$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e3c67d-a935-3fd8-baae-ea4a4f3bec26.roa File: 20e3c67d-a935-3fd8-baae-ea4a4f3bec26.roa (raw, json) Hash identifier: LxpiPF2bGlIUhQ5X2rdbUi44kripqftXePvL9w6o7tA= Subject key identifier: 8C:32:D8:8C:95:6B:EC:77:3C:DF:19:BB:63:A7:3D:BE:1B:94:22:93 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDCBE67408F33E37F9440 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e3c67d-a935-3fd8-baae-ea4a4f3bec26.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 63141 IP address blocks: 64.62.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:dc:be:67:40:8f:33:e3:7f:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=789c6a9f-3ef3-4a71-89ab-e9b83aa9fc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:01:20:e7:ac:50:d1:01:82:c8:d4:4a:16: 79:ee:46:cc:a0:54:6e:89:c0:aa:58:c6:6b:b7:cd: 83:f3:09:9b:c9:b8:c2:bf:b0:ac:28:6c:96:9a:55: b8:10:17:a7:3a:cb:dc:60:54:bc:c2:aa:51:f5:6b: ed:ec:17:5d:48:49:55:ef:31:66:a7:d8:91:31:d2: b6:46:20:cf:54:8e:e2:34:83:e6:0d:63:b8:12:d4: 72:9c:b7:ed:ec:5e:01:75:a8:2f:ff:84:0e:47:fb: 93:5f:ad:a4:86:e6:16:ab:a0:56:2e:52:c5:a0:0c: a7:e0:4d:f0:be:c3:ef:e0:9f:3c:3e:37:ea:25:f9: 93:76:fd:50:02:20:c5:ce:f2:17:60:a2:96:0c:b6: 76:43:03:42:af:a0:a2:f0:33:33:48:b0:3b:cc:3d: e5:8d:94:c9:f9:14:d1:05:ff:94:b2:a8:70:b3:f4: 82:a7:b4:b9:40:9c:b6:79:77:20:53:16:c2:6a:6a: a2:ab:1c:ab:b0:9f:29:5f:51:7b:d1:b1:e8:92:21: 9c:d5:9b:06:54:88:ac:d4:8e:b4:06:01:e4:5f:54: 2a:cb:18:aa:80:60:40:e3:93:d1:e0:38:cb:25:17: 44:b0:4c:7c:0e:0c:98:33:2d:8f:7a:60:a7:ba:f8: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:D8:8C:95:6B:EC:77:3C:DF:19:BB:63:A7:3D:BE:1B:94:22:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e3c67d-a935-3fd8-baae-ea4a4f3bec26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:d5:80:55:cb:79:2b:f5:ab:77:a8:37:5f:4e:99:58:7a:4a: 74:64:12:a2:20:93:d2:6e:90:9c:0b:f2:6a:a1:e6:4c:3f:b6: 72:a5:aa:76:7a:47:7b:cb:a4:52:ab:1d:4a:6b:be:f4:a5:9f: d0:69:79:f8:db:c4:f8:c0:39:32:21:07:53:db:f3:ba:d0:b6: 63:6c:9d:7d:cc:ce:6d:c5:3c:ca:98:44:4c:0f:47:18:39:6f: 57:06:6a:e5:5f:59:6c:b9:91:ee:08:9a:ca:6e:37:63:fe:af: ee:77:8b:89:cb:ac:9e:61:13:0b:a0:34:27:41:1f:72:26:5e: e4:26:a6:47:6d:4f:87:34:06:98:1c:53:b9:e1:ef:31:3a:41: 16:b1:22:8c:c5:6f:ce:02:fe:10:3b:28:0d:24:a7:70:54:60: 23:11:7d:21:ff:f8:50:ef:ec:ef:4e:f1:62:a6:38:ae:1f:af: c8:b1:2e:54:f3:ca:28:c0:c9:51:b6:03:46:20:b4:67:aa:ec: b8:8e:62:e3:b0:9a:89:f3:0c:34:4f:a4:55:7c:d4:b2:85:5c: e4:47:0a:06:2c:bb:9d:40:d2:f3:96:16:e4:41:b6:b9:22:4b: c5:c8:b2:bb:fb:7d:55:e8:6a:c8:e8:89:44:1f:0c:18:34:77: ba:18:21:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdy+Z0CPM+N/lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Nzg5YzZhOWYtM2VmMy00YTcxLTg5YWItZTliODNhYTlmYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT8BIOesUNEBgsjUShZ57kbMoFRuicCqWMZr t82D8wmbybjCv7CsKGyWmlW4EBenOsvcYFS8wqpR9Wvt7BddSElV7zFmp9iRMdK2 RiDPVI7iNIPmDWO4EtRynLft7F4Bdagv/4QOR/uTX62khuYWq6BWLlLFoAyn4E3w vsPv4J88PjfqJfmTdv1QAiDFzvIXYKKWDLZ2QwNCr6Ci8DMzSLA7zD3ljZTJ+RTR Bf+Usqhws/SCp7S5QJy2eXcgUxbCamqiqxyrsJ8pX1F70bHokiGc1ZsGVIis1I60 BgHkX1QqyxiqgGBA45PR4DjLJRdEsEx8DgyYMy2PemCnuvhOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwy2IyVa+x3PN8Zu2OnPb4blCKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjBlM2M2N2QtYTkzNS0z ZmQ4LWJhYWUtZWE0YTRmM2JlYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrVgFXLeSv1q3eoN19OmVh6SnRkEqIgk9JukJwL8mqh5kw/tnKlqnZ6 R3vLpFKrHUprvvSln9BpefjbxPjAOTIhB1Pb87rQtmNsnX3Mzm3FPMqYREwPRxg5 b1cGauVfWWy5ke4ImspuN2P+r+53i4nLrJ5hEwugNCdBH3ImXuQmpkdtT4c0Bpgc U7nh7zE6QRaxIozFb84C/hA7KA0kp3BUYCMRfSH/+FDv7O9O8WKmOK4fr8ixLlTz yijAyVG2A0YgtGeq7LiOYuOwmonzDDRPpFV81LKFXORHCgYsu51A0vOWFuRBtrki S8XIsrv7fVXoasjoiUQfDBg0d7oYIUM= -----END CERTIFICATE-----Generated at Sun Oct 25 20:08:29 2026 by rpki-client