$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/029afc75-5c70-332f-8c47-75a462de58ac.roa File: 029afc75-5c70-332f-8c47-75a462de58ac.roa (raw, json) Hash identifier: Xbz9ypXT9QW+WyjHkAj0071sOwgwEYOLoGlX2VQeERc= Subject key identifier: 9D:4B:63:7F:79:31:BE:DA:58:89:ED:55:AF:FC:32:FC:D5:98:A5:A4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDA50A84B34FCC6818D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/029afc75-5c70-332f-8c47-75a462de58ac.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 394996 IP address blocks: 65.49.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:da:50:a8:4b:34:fc:c6:81:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7e9dfec1-a2d6-46d8-8cb4-a6d934f89e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:28:68:27:60:6d:d2:e7:ec:e5:2d:ec:4c: ba:46:1d:c1:8c:dc:42:f0:3a:c2:a0:fe:32:8f:bb: f4:34:39:64:cc:dc:0c:3b:ea:96:4e:b4:42:f5:15: 6a:1d:e7:ac:a3:e8:69:76:2f:40:3b:67:97:8e:1e: dd:e2:79:b7:80:25:80:28:50:c2:19:1d:71:54:be: a2:71:47:dc:de:a4:ce:51:84:29:8b:ea:e6:7d:34: b2:4e:15:94:9d:f7:3b:92:e4:d7:ee:82:3d:3d:3b: 82:ac:50:08:b9:f8:b3:86:3a:dd:a5:22:20:a1:06: 6a:d7:85:8f:db:60:a5:e1:4c:5d:d6:71:c0:95:1b: 64:50:95:b4:75:7b:f9:f4:bc:9e:99:e0:68:f4:65: e3:5b:ff:29:54:5b:ff:de:ea:45:91:9b:e3:8f:b7: a5:b1:7b:d8:64:a3:a8:cc:06:43:cc:8d:f2:43:22: 0a:7c:81:0a:8f:31:14:f1:68:db:07:6c:8c:8a:91: 70:bb:d6:46:58:f9:3d:76:e7:65:ce:b3:a3:77:c5: c4:09:54:c1:b2:ca:32:4e:ee:35:be:04:79:dc:92: 31:98:dc:7e:bd:07:f7:39:aa:c7:43:ed:43:8a:dd: b2:35:5e:de:4a:35:66:eb:bf:c6:60:96:49:3c:3b: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:63:7F:79:31:BE:DA:58:89:ED:55:AF:FC:32:FC:D5:98:A5:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/029afc75-5c70-332f-8c47-75a462de58ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2d:0d:b9:02:72:95:65:e9:af:b5:84:29:f4:f1:a2:39:4e: 22:b5:04:b2:e4:8d:af:02:27:5c:9a:3b:87:b8:99:91:97:c6: b5:7f:00:38:3e:3a:3b:5a:5f:76:50:cd:7f:10:be:65:7e:7e: 84:ad:fe:dd:5f:2f:4d:d0:54:50:e1:0d:0d:61:59:72:6c:2c: 13:db:8b:46:24:a7:87:b2:01:5f:a7:bc:28:d3:65:dc:63:fa: 65:5d:01:9a:3d:7a:b7:4f:2c:4d:45:f0:d9:de:db:42:cc:b6: a4:ff:f4:29:2b:28:5a:f8:0c:14:19:0a:04:cb:9e:5a:35:07: 13:e7:b5:65:10:ff:1c:4a:5c:43:89:c7:51:7f:43:b2:d3:41: a4:c4:d8:27:47:53:7e:fd:3f:a1:9d:a6:cf:6c:f7:b8:29:a2: 6c:3c:86:b3:0f:ce:80:6e:38:5f:10:b4:67:1a:79:59:93:43: e0:95:e6:c1:6e:2f:f6:df:d9:a2:7c:a4:9f:0b:33:34:2d:8b: 4b:b9:e4:e1:ba:77:f9:6d:16:19:39:ad:6d:80:0b:39:39:27: 3d:99:b8:22:fa:5d:59:08:7c:a6:41:71:fa:8a:97:94:c5:6b: 9b:79:39:c1:c4:23:1c:6d:74:f7:4b:1a:eb:25:ae:6f:c2:6c: 5c:5b:cc:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdpQqEs0/MaBjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2U5ZGZlYzEtYTJkNi00NmQ4LThjYjQtYTZkOTM0Zjg5ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9soaCdgbdLn7OUt7Ey6Rh3BjNxC8DrCoP4y j7v0NDlkzNwMO+qWTrRC9RVqHeeso+hpdi9AO2eXjh7d4nm3gCWAKFDCGR1xVL6i cUfc3qTOUYQpi+rmfTSyThWUnfc7kuTX7oI9PTuCrFAIufizhjrdpSIgoQZq14WP 22Cl4Uxd1nHAlRtkUJW0dXv59LyemeBo9GXjW/8pVFv/3upFkZvjj7elsXvYZKOo zAZDzI3yQyIKfIEKjzEU8WjbB2yMipFwu9ZGWPk9dudlzrOjd8XECVTBssoyTu41 vgR53JIxmNx+vQf3OarHQ+1Dit2yNV7eSjVm67/GYJZJPDu+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1LY395Mb7aWIntVa/8MvzVmKWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI5YWZjNzUtNWM3MC0z MzJmLThjNDctNzVhNDYyZGU1OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYtDbkCcpVl6a+1hCn08aI5TiK1BLLkja8CJ1yaO4e4mZGXxrV/ADg+ OjtaX3ZQzX8QvmV+foSt/t1fL03QVFDhDQ1hWXJsLBPbi0Ykp4eyAV+nvCjTZdxj +mVdAZo9erdPLE1F8Nne20LMtqT/9CkrKFr4DBQZCgTLnlo1BxPntWUQ/xxKXEOJ x1F/Q7LTQaTE2CdHU379P6Gdps9s97gpomw8hrMPzoBuOF8QtGcaeVmTQ+CV5sFu L/bf2aJ8pJ8LMzQti0u55OG6d/ltFhk5rW2ACzk5Jz2ZuCL6XVkIfKZBcfqKl5TF a5t5OcHEIxxtdPdLGuslrm/CbFxbzIo= -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:35 2026 by rpki-client