$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/8f9890ec-1832-3151-a418-d3d6d99f4e5c.roa File: 8f9890ec-1832-3151-a418-d3d6d99f4e5c.roa (raw, json) Hash identifier: /pE9HrjtjM8SuaO2upInSzByRLb2I/PO7G2w/T6L05M= Subject key identifier: CB:53:75:DA:FE:ED:85:BD:E2:ED:49:3B:40:45:BC:90:90:B1:08:6F Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA308D3BEE6D695E6A585EB80 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/8f9890ec-1832-3151-a418-d3d6d99f4e5c.roa Signing time: Tue 27 Oct 2026 03:10:00 +0000 ROA not before: Tue 27 Oct 2026 03:10:00 +0000 ROA not after: Mon 25 Jan 2027 04:10:00 +0000 asID: 11696 IP address blocks: 64.190.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:08:d3:be:e6:d6:95:e6:a5:85:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 03:10:00 2026 GMT Not After : Jan 25 04:10:00 2027 GMT Subject: CN=67c325f6-4293-472f-8421-fea31f4c74a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:33:53:4c:23:5c:03:35:6f:f9:a1:a5:93: 3f:da:97:82:a7:94:9a:76:a9:f1:d1:cf:70:52:44: ba:8d:2b:7b:56:de:15:6b:41:8c:74:35:1c:35:b1: 54:fc:a2:e6:5d:3c:eb:46:c2:9d:ba:c7:7f:62:15: 17:47:88:38:5d:9b:f0:3c:61:d8:70:8c:b6:52:41: 20:9e:47:18:7b:a3:ab:1f:08:91:78:ee:99:68:97: 8b:21:0e:40:00:90:94:c7:54:c7:eb:ae:3d:23:3a: 1d:3a:bf:15:ea:5f:19:49:d5:40:fa:52:56:82:c6: b4:b7:66:9d:37:50:4a:9a:1a:8f:05:25:d0:aa:1a: c4:98:ce:28:7c:7e:2e:7a:ad:46:bd:5b:72:66:6d: 8c:70:70:f1:69:ed:2e:73:80:04:04:a7:fd:fa:ed: 43:e6:5a:01:1e:00:84:3a:ec:fe:8a:d2:f7:5d:24: d6:cc:2d:aa:8a:e8:e9:5b:04:96:52:80:fc:e6:85: fa:8b:12:08:09:94:78:46:02:8d:fe:5e:26:9f:e1: 1c:30:8a:24:8e:f7:ba:1a:6c:af:f5:7f:15:73:91: 17:b8:af:47:92:aa:e7:a3:9b:de:59:b5:3d:ac:68: 60:96:85:bb:85:43:9c:1e:87:2b:19:13:00:7b:78: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:53:75:DA:FE:ED:85:BD:E2:ED:49:3B:40:45:BC:90:90:B1:08:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/8f9890ec-1832-3151-a418-d3d6d99f4e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2d:3d:e4:11:97:3c:de:03:6a:a8:a9:59:0d:20:61:e2:32: 85:09:c3:0b:f3:98:cc:96:53:51:fa:c3:1c:46:bf:7c:2f:8c: 41:56:0d:95:83:d4:64:27:e8:d3:e7:70:85:4b:eb:45:17:50: 70:fd:dd:97:24:7f:74:c0:35:08:7a:9e:8f:20:49:c3:11:eb: 5b:a7:54:27:95:26:5f:de:57:f3:04:f3:79:04:68:76:d4:23: b0:69:e1:da:b7:25:e6:f9:dc:50:2d:66:a3:b6:dc:6d:eb:8f: 68:d7:b5:21:ca:a3:96:a8:15:b5:7d:63:a3:72:7c:cc:37:21: 0a:c5:46:f1:52:8b:48:56:62:6b:5d:6c:48:14:25:3b:ab:71: ca:c9:49:14:66:34:5e:ff:df:1e:27:f5:8a:ee:87:c6:25:29: 9c:6e:00:77:02:84:4d:f5:66:1c:33:e6:d4:d2:ec:b5:db:88: 06:4c:94:18:01:83:87:1f:e1:cc:c8:27:99:0f:cd:e4:1b:db: f7:f1:ef:3f:7d:90:d0:93:3a:4b:53:3d:9c:b5:7a:ea:22:f1: d0:21:e9:57:a5:41:34:58:02:e5:09:1f:88:2e:fa:7a:76:b0: 07:78:bb:02:e6:af:16:29:86:a6:38:f8:e1:78:e5:79:d5:f4: 36:94:1d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jCNO+5taV5qWF64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzAzMTAwMFoXDTI3MDEyNTA0MTAwMFowLzEtMCsGA1UEAxMk NjdjMzI1ZjYtNDI5My00NzJmLTg0MjEtZmVhMzFmNGM3NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOozU0wjXAM1b/mhpZM/2peCp5Sadqnx0c9w UkS6jSt7Vt4Va0GMdDUcNbFU/KLmXTzrRsKdusd/YhUXR4g4XZvwPGHYcIy2UkEg nkcYe6OrHwiReO6ZaJeLIQ5AAJCUx1TH6649IzodOr8V6l8ZSdVA+lJWgsa0t2ad N1BKmhqPBSXQqhrEmM4ofH4ueq1GvVtyZm2McHDxae0uc4AEBKf9+u1D5loBHgCE Ouz+itL3XSTWzC2qiujpWwSWUoD85oX6ixIICZR4RgKN/l4mn+EcMIokjve6Gmyv 9X8Vc5EXuK9Hkqrno5veWbU9rGhgloW7hUOcHocrGRMAe3gTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtTddr+7YW94u1JO0BFvJCQsQhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvOGY5ODkwZWMtMTgzMi0z MTUxLWE0MTgtZDNkNmQ5OWY0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQL5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0tPeQRlzzeA2qoqVkNIGHiMoUJwwvzmMyWU1H6wxxGv3wvjEFWDZWD 1GQn6NPncIVL60UXUHD93Zckf3TANQh6no8gScMR61unVCeVJl/eV/ME83kEaHbU I7Bp4dq3Jeb53FAtZqO23G3rj2jXtSHKo5aoFbV9Y6NyfMw3IQrFRvFSi0hWYmtd bEgUJTurccrJSRRmNF7/3x4n9Yruh8YlKZxuAHcChE31Zhwz5tTS7LXbiAZMlBgB g4cf4czIJ5kPzeQb2/fx7z99kNCTOktTPZy1euoi8dAh6VelQTRYAuUJH4gu+np2 sAd4uwLmrxYphqY4+OF45XnV9DaUHWM= -----END CERTIFICATE-----Generated at Thu Oct 29 00:41:17 2026 by rpki-client