMTgxZmZhM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRiDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMitWEeY2iI9+vEnOxpkvQ09iGAMiz9bMTlsJPR10hB3+e5OYFyKCYp rgxxn6iSI4sC26Y/P1mFe0fYHScdVhZ46twuhuRKl4disTfF306qToG8uubUSCT4 UfUQ6kbv+RbiX1d6W9HIFCGHrBRjtT5uWVzBpjoAZZzlKfhFLhSSwuqmXzSZRNza ln/CshwvxBR+h6dCco5oc/kEfuIdXufYaPhE6mcXfPKmdoZZ9dOxXAYGZgYUZjzQ 1YHJ2b6nOgjDCwY858JTb+s48+cRANtOveoc++hCB5qqHfHNEljoFaiWIjZVhrEY gyiFamge6FTmegzSQpAmP1DnkIQN2bs= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:25 2026 by rpki-client