$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c2db6602-3936-37cd-9da3-307bfd653601.roa File: c2db6602-3936-37cd-9da3-307bfd653601.roa (raw, json) Hash identifier: /RDDSCVDRFKg7zL/80xK8CgjA1bS5OiMPIeNpK2Tqg4= Subject key identifier: FF:F4:2F:87:E9:84:08:90:24:FE:A7:0B:8F:1A:33:8C:51:7C:1D:66 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA38E5AAA17C942D63E014300 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c2db6602-3936-37cd-9da3-307bfd653601.roa Signing time: Tue 27 Oct 2026 07:39:02 +0000 ROA not before: Tue 27 Oct 2026 07:39:02 +0000 ROA not after: Mon 25 Jan 2027 08:39:02 +0000 asID: 11696 IP address blocks: 64.190.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a3:8e:5a:aa:17:c9:42:d6:3e:01:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 27 07:39:02 2026 GMT Not After : Jan 25 08:39:02 2027 GMT Subject: CN=78f0cd2b-e8d0-4b25-a556-cb98cef81ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:34:1c:25:c1:ac:05:c2:7b:37:dd:86:c6:f2: de:34:04:76:b2:8f:87:c5:42:33:c5:0b:2b:12:18: ba:7f:d9:5e:35:ed:56:fe:67:7e:27:3a:88:77:38: 87:38:39:b9:b0:d3:aa:43:19:86:54:3c:12:4a:ca: 9c:3c:04:b4:df:57:21:7c:c1:78:db:8e:fe:d8:7e: b4:e6:c8:e7:da:88:f7:af:27:06:64:97:a4:fc:4d: fa:1e:fb:97:c5:c2:52:8b:00:d6:a3:91:29:6d:b8: 85:21:20:af:02:f6:e7:34:8a:2e:98:a9:a6:11:9e: 47:31:86:62:68:b9:80:d0:ae:c5:81:86:f8:57:f0: f3:20:ce:3b:f2:52:49:1e:55:2a:6a:dc:48:ae:83: a3:02:bd:4c:00:c6:5e:a5:d0:98:64:49:76:f7:df: 9f:9e:d8:c5:74:74:6d:32:35:59:4b:8d:1e:97:2c: 98:17:02:e2:a8:47:c7:8f:c9:f3:a4:63:ad:e7:13: 67:02:5f:16:59:e4:fb:56:f8:5e:0a:5e:5c:e5:95: ff:8a:1c:65:06:e6:42:0e:e7:50:9d:cb:a2:b3:8e: 63:01:2c:8a:09:01:bc:e3:ad:39:04:b5:f4:88:a3: 8b:b0:87:8b:30:c2:55:a3:96:95:b7:fc:9e:83:37: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:2F:87:E9:84:08:90:24:FE:A7:0B:8F:1A:33:8C:51:7C:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c2db6602-3936-37cd-9da3-307bfd653601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f7:f4:c2:b3:c3:f7:ec:94:91:70:af:b1:a6:dd:0e:f3:a2: 6d:66:72:59:00:f0:49:23:c7:5f:59:ed:4e:cc:19:22:e7:5d: 6b:91:7d:48:c8:e8:1a:5c:c4:db:c7:eb:a3:c5:37:35:b0:f2: 97:4a:57:53:90:98:fd:9e:7b:c8:f6:5d:44:ea:77:68:53:bb: 66:62:72:01:41:85:3c:76:ee:c3:e6:e4:7f:10:0d:dc:29:6c: 8f:95:dc:b0:9a:dc:a4:22:1c:4b:36:cd:c0:e6:01:ed:61:a0: 48:73:5e:29:1c:a1:c6:12:42:37:cd:25:d3:fd:42:8c:67:05: 1f:7d:0c:6c:ab:61:73:df:72:43:7f:03:21:d1:cb:be:b6:57: 45:ba:da:79:d3:64:25:1a:ee:ce:fc:09:ea:83:cb:be:81:0b: 02:a9:1b:47:09:8a:68:d2:01:a6:83:4b:dd:4d:b4:f5:4b:7e: 14:f9:10:61:3f:2c:4d:7f:44:46:75:77:7b:a3:b4:6c:1b:7b: 3f:72:01:af:a2:67:b1:a3:e1:64:b6:51:ce:64:39:cd:91:e1: a6:a5:15:ef:92:06:e2:a7:54:96:b1:a5:0f:48:8d:61:9b:7e: 6d:5d:31:96:db:dd:da:ca:89:c4:4e:89:ec:04:60:6f:c9:33: bf:28:0c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+jjlqqF8lC1j4BQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyNzA3MzkwMloXDTI3MDEyNTA4MzkwMlowLzEtMCsGA1UEAxMk NzhmMGNkMmItZThkMC00YjI1LWE1NTYtY2I5OGNlZjgxZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDQcJcGsBcJ7N92GxvLeNAR2so+HxUIzxQsr Ehi6f9leNe1W/md+JzqIdziHODm5sNOqQxmGVDwSSsqcPAS031chfMF4247+2H60 5sjn2oj3rycGZJek/E36HvuXxcJSiwDWo5EpbbiFISCvAvbnNIoumKmmEZ5HMYZi aLmA0K7FgYb4V/DzIM478lJJHlUqatxIroOjAr1MAMZepdCYZEl299+fntjFdHRt MjVZS40elyyYFwLiqEfHj8nzpGOt5xNnAl8WWeT7VvheCl5c5ZX/ihxlBuZCDudQ ncuis45jASyKCQG84605BLX0iKOLsIeLMMJVo5aVt/yegzfXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/0L4fphAiQJP6nC48aM4xRfB1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYzJkYjY2MDItMzkzNi0z N2NkLTlkYTMtMzA3YmZkNjUzNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL39MKzw/fslJFwr7Gm3Q7zom1mclkA8Ekjx19Z7U7MGSLnXWuRfUjI 6BpcxNvH66PFNzWw8pdKV1OQmP2ee8j2XUTqd2hTu2ZicgFBhTx27sPm5H8QDdwp bI+V3LCa3KQiHEs2zcDmAe1hoEhzXikcocYSQjfNJdP9QoxnBR99DGyrYXPfckN/ AyHRy762V0W62nnTZCUa7s78CeqDy76BCwKpG0cJimjSAaaDS91NtPVLfhT5EGE/ LE1/REZ1d3ujtGwbez9yAa+iZ7Gj4WS2Uc5kOc2R4aalFe+SBuKnVJaxpQ9IjWGb fm1dMZbb3drKicROiewEYG/JM78oDM8= -----END CERTIFICATE-----Generated at Wed Oct 28 14:52:15 2026 by rpki-client