$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/986eebc3-c62b-3bcb-91da-a77c6bd148c3.roa File: 986eebc3-c62b-3bcb-91da-a77c6bd148c3.roa (raw, json) Hash identifier: FUZ7VjPqlfhysdSQgiL4NsaxbQmI3l4j7aw4h/QMxgI= Subject key identifier: 71:2F:F5:7C:8E:B6:3B:8E:FB:CC:ED:89:0A:03:39:1D:22:29:D5:03 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584F97E09EFEA6C0435EB02D3B00 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/986eebc3-c62b-3bcb-91da-a77c6bd148c3.roa Signing time: Fri 23 Oct 2026 03:15:06 +0000 ROA not before: Fri 23 Oct 2026 03:15:06 +0000 ROA not after: Thu 21 Jan 2027 04:15:06 +0000 asID: 11696 IP address blocks: 64.190.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:e0:9e:fe:a6:c0:43:5e:b0:2d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 23 03:15:06 2026 GMT Not After : Jan 21 04:15:06 2027 GMT Subject: CN=9554affc-585d-4558-9f85-630d66fb0909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:8f:be:23:5e:c5:75:13:1e:f6:c6:3e:bb: 9d:0e:e1:51:5d:4b:7d:c1:5a:31:00:3a:13:cf:67: 32:6b:24:1c:7a:3f:35:2f:79:d5:96:3c:2e:48:b5: ad:de:80:dc:5a:71:e0:d5:95:ac:d7:15:ef:f1:d2: 8a:db:ef:f7:a9:85:09:b1:e9:16:3c:bf:fd:2d:fb: f7:b6:ab:8b:6e:e1:d2:58:61:91:53:17:3c:10:07: 9d:ae:2b:0f:83:e1:d0:bf:b4:a6:9f:6d:82:83:32: 5c:a5:be:43:55:fd:ef:ca:2c:81:c1:99:e0:ed:45: ac:5a:9b:91:ed:d4:e7:5c:f2:2c:21:25:99:d3:12: d8:ca:f7:79:3a:0d:ad:b9:6d:b7:5e:8a:11:29:be: fa:dd:fc:b4:db:0c:2c:07:3a:bf:21:da:78:b5:5e: 40:88:ed:ea:16:b8:c7:da:81:28:a6:d1:f7:f7:53: ad:f6:e8:d4:7c:3f:74:1d:f6:43:27:83:03:97:5b: c4:1f:18:61:bf:cf:c1:ee:99:1a:17:d2:11:5e:79: f9:1b:48:d0:2d:21:d8:4d:94:e5:bc:64:1d:0f:7a: 61:0c:36:50:4c:5d:ba:0f:0f:56:09:58:24:e4:ed: b8:36:3b:00:aa:6b:83:28:34:d9:44:24:ac:96:26: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:F5:7C:8E:B6:3B:8E:FB:CC:ED:89:0A:03:39:1D:22:29:D5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/986eebc3-c62b-3bcb-91da-a77c6bd148c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:6d:8b:cf:d3:32:f4:af:99:a3:0d:08:06:47:33:77:fe: a8:e9:0e:c6:63:b9:2e:d9:81:d0:a8:9e:6d:04:8e:76:99:64: 14:c2:d1:7b:59:03:a8:f5:c9:82:4b:b8:5a:4b:39:a5:bf:8a: 82:ef:0e:56:c8:00:b6:c8:54:f0:55:ea:d1:3f:ca:30:11:56: 55:35:db:4b:7d:ed:00:58:12:57:d8:94:d5:51:66:34:59:1d: 8b:d7:94:60:f3:cc:4d:07:e0:e8:2a:ab:7d:4e:fb:3d:ea:b6: b5:6f:41:a0:2a:d8:db:27:79:27:39:4d:a6:87:a9:90:f0:54: 18:83:4c:66:6b:bc:ff:38:3f:9d:35:0f:1a:a1:6c:34:bc:00: 33:18:13:9a:fc:32:b0:6c:2b:8f:14:ef:c3:ca:ed:16:83:95: e0:df:3e:a5:96:d1:7a:6f:1e:25:6b:c8:f2:df:22:dc:0a:0d: c0:5e:c7:7b:52:4f:d4:4d:bb:73:74:6d:1f:9a:67:fc:a2:91: ee:0e:b4:2c:9b:f6:c2:44:48:d2:7c:c9:5b:89:8b:27:95:d7: dd:7e:95:8c:69:d7:98:e5:ee:a5:b3:f9:7f:d9:88:a8:a1:9e: 25:e8:cd:f3:e0:f7:9c:ef:01:55:d3:e4:9e:c1:72:9a:51:fe: ce:49:ff:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+X4J7+psBDXrAtOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyMzAzMTUwNloXDTI3MDEyMTA0MTUwNlowLzEtMCsGA1UEAxMk OTU1NGFmZmMtNTg1ZC00NTU4LTlmODUtNjMwZDY2ZmIwOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBOPviNexXUTHvbGPrudDuFRXUt9wVoxADoT z2cyayQcej81L3nVljwuSLWt3oDcWnHg1ZWs1xXv8dKK2+/3qYUJsekWPL/9Lfv3 tquLbuHSWGGRUxc8EAedrisPg+HQv7Smn22CgzJcpb5DVf3vyiyBwZng7UWsWpuR 7dTnXPIsISWZ0xLYyvd5Og2tuW23XooRKb763fy02wwsBzq/Idp4tV5AiO3qFrjH 2oEoptH391Ot9ujUfD90HfZDJ4MDl1vEHxhhv8/B7pkaF9IRXnn5G0jQLSHYTZTl vGQdD3phDDZQTF26Dw9WCVgk5O24NjsAqmuDKDTZRCSsliY5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEv9XyOtjuO+8ztiQoDOR0iKdUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvOTg2ZWViYzMtYzYyYi0z YmNiLTkxZGEtYTc3YzZiZDE0OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj4bYvP0zL0r5mjDQgGRzN3/qjpDsZjuS7ZgdConm0EjnaZZBTC0XtZ A6j1yYJLuFpLOaW/ioLvDlbIALbIVPBV6tE/yjARVlU120t97QBYElfYlNVRZjRZ HYvXlGDzzE0H4Ogqq31O+z3qtrVvQaAq2NsneSc5TaaHqZDwVBiDTGZrvP84P501 DxqhbDS8ADMYE5r8MrBsK48U78PK7RaDleDfPqWW0XpvHiVryPLfItwKDcBex3tS T9RNu3N0bR+aZ/yike4OtCyb9sJESNJ8yVuJiyeV191+lYxp15jl7qWz+X/ZiKih niXozfPg95zvAVXT5J7BcppR/s5J/xg= -----END CERTIFICATE-----Generated at Thu Oct 29 00:40:44 2026 by rpki-client