$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ff8e1bb4-517d-38ba-9e88-3a6be447d414.roa File: ff8e1bb4-517d-38ba-9e88-3a6be447d414.roa (raw, json) Hash identifier: quA32muSlvBfwbBvCl8ZTncG+nUv3sahpj09azHpSGY= Subject key identifier: 56:20:FA:C9:C3:38:59:3D:5C:D3:B2:1A:DB:9E:38:A9:3F:24:3A:17 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F4328584FB5198312235E86240C037F7C Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ff8e1bb4-517d-38ba-9e88-3a6be447d414.roa Signing time: Mon 02 Nov 2026 14:28:10 +0000 ROA not before: Mon 02 Nov 2026 14:28:10 +0000 ROA not after: Sun 31 Jan 2027 14:28:10 +0000 asID: 399817 IP address blocks: 64.29.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b5:19:83:12:23:5e:86:24:0c:03:7f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: Nov 2 14:28:10 2026 GMT Not After : Jan 31 14:28:10 2027 GMT Subject: CN=567e0dae-dee4-4f86-a04d-0d91fe010c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:9b:0d:eb:ac:21:96:76:b4:b5:0f:80:d0: de:c8:e3:1c:46:37:47:6b:99:81:58:76:eb:ad:07: 5f:80:66:e9:39:6d:0c:f0:1a:5c:13:11:ee:24:81: 2e:1d:04:e5:7c:84:1d:a2:d6:42:31:00:0e:1c:f0: a6:56:54:49:5a:df:ff:da:23:7f:bd:92:86:eb:76: ad:91:32:20:cd:ab:42:b9:e1:cd:cf:c7:62:da:b5: 5c:53:51:cd:49:b2:8e:76:ec:bb:06:60:e9:59:2c: 44:97:2d:50:63:04:e4:ec:56:34:e1:85:81:c9:14: 71:e9:99:df:6a:2f:a0:59:78:b2:00:34:a5:c1:89: c9:42:bb:d5:58:da:d1:b1:2f:f6:78:1a:9d:ad:61: 28:b9:70:d2:67:bc:5b:32:c2:f9:80:e2:d1:e4:99: 0f:09:da:94:88:13:17:fa:57:08:aa:e5:15:d7:28: 84:7e:28:62:37:ea:be:1a:02:c9:d3:2d:5b:0d:13: 6e:7c:04:93:f1:07:35:8f:1a:2c:7f:ab:8d:d1:9d: 69:6b:f1:b7:2f:92:ae:b1:45:2c:9d:52:74:3f:72: aa:3f:7a:f3:7d:ec:4e:41:a4:51:29:0c:50:f9:0b: 1b:fc:43:bb:90:5f:81:b7:6b:d4:7b:2d:a0:bc:22: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:FA:C9:C3:38:59:3D:5C:D3:B2:1A:DB:9E:38:A9:3F:24:3A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/ff8e1bb4-517d-38ba-9e88-3a6be447d414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fb:26:82:08:d2:d7:3c:88:02:2c:2f:6b:be:cd:c6:0b:19: 62:cf:02:9f:a6:6a:f7:ba:a5:49:6f:cc:24:a2:75:5d:d7:25: 08:ea:7f:96:98:97:de:2d:87:76:25:5d:1c:c0:56:84:c3:7e: 26:39:74:c4:73:cf:ee:bc:11:f5:97:cf:1b:b4:3c:b3:40:37: 07:4a:a3:38:39:de:9e:21:74:51:67:12:d5:59:ce:1e:e3:eb: 59:39:d5:9f:b4:50:e0:3f:2b:50:69:e0:32:8f:95:09:52:3d: bc:b2:68:fc:4d:0c:af:bf:74:fc:93:60:3f:97:8d:9d:a2:0f: a0:65:5f:ab:99:c8:8c:6a:59:5c:a3:08:64:31:e1:52:f3:c3: 04:b3:5c:be:e7:92:49:7e:d2:56:53:55:eb:64:db:d9:5e:32: 49:a4:5d:16:64:f6:e7:db:8a:9f:c9:a1:bc:df:52:6d:23:85: f8:25:33:1a:9a:cf:8a:ef:2f:98:ae:e5:5c:c6:f1:20:d6:8a: 31:29:17:7a:ee:d8:75:c4:6c:bb:cc:28:fa:e5:4e:c0:a4:bc: 00:88:19:4e:24:ca:90:a1:1e:58:85:77:3f:28:65:b9:ed:77: 8d:f5:19:00:49:98:67:2b:e3:7b:e9:09:59:0b:03:1a:d5:39: bb:f4:6f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+1GYMSI16GJAwDf3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTI2MTEwMjE0MjgxMFoXDTI3MDEzMTE0MjgxMFowLzEtMCsGA1UEAxMk NTY3ZTBkYWUtZGVlNC00Zjg2LWEwNGQtMGQ5MWZlMDEwYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3+bDeusIZZ2tLUPgNDeyOMcRjdHa5mBWHbr rQdfgGbpOW0M8BpcExHuJIEuHQTlfIQdotZCMQAOHPCmVlRJWt//2iN/vZKG63at kTIgzatCueHNz8di2rVcU1HNSbKOduy7BmDpWSxEly1QYwTk7FY04YWByRRx6Znf ai+gWXiyADSlwYnJQrvVWNrRsS/2eBqdrWEouXDSZ7xbMsL5gOLR5JkPCdqUiBMX +lcIquUV1yiEfihiN+q+GgLJ0y1bDRNufAST8Qc1jxosf6uN0Z1pa/G3L5KusUUs nVJ0P3KqP3rzfexOQaRRKQxQ+Qsb/EO7kF+Bt2vUey2gvCL1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYg+snDOFk9XNOyGtueOKk/JDoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvZmY4ZTFiYjQtNTE3ZC0z OGJhLTllODgtM2E2YmU0NDdkNDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz7JoII0tc8iAIsL2u+zcYLGWLPAp+mave6pUlvzCSidV3XJQjqf5aY l94th3YlXRzAVoTDfiY5dMRzz+68EfWXzxu0PLNANwdKozg53p4hdFFnEtVZzh7j 61k51Z+0UOA/K1Bp4DKPlQlSPbyyaPxNDK+/dPyTYD+XjZ2iD6BlX6uZyIxqWVyj CGQx4VLzwwSzXL7nkkl+0lZTVetk29leMkmkXRZk9ufbip/JobzfUm0jhfglMxqa z4rvL5iu5VzG8SDWijEpF3ru2HXEbLvMKPrlTsCkvACIGU4kypChHliFdz8oZbnt d431GQBJmGcr43vpCVkLAxrVObv0b4I= -----END CERTIFICATE-----Generated at Thu Nov 5 18:46:21 2026 by rpki-client