$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5249cbfa-1c70-36b9-962b-997d19036ca5.roa File: 5249cbfa-1c70-36b9-962b-997d19036ca5.roa (raw, json) Hash identifier: fQgYSzE8be1EQ0cso19zrwtGBUmKgexzB0p3qbsE4sw= Subject key identifier: 42:14:EF:F3:4D:DC:3B:E0:14:4B:49:2C:BD:DC:90:68:CD:F4:89:B8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC92325F98181285A2BCE070 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5249cbfa-1c70-36b9-962b-997d19036ca5.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 11255 IP address blocks: 64.62.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:32:5f:98:18:12:85:a2:bc:e0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=af744359-79e0-4acf-b620-4d0b5b708f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:ca:83:a6:1c:f8:0d:83:21:83:da:5d:b6: bb:b7:ea:61:03:b6:52:ba:e0:84:53:ba:db:91:13: 29:61:fd:b4:87:2c:2e:18:86:48:47:88:f1:29:ca: 70:5d:53:b6:00:bd:d0:bc:31:ac:62:a2:a7:21:0c: 70:79:bb:2b:25:db:cf:f2:5e:20:66:58:61:07:21: d2:95:03:94:d0:b8:7d:fa:bf:e4:fe:15:f4:36:8a: 2f:f4:fe:bc:b9:11:3e:e8:45:31:38:0b:ec:ad:29: c9:81:f0:40:37:e8:f0:78:f7:bc:8d:0f:51:c9:e3: 56:81:2c:9c:e3:c7:69:2d:03:8a:82:94:75:1f:b4: 42:54:55:c6:e9:e1:5e:d4:ee:a0:ff:d1:d1:c4:d4: a6:d8:10:be:46:e8:62:52:a6:d0:b5:c7:98:f3:9d: a5:6c:8a:2a:28:2a:80:a0:bb:d8:fe:ed:d4:62:89: 79:f2:1c:ae:8a:7f:77:d1:e3:ce:65:1e:3a:77:67: 34:af:3b:da:80:fa:35:9d:38:cd:58:ec:69:04:86: 67:4c:11:1f:df:cc:4f:ca:0e:23:56:7c:38:ac:03: 1b:b9:d8:19:bd:e1:de:0a:18:2e:0e:48:84:cb:94: 14:25:14:24:d5:cf:fe:a7:cc:c0:5c:79:16:4a:4d: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:14:EF:F3:4D:DC:3B:E0:14:4B:49:2C:BD:DC:90:68:CD:F4:89:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5249cbfa-1c70-36b9-962b-997d19036ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d4:3f:49:4f:5c:4a:b2:dc:44:07:b8:e6:90:38:95:ee:4b: 3c:22:03:fb:d8:c4:8a:c6:fb:b2:ff:cb:2a:46:a8:ad:1f:cc: a5:68:a0:39:fe:cb:f8:d5:64:a7:27:21:93:1a:02:77:0a:5c: c3:6d:8f:ee:54:63:ab:c5:6d:b0:e3:81:44:c9:a3:d2:d7:d9: 4b:44:aa:af:a9:54:4c:03:f2:59:15:03:00:f8:9a:3c:59:26: cf:1a:82:e9:f2:9e:3f:7c:48:5b:56:ea:8b:b9:43:1a:a5:17: 4d:cd:74:72:47:16:67:54:26:e2:b1:17:8e:b5:16:49:ee:10: 17:9f:64:8e:4a:df:e4:b1:05:30:a4:45:de:c9:56:27:f0:79: f2:ed:74:d5:b5:12:e5:dc:f5:df:0e:e5:76:ff:e3:9c:af:85: 5e:ca:47:03:87:44:8e:e4:5a:62:d1:65:b1:fe:26:3b:4e:14: 2c:ad:78:0c:c3:a7:a5:f7:22:5a:6e:07:3e:bf:89:14:b7:5b: 30:5d:0c:fe:2f:3d:fb:ad:c2:7a:08:22:e2:f4:5d:dc:a0:2b: f1:0f:5b:41:0f:84:eb:6b:81:bf:00:bf:22:55:bb:0b:53:19: b4:4c:a7:a4:ca:08:c6:83:48:79:49:c3:9f:5b:dd:27:34:6d: 34:ea:67:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckjJfmBgShaK84HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YWY3NDQzNTktNzllMC00YWNmLWI2MjAtNGQwYjViNzA4ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1PKg6Yc+A2DIYPaXba7t+phA7ZSuuCEU7rb kRMpYf20hywuGIZIR4jxKcpwXVO2AL3QvDGsYqKnIQxwebsrJdvP8l4gZlhhByHS lQOU0Lh9+r/k/hX0Noov9P68uRE+6EUxOAvsrSnJgfBAN+jwePe8jQ9RyeNWgSyc 48dpLQOKgpR1H7RCVFXG6eFe1O6g/9HRxNSm2BC+RuhiUqbQtceY852lbIoqKCqA oLvY/u3UYol58hyuin930ePOZR46d2c0rzvagPo1nTjNWOxpBIZnTBEf38xPyg4j Vnw4rAMbudgZveHeChguDkiEy5QUJRQk1c/+p8zAXHkWSk1SKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIU7/NN3DvgFEtJLL3ckGjN9Im4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTI0OWNiZmEtMWM3MC0z NmI5LTk2MmItOTk3ZDE5MDM2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfUP0lPXEqy3EQHuOaQOJXuSzwiA/vYxIrG+7L/yypGqK0fzKVooDn+ y/jVZKcnIZMaAncKXMNtj+5UY6vFbbDjgUTJo9LX2UtEqq+pVEwD8lkVAwD4mjxZ Js8agunynj98SFtW6ou5QxqlF03NdHJHFmdUJuKxF461FknuEBefZI5K3+SxBTCk Rd7JVifwefLtdNW1EuXc9d8O5Xb/45yvhV7KRwOHRI7kWmLRZbH+JjtOFCyteAzD p6X3IlpuBz6/iRS3WzBdDP4vPfutwnoIIuL0XdygK/EPW0EPhOtrgb8AvyJVuwtT GbRMp6TKCMaDSHlJw59b3Sc0bTTqZ7w= -----END CERTIFICATE-----Generated at Sat Sep 12 07:51:42 2026 by rpki-client