$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bd2ca40-5ec3-3bbe-9d45-ed2c5ddf0ad6.roa File: 5bd2ca40-5ec3-3bbe-9d45-ed2c5ddf0ad6.roa (raw, json) Hash identifier: r4ZxYhts3sRtpWGsz4a6yCo2PBFon6EyYgSXzBvquGM= Subject key identifier: 4E:8E:19:98:52:87:EA:87:D5:19:B6:BC:0F:40:3C:08:9C:04:0A:D8 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D390D79BB6B793D43E80 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bd2ca40-5ec3-3bbe-9d45-ed2c5ddf0ad6.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 64.45.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d3:90:d7:9b:b6:b7:93:d4:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=18a3cab1-e76d-454a-9672-9d3cbc12957b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:46:37:fc:c3:53:53:a8:48:19:c5:52:9a: 5e:96:52:10:c0:30:c9:63:f8:50:50:07:ae:40:12: 3b:cd:74:4e:a4:1f:3c:78:59:2b:18:8a:aa:31:03: 3f:34:cc:f6:21:8e:aa:d8:e8:08:ca:ed:55:15:b9: 67:7e:80:cc:2a:96:03:c7:81:e8:6f:51:ef:78:00: 81:72:a1:7b:a8:d0:81:ac:f3:da:0f:f8:72:30:f9: d4:8c:23:f7:bc:e6:25:00:c6:37:eb:c2:dd:3e:bf: 88:ee:78:1f:42:ab:fa:58:bd:96:53:6a:75:c9:47: 2e:19:cf:39:ea:5f:8d:8b:db:66:f7:23:31:b3:fa: aa:2f:9a:78:6e:c0:63:71:70:cd:e1:82:48:ca:73: 76:1d:59:f9:c4:52:ce:5a:b3:21:ff:78:f9:49:0c: b1:62:ba:61:35:9c:0f:a2:03:26:c7:9d:f7:50:16: db:d3:4b:3f:1e:de:5a:0b:ea:e6:16:86:00:e3:9a: fe:08:69:ec:7e:18:3b:6b:63:24:69:54:6f:66:ef: 6a:23:c4:0a:39:8d:bf:7d:ff:c2:7c:51:cf:a2:e3: 55:4d:ac:80:17:6e:0e:e3:8f:5b:d9:1d:6a:4d:4f: 30:26:c4:4e:ef:9b:7b:d7:42:d3:91:cf:58:61:d4: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8E:19:98:52:87:EA:87:D5:19:B6:BC:0F:40:3C:08:9C:04:0A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/5bd2ca40-5ec3-3bbe-9d45-ed2c5ddf0ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.45.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:55:5a:3a:c8:0c:58:b1:c2:55:d2:ad:19:4e:23:cc:09:1f: 10:64:7f:62:71:0d:4a:fd:b3:0f:48:d9:f4:78:71:a8:f2:f9: c6:df:0b:d1:a4:17:d0:75:e3:e5:3c:c7:a3:4c:68:a9:ed:e8: da:e3:96:f9:5e:01:aa:64:87:29:4f:fb:2e:bb:44:cb:9b:2a: dc:ae:86:cf:db:17:a9:99:2b:50:22:df:9e:c9:51:eb:53:3a: cd:c7:cd:7a:d2:4a:ef:7e:a4:65:0f:0e:2b:09:1a:e0:7b:b9: 2f:49:dd:fc:c4:3b:d8:8e:77:fc:a6:b3:f3:69:9b:86:29:91: 93:85:5b:f9:30:d6:30:f1:f6:85:a7:0a:a7:9c:52:dc:fb:74: b4:26:70:9a:7c:65:3a:8a:89:db:b1:a4:97:44:cd:2f:f1:f7: 9c:fb:b2:04:65:77:7a:a4:9a:42:7b:6e:35:cc:ac:58:49:56: 05:11:ee:bd:a7:c0:40:32:9a:68:3d:54:66:19:04:e4:4e:85: 21:c3:58:53:dc:bf:5f:c5:d4:27:d3:27:ba:36:81:31:d9:75: 93:ec:ee:db:3c:bc:36:81:96:77:c8:4d:03:8c:cc:01:17:9c: 72:dd:04:c4:05:a6:8d:af:2d:b2:05:d2:a3:f4:28:2a:8c:3f: 26:3f:75:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNOQ15u2t5PUPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk MThhM2NhYjEtZTc2ZC00NTRhLTk2NzItOWQzY2JjMTI5NTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrVGN/zDU1OoSBnFUppellIQwDDJY/hQUAeu QBI7zXROpB88eFkrGIqqMQM/NMz2IY6q2OgIyu1VFblnfoDMKpYDx4Hob1HveACB cqF7qNCBrPPaD/hyMPnUjCP3vOYlAMY368LdPr+I7ngfQqv6WL2WU2p1yUcuGc85 6l+Ni9tm9yMxs/qqL5p4bsBjcXDN4YJIynN2HVn5xFLOWrMh/3j5SQyxYrphNZwP ogMmx533UBbb00s/Ht5aC+rmFoYA45r+CGnsfhg7a2MkaVRvZu9qI8QKOY2/ff/C fFHPouNVTayAF24O449b2R1qTU8wJsRO75t710LTkc9YYdT5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6OGZhSh+qH1Rm2vA9APAicBArYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvNWJkMmNhNDAtNWVjMy0z YmJlLTlkNDUtZWQyYzVkZGYwYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQC2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5VWjrIDFixwlXSrRlOI8wJHxBkf2JxDUr9sw9I2fR4cajy+cbfC9Gk F9B14+U8x6NMaKnt6NrjlvleAapkhylP+y67RMubKtyuhs/bF6mZK1Ai357JUetT Os3HzXrSSu9+pGUPDisJGuB7uS9J3fzEO9iOd/yms/Npm4YpkZOFW/kw1jDx9oWn CqecUtz7dLQmcJp8ZTqKiduxpJdEzS/x95z7sgRld3qkmkJ7bjXMrFhJVgUR7r2n wEAymmg9VGYZBOROhSHDWFPcv1/F1CfTJ7o2gTHZdZPs7ts8vDaBlnfITQOMzAEX nHLdBMQFpo2vLbIF0qP0KCqMPyY/dcc= -----END CERTIFICATE-----Generated at Wed Oct 28 18:42:48 2026 by rpki-client