$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3fda86cb-4f12-339e-88f2-076b31c190db.roa File: 3fda86cb-4f12-339e-88f2-076b31c190db.roa (raw, json) Hash identifier: C/ws2/7JBCP4yJ3Pn1fKR4IbtZhLTD5LRyoQhvv5R5Q= Subject key identifier: 91:2F:B9:85:83:C0:7F:1B:38:3F:12:D9:45:EA:57:C1:1E:A1:56:91 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D476AE6B44A105B62680 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3fda86cb-4f12-339e-88f2-076b31c190db.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 64.190.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d4:76:ae:6b:44:a1:05:b6:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=df21fbf2-82ff-4b8b-b738-8f3aa79f7915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c9:54:23:3d:5c:3f:db:80:f8:38:90:57:9c: 2c:ed:e0:fa:29:cc:e3:f7:57:e8:3f:f9:0e:61:31: f4:04:59:b1:f4:f9:28:39:fc:03:c2:2d:da:bb:51: b9:6e:62:57:21:4d:fb:9e:bf:10:c0:aa:ec:58:a8: 10:a0:95:e4:c7:10:e2:df:09:9c:7b:82:bd:39:fb: 50:af:dc:bf:05:a4:44:1a:66:1f:b7:82:0e:6b:2b: 00:72:4e:a5:b2:e7:80:ea:51:58:68:f4:aa:6a:0e: c4:65:cf:2f:7c:7a:9b:6a:c6:2c:aa:7f:10:b0:d8: f6:0e:50:b4:91:d6:84:23:6b:0c:23:2b:91:32:80: b6:85:95:88:12:eb:1e:74:7c:35:e9:cd:41:da:bb: 85:e8:57:1f:18:6a:3e:ce:ec:2a:71:49:bb:53:ee: 03:c8:79:60:46:5c:e6:ee:6f:5e:a9:d6:df:61:82: d9:dd:70:61:aa:dd:f7:a4:cd:31:b1:e8:62:c1:72: ae:b9:01:60:97:00:9d:64:f2:06:59:24:5c:45:d9: 79:cb:40:d7:a5:9d:38:45:25:be:95:89:03:54:29: 05:72:08:6d:22:b3:bd:67:7a:a0:44:7b:d0:58:55: 8b:d7:2e:ec:a1:a4:d2:ab:0d:36:48:c2:a9:d8:72: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:B9:85:83:C0:7F:1B:38:3F:12:D9:45:EA:57:C1:1E:A1:56:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/3fda86cb-4f12-339e-88f2-076b31c190db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:35:05:e6:ba:ef:8d:cd:ab:9c:9b:e0:1c:75:6b:4b:53:3e: ec:ce:f1:c1:a3:a0:19:ca:c2:ff:1b:5e:48:8f:7d:02:7b:e4: 0f:c1:56:6b:61:bd:c4:7f:be:05:fb:7a:80:2b:9e:91:26:a9: 37:90:d2:16:7a:7b:10:10:ea:8e:e6:9d:70:3c:fd:c6:18:49: a2:15:ff:6f:05:4a:99:31:13:dc:c5:11:da:64:11:03:43:93: 1a:13:1a:5d:95:86:5c:4d:89:76:e9:d6:f3:4d:8e:ee:63:ec: 67:69:64:1e:bd:ba:13:ce:aa:4e:ab:10:1b:7b:bf:36:80:9e: bc:8e:f7:12:78:e8:7c:5e:0c:1c:bf:ac:83:a7:18:62:c8:10: c9:20:79:50:f4:bd:04:42:d2:aa:72:98:e9:b2:64:16:87:5f: d1:ab:5e:57:bd:21:2a:fa:ea:09:1b:7f:6c:21:a5:48:24:80: 52:90:f6:0c:91:85:23:4e:77:28:f0:a9:d3:58:e8:59:b1:ea: 73:6f:f1:15:d8:6e:75:8c:a8:5b:7c:ad:9f:51:90:3b:6f:a0: 2e:db:c1:d6:31:fb:66:c8:a0:9e:53:10:05:28:99:64:a9:69: f3:61:60:65:b7:15:e2:ce:2a:b9:80:28:01:4a:a3:67:4e:a6: a2:b8:75:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNR2rmtEoQW2JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk ZGYyMWZiZjItODJmZi00YjhiLWI3MzgtOGYzYWE3OWY3OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMlUIz1cP9uA+DiQV5ws7eD6Kczj91foP/kO YTH0BFmx9PkoOfwDwi3au1G5bmJXIU37nr8QwKrsWKgQoJXkxxDi3wmce4K9OftQ r9y/BaREGmYft4IOaysAck6lsueA6lFYaPSqag7EZc8vfHqbasYsqn8QsNj2DlC0 kdaEI2sMIyuRMoC2hZWIEusedHw16c1B2ruF6FcfGGo+zuwqcUm7U+4DyHlgRlzm 7m9eqdbfYYLZ3XBhqt33pM0xsehiwXKuuQFglwCdZPIGWSRcRdl5y0DXpZ04RSW+ lYkDVCkFcghtIrO9Z3qgRHvQWFWL1y7soaTSqw02SMKp2HKa4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEvuYWDwH8bOD8S2UXqV8EeoVaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvM2ZkYTg2Y2ItNGYxMi0z MzllLTg4ZjItMDc2YjMxYzE5MGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk1Bea6743Nq5yb4Bx1a0tTPuzO8cGjoBnKwv8bXkiPfQJ75A/BVmth vcR/vgX7eoArnpEmqTeQ0hZ6exAQ6o7mnXA8/cYYSaIV/28FSpkxE9zFEdpkEQND kxoTGl2VhlxNiXbp1vNNju5j7GdpZB69uhPOqk6rEBt7vzaAnryO9xJ46HxeDBy/ rIOnGGLIEMkgeVD0vQRC0qpymOmyZBaHX9GrXle9ISr66gkbf2whpUgkgFKQ9gyR hSNOdyjwqdNY6Fmx6nNv8RXYbnWMqFt8rZ9RkDtvoC7bwdYx+2bIoJ5TEAUomWSp afNhYGW3FeLOKrmAKAFKo2dOpqK4dds= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:17 2026 by rpki-client