$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7f72f8d7-0114-371a-9f66-f3363e203a2b.roa File: 7f72f8d7-0114-371a-9f66-f3363e203a2b.roa (raw, json) Hash identifier: 4Y0wtSn709DJlGchphna5L2oxIcvChjTYb6pD9aL8G8= Subject key identifier: 25:11:9C:1C:82:80:49:E2:9D:EF:91:D2:15:EC:E0:E1:BA:30:28:39 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D4680BA10ADD9820A880 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7f72f8d7-0114-371a-9f66-f3363e203a2b.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 64.190.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d4:68:0b:a1:0a:dd:98:20:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=31b474ec-c27e-4b16-89ba-933ea9f00331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:a0:9f:34:ba:82:5a:41:53:72:41:4b:c5: 38:8d:7a:89:2a:13:7c:96:99:2e:21:8d:dd:79:84: 15:58:a8:81:7a:85:af:0b:ef:c2:fe:67:99:6a:0f: 75:84:d8:ed:38:17:16:2e:91:69:13:68:94:e0:c1: 39:23:24:f5:c9:fa:b4:38:33:a2:dc:34:f6:4b:c3: fb:ad:bb:4f:4b:b7:ad:46:5b:2e:bd:52:ec:38:8c: b9:b7:8d:fb:3c:a8:01:44:bc:3c:72:ee:51:e8:49: 63:31:42:17:40:d8:9a:f8:ef:6d:2c:2c:d4:47:00: 3b:ec:4a:23:49:d7:31:55:12:a0:a6:de:fe:84:ba: 4a:af:4a:1a:c1:c7:46:46:7e:a3:2c:99:bd:bb:92: 1c:d4:af:42:f4:44:85:e7:d2:e4:04:eb:b7:c4:d4: 59:51:c8:e7:db:17:22:23:6d:5f:40:65:64:b5:46: 60:da:1a:c6:c1:1c:e8:58:c9:b2:ba:3f:e3:7a:b1: 7c:cc:a4:78:9f:a2:56:c9:d1:b1:90:43:c4:f7:ab: 46:44:1a:f7:75:c3:4c:92:44:5c:b0:7c:55:92:10: 2c:17:68:d3:01:14:be:3c:0d:97:ac:8b:85:a9:c1: d8:fd:13:cd:73:96:06:c0:79:18:f4:74:b4:db:e8: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:9C:1C:82:80:49:E2:9D:EF:91:D2:15:EC:E0:E1:BA:30:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7f72f8d7-0114-371a-9f66-f3363e203a2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a8:18:62:9c:22:52:2d:af:c6:71:87:f3:aa:35:31:f6:7c: 14:b1:a1:d4:7a:ed:c2:82:d5:05:ab:0b:b4:ad:61:97:bf:b3: 63:f2:e9:62:4f:a2:3b:53:20:78:95:19:8f:1a:f3:ea:b4:4b: e0:b0:c5:1f:0f:14:33:74:29:a3:aa:f1:17:04:4a:f9:af:e1: ef:43:b2:28:32:fe:f8:77:6c:43:51:04:9f:7e:51:c0:96:c4: 03:13:ba:e8:1d:b2:30:df:ca:c8:c8:44:02:fa:3f:a7:52:35: 36:25:af:44:46:5c:f8:ee:00:52:57:84:1f:cb:7e:d6:4f:f4: 6f:c4:09:4f:90:7c:bb:e6:59:e6:01:53:bf:94:83:d8:f4:06: e9:e8:67:ff:4e:ee:23:dd:19:ce:18:a1:0b:77:0e:fe:da:9c: b6:a7:50:8d:77:da:db:07:d0:b4:d2:c4:39:57:03:30:88:88: 2e:ef:da:04:20:8e:a6:4e:9a:c5:b3:1a:9d:77:1f:e9:d9:ff: b9:2a:e7:fb:26:a0:90:b5:39:16:60:30:ad:a8:ff:56:85:e8: 24:e0:5c:4c:51:2f:23:89:71:9d:ac:5b:9a:8a:cd:7d:a8:93: 97:c3:a4:c4:e0:fd:88:73:1c:e3:5f:4c:e0:f2:af:1c:ba:aa: 71:30:72:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNRoC6EK3ZggqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk MzFiNDc0ZWMtYzI3ZS00YjE2LTg5YmEtOTMzZWE5ZjAwMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjugnzS6glpBU3JBS8U4jXqJKhN8lpkuIY3d eYQVWKiBeoWvC+/C/meZag91hNjtOBcWLpFpE2iU4ME5IyT1yfq0ODOi3DT2S8P7 rbtPS7etRlsuvVLsOIy5t437PKgBRLw8cu5R6EljMUIXQNia+O9tLCzURwA77Eoj SdcxVRKgpt7+hLpKr0oawcdGRn6jLJm9u5Ic1K9C9ESF59LkBOu3xNRZUcjn2xci I21fQGVktUZg2hrGwRzoWMmyuj/jerF8zKR4n6JWydGxkEPE96tGRBr3dcNMkkRc sHxVkhAsF2jTARS+PA2XrIuFqcHY/RPNc5YGwHkY9HS02+gjOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCURnByCgEnine+R0hXs4OG6MCg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvN2Y3MmY4ZDctMDExNC0z NzFhLTlmNjYtZjMzNjNlMjAzYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+oGGKcIlItr8Zxh/OqNTH2fBSxodR67cKC1QWrC7StYZe/s2Py6WJP ojtTIHiVGY8a8+q0S+CwxR8PFDN0KaOq8RcESvmv4e9Dsigy/vh3bENRBJ9+UcCW xAMTuugdsjDfysjIRAL6P6dSNTYlr0RGXPjuAFJXhB/LftZP9G/ECU+QfLvmWeYB U7+Ug9j0BunoZ/9O7iPdGc4YoQt3Dv7anLanUI132tsH0LTSxDlXAzCIiC7v2gQg jqZOmsWzGp13H+nZ/7kq5/smoJC1ORZgMK2o/1aF6CTgXExRLyOJcZ2sW5qKzX2o k5fDpMTg/YhzHONfTODyrxy6qnEwcq8= -----END CERTIFICATE-----Generated at Thu Oct 29 06:08:55 2026 by rpki-client