$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa File: 5ce95d88-4915-3894-be6c-f8889531841e.roa (raw, json) Hash identifier: RdI1f35AipFLphSy3LZMPkWcN9V/Zl3uFz9ppM2Ngpk= Subject key identifier: 36:32:2D:6B:8D:84:8D:8C:0B:C9:85:04:A2:AA:95:E0:00:F7:52:CF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EDC9236C7B5EA8E7D582FC400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 53813 IP address blocks: 64.62.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:36:c7:b5:ea:8e:7d:58:2f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=3c21fe04-9af3-44e5-b2d5-d32267ac1d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:2b:5e:a2:c5:5e:cf:52:43:34:1e:fb:51: a6:40:1c:91:02:a3:aa:60:d7:ed:f3:34:a8:a8:03: f9:c7:03:0a:88:be:63:0a:c4:fe:b4:de:7a:3c:25: 79:83:ac:b7:3f:c7:bc:63:5a:f4:97:a9:b3:e7:fe: 6c:7e:56:54:31:e3:05:7f:8a:ca:c4:9a:50:55:7c: 98:df:84:c1:71:db:f8:4b:22:c1:77:ee:3c:b6:9f: 4f:ee:ad:a7:41:ac:35:a2:21:94:69:b3:6b:00:09: ed:75:9a:cc:fb:fb:f9:4e:4b:fb:4c:f2:c3:fb:79: 00:b7:39:58:85:2e:e3:2e:cf:39:9b:db:13:5a:65: 16:bc:b7:ab:1a:e7:9d:61:1e:1c:9b:bc:5e:40:00: 69:27:98:17:78:5f:80:2f:c1:f4:f5:41:a8:91:77: d1:69:07:4e:7f:21:3c:a1:30:92:82:b0:44:58:fe: 10:bd:19:18:82:0c:9c:d3:56:1c:e8:84:fe:ef:22: e2:f4:84:f3:6b:72:e3:b2:78:ba:61:96:60:e9:a4: bf:09:3d:6b:21:28:1f:f0:36:45:56:b9:7b:21:f7: 5b:86:c4:14:e3:c9:fc:27:be:d5:4b:94:9b:86:db: f6:21:31:36:86:a3:56:4b:f5:76:3b:7e:d4:86:c3: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:2D:6B:8D:84:8D:8C:0B:C9:85:04:A2:AA:95:E0:00:F7:52:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:74:42:b5:68:03:0d:5a:75:6d:cf:3e:59:3a:4d:97:7d:04: 70:6e:8b:58:5b:a9:95:e4:5a:b4:e7:aa:e1:7b:2b:8c:e1:86: fe:de:d7:cf:5b:11:22:20:83:9d:d1:ea:c1:00:47:62:97:0c: 84:2d:9c:a0:b5:73:6d:e7:25:cb:5e:20:05:5e:0e:21:e9:85: bf:63:d5:f0:a9:13:24:20:52:f0:6a:fa:e2:29:7b:78:9f:20: 3b:5b:d3:a8:b9:f3:c1:53:d2:2c:69:19:06:fc:f5:94:9a:63: 34:84:36:9d:0e:0a:e7:e7:e1:f5:79:1f:4a:67:87:71:2f:61: 9a:fb:c5:7e:9d:ed:af:f1:85:b2:1d:b4:7b:10:4c:60:22:ca: 23:a7:34:e6:3f:b6:61:30:97:0a:7a:f4:47:45:c5:4d:dc:dd: e8:f1:1c:42:88:b4:91:04:25:9d:d4:67:f4:73:d6:37:ba:72: af:49:ff:18:06:cd:c0:21:0d:6f:0a:25:84:e7:7f:b0:4a:72: ba:aa:13:70:78:8e:5d:89:79:d7:eb:5f:eb:e1:47:eb:cc:bf: fc:10:91:50:98:1a:a6:69:80:45:11:65:16:52:84:72:2e:41: 01:f1:c5:e4:60:e2:95:c9:31:15:dc:a7:bd:ff:b1:62:51:ed: fa:1d:2e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckjbHteqOfVgvxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk M2MyMWZlMDQtOWFmMy00NGU1LWIyZDUtZDMyMjY3YWMxZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQrXqLFXs9SQzQe+1GmQByRAqOqYNft8zSo qAP5xwMKiL5jCsT+tN56PCV5g6y3P8e8Y1r0l6mz5/5sflZUMeMFf4rKxJpQVXyY 34TBcdv4SyLBd+48tp9P7q2nQaw1oiGUabNrAAntdZrM+/v5Tkv7TPLD+3kAtzlY hS7jLs85m9sTWmUWvLerGuedYR4cm7xeQABpJ5gXeF+AL8H09UGokXfRaQdOfyE8 oTCSgrBEWP4QvRkYggyc01Yc6IT+7yLi9ITza3Ljsni6YZZg6aS/CT1rISgf8DZF Vrl7IfdbhsQU48n8J77VS5Sbhtv2ITE2hqNWS/V2O37UhsOFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYyLWuNhI2MC8mFBKKqleAA91LPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWNlOTVkODgtNDkxNS0z ODk0LWJlNmMtZjg4ODk1MzE4NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh0QrVoAw1adW3PPlk6TZd9BHBui1hbqZXkWrTnquF7K4zhhv7e189b ESIgg53R6sEAR2KXDIQtnKC1c23nJcteIAVeDiHphb9j1fCpEyQgUvBq+uIpe3if IDtb06i588FT0ixpGQb89ZSaYzSENp0OCufn4fV5H0pnh3EvYZr7xX6d7a/xhbId tHsQTGAiyiOnNOY/tmEwlwp69EdFxU3c3ejxHEKItJEEJZ3UZ/Rz1je6cq9J/xgG zcAhDW8KJYTnf7BKcrqqE3B4jl2JedfrX+vhR+vMv/wQkVCYGqZpgEURZRZShHIu QQHxxeRg4pXJMRXcp73/sWJR7fodLhA= -----END CERTIFICATE-----Generated at Sat Sep 12 07:53:23 2026 by rpki-client