$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4af8e1e9-7d3a-3fa9-9a92-d056e09cf439.roa File: 4af8e1e9-7d3a-3fa9-9a92-d056e09cf439.roa (raw, json) Hash identifier: PNoQ1B/XCNONyP69s0jCPAmL0xQrHK/gIBKWWh6CNKU= Subject key identifier: F1:78:1B:C8:90:39:05:57:E2:06:37:51:8C:84:B0:D8:AE:E7:FD:1E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F9C445549B17DB30C1D338D00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4af8e1e9-7d3a-3fa9-9a92-d056e09cf439.roa Signing time: Sat 24 Oct 2026 16:59:14 +0000 ROA not before: Sat 24 Oct 2026 16:59:14 +0000 ROA not after: Fri 22 Jan 2027 17:59:14 +0000 asID: 218911 IP address blocks: 64.204.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9c:44:55:49:b1:7d:b3:0c:1d:33:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 24 16:59:14 2026 GMT Not After : Jan 22 17:59:14 2027 GMT Subject: CN=13314fc7-b562-417e-8d40-364254542ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e2:b0:db:21:8d:25:c2:6b:27:12:b2:5b:b0: 8e:1a:45:6d:09:58:89:17:53:1e:4d:4f:ea:27:da: 76:43:0e:f1:b3:0f:92:fd:66:14:f5:b5:3a:a8:85: 54:fb:d4:8b:c5:8f:99:9e:37:65:8f:51:ac:39:16: 47:01:eb:83:df:de:a7:e3:d9:87:56:12:94:bb:b1: 32:d6:27:13:83:6e:da:18:90:0b:ba:bc:9d:e5:29: 83:f9:7d:20:65:d4:58:28:bb:cb:ad:a4:86:67:f3: c0:22:28:30:6e:c5:20:58:ab:e9:90:14:7a:5a:46: 13:ba:7f:19:9d:72:a2:59:b4:29:31:1c:c7:32:c1: 2e:68:a7:2f:c7:77:3c:51:a1:a1:b6:0b:a5:d9:ab: 12:dc:2a:fc:be:67:49:63:2a:bb:16:b2:d4:74:89: 6c:a6:ef:43:79:b6:4e:e6:57:84:11:89:44:44:c6: 6c:b2:09:07:f5:a6:58:7b:57:9c:b8:ae:11:35:3d: 30:e2:3b:01:d7:e5:67:e7:7d:69:8b:16:fc:aa:5c: 4a:b8:4b:27:c6:a6:a2:3c:6d:98:10:f2:a2:a5:09: 12:df:a2:6b:48:23:5b:87:c0:84:12:13:d7:e4:80: 4e:1f:f0:4f:e6:2b:7b:05:36:05:3e:fc:23:52:43: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:78:1B:C8:90:39:05:57:E2:06:37:51:8C:84:B0:D8:AE:E7:FD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4af8e1e9-7d3a-3fa9-9a92-d056e09cf439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:76:15:1c:bf:c8:9f:48:65:d8:94:0b:74:58:41:04:55:19: d3:d0:5b:79:84:92:da:00:b2:42:ae:06:a5:94:40:2f:3d:8f: 60:f5:4f:30:eb:d8:e6:30:d3:41:89:93:93:b6:8c:40:3c:b2: 29:fb:ca:c4:b8:24:a4:c0:e1:14:9c:e1:74:49:53:5b:2d:b3: c2:72:4b:b0:37:8a:ca:75:33:54:4d:ad:9d:3d:90:f7:25:6a: 3e:68:0a:43:02:ea:22:b0:74:e5:75:11:2f:7a:21:e8:39:d5: dc:1a:8b:1e:09:2e:d6:01:06:fe:f2:72:2e:76:9a:72:cf:2d: fc:a5:31:a4:67:7d:0a:e3:b3:74:ce:5e:c3:22:18:8a:eb:27: 81:9e:41:bf:05:2b:a2:eb:e8:ab:b8:32:54:3d:21:80:49:37: 9e:3f:ce:ee:9c:d9:aa:ab:33:ec:14:e4:cc:fd:87:86:32:8a: 83:ad:66:ff:55:f6:f0:a4:af:38:ad:13:4b:a3:8f:c7:68:79: 77:98:42:ec:b5:93:80:5e:cf:16:d6:32:b2:06:1d:d2:55:0b: 69:5b:8a:96:d3:4c:7a:b1:b8:35:8c:fa:9e:3d:04:50:44:67: 42:95:c4:96:2d:d6:5a:e0:bc:62:9c:60:77:9a:45:11:88:ed: 96:79:4f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+cRFVJsX2zDB0zjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MTAyNDE2NTkxNFoXDTI3MDEyMjE3NTkxNFowLzEtMCsGA1UEAxMk MTMzMTRmYzctYjU2Mi00MTdlLThkNDAtMzY0MjU0NTQyZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eKw2yGNJcJrJxKyW7COGkVtCViJF1MeTU/q J9p2Qw7xsw+S/WYU9bU6qIVU+9SLxY+Znjdlj1GsORZHAeuD396n49mHVhKUu7Ey 1icTg27aGJALuryd5SmD+X0gZdRYKLvLraSGZ/PAIigwbsUgWKvpkBR6WkYTun8Z nXKiWbQpMRzHMsEuaKcvx3c8UaGhtgul2asS3Cr8vmdJYyq7FrLUdIlspu9DebZO 5leEEYlERMZssgkH9aZYe1ecuK4RNT0w4jsB1+Vn531pixb8qlxKuEsnxqaiPG2Y EPKipQkS36JrSCNbh8CEEhPX5IBOH/BP5it7BTYFPvwjUkMrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF4G8iQOQVX4gY3UYyEsNiu5/0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGFmOGUxZTktN2QzYS0z ZmE5LTlhOTItZDA1NmUwOWNmNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL52FRy/yJ9IZdiUC3RYQQRVGdPQW3mEktoAskKuBqWUQC89j2D1TzDr 2OYw00GJk5O2jEA8sin7ysS4JKTA4RSc4XRJU1sts8JyS7A3isp1M1RNrZ09kPcl aj5oCkMC6iKwdOV1ES96Ieg51dwaix4JLtYBBv7yci52mnLPLfylMaRnfQrjs3TO XsMiGIrrJ4GeQb8FK6Lr6Ku4MlQ9IYBJN54/zu6c2aqrM+wU5Mz9h4YyioOtZv9V 9vCkrzitE0ujj8doeXeYQuy1k4BezxbWMrIGHdJVC2lbipbTTHqxuDWM+p49BFBE Z0KVxJYt1lrgvGKcYHeaRRGI7ZZ5TxM= -----END CERTIFICATE-----Generated at Sun Oct 25 16:37:36 2026 by rpki-client