$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa File: 7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa (raw, json) Hash identifier: JasFxEwgYA4VkAtYzwX2ydptiF0QNS/pT7X8hEkJ8yI= Subject key identifier: C2:9C:EC:6C:3C:70:BA:A7:C4:A6:15:43:B9:51:A1:64:83:76:A9:0B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDA394D1B4D8D0E31F850 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 394996 IP address blocks: 64.71.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:da:39:4d:1b:4d:8d:0e:31:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7de00f55-4d90-4373-9d99-7211610f5d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:a4:cc:26:2e:77:6f:a6:3e:c2:25:73:17: a3:a5:ef:02:fe:7f:ea:89:4b:36:8b:c5:62:ce:73: 5e:19:31:56:8e:64:25:80:ff:3d:e0:2e:7f:5d:b9: 41:4b:1b:b1:0a:99:51:93:eb:73:ac:f7:96:b7:04: c8:fa:c7:53:fc:95:a1:39:63:57:c2:4a:5d:73:ea: 78:fa:d3:e6:ac:8c:17:2c:e7:b4:c4:d8:ee:05:1f: db:b0:ce:e2:c3:0d:7b:8d:13:25:bd:bf:ab:2c:67: 32:43:76:84:04:2b:fd:3f:79:58:51:fe:5f:eb:fb: 41:32:f8:52:37:cd:e1:dc:84:d7:58:64:8c:50:68: f1:ef:41:86:83:58:93:ab:af:0f:36:6e:96:a6:73: 99:21:cb:a0:f0:a3:4e:85:96:71:be:e0:46:ba:e5: 4b:2c:d8:ab:e9:2b:be:6b:8e:86:bd:cf:f5:eb:8d: 46:86:39:b6:bb:31:d1:83:3c:bb:b9:6a:c9:53:72: 8d:51:ee:ca:92:38:7c:4c:57:bd:02:2b:b8:95:df: 1e:bf:f4:66:c7:cd:25:27:6d:10:a0:71:e1:0d:a7: 21:8e:e4:85:b3:47:26:c4:1e:20:8d:25:bc:fa:de: 9f:81:b7:d1:9a:16:e6:e8:c4:f2:66:1c:b6:61:61: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:EC:6C:3C:70:BA:A7:C4:A6:15:43:B9:51:A1:64:83:76:A9:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f0bbfbd-09fb-3607-80dc-69d3d224e893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:24:0d:c6:2b:36:40:62:c4:27:54:4b:b5:d2:7b:5b:4f:91: ac:11:12:e0:b5:a4:5b:16:68:92:fd:9d:25:6e:a1:59:a8:4c: 09:80:8a:3b:58:37:86:de:a0:48:8f:4b:1a:14:71:52:fe:7d: 72:96:17:94:63:29:bb:e7:40:5a:00:6e:ba:f2:33:d9:41:79: 9e:8e:5b:43:48:45:0f:33:2b:f1:f1:a3:b2:07:bf:c3:63:b8: 3e:2e:68:23:2f:b6:b1:e6:0d:4b:26:dc:ad:ab:ba:61:57:24: 34:22:d1:af:7b:4d:21:0a:9d:19:8c:b7:fe:d4:bc:eb:b4:af: 73:d8:67:ef:f1:d4:de:b0:0c:28:b6:f4:1c:99:07:95:07:08: 59:76:9b:5e:04:ad:f7:9d:2b:a0:0c:88:ee:fa:db:69:4d:f4: 7e:1d:27:19:62:f7:58:3c:6a:4c:8e:d9:38:03:6a:b2:33:f9: 52:99:f3:15:b9:3f:84:26:94:10:c2:00:f5:dd:3e:96:19:85: 11:f7:ba:35:ef:da:52:61:05:1b:99:b0:24:38:49:ea:fe:91: 14:60:e2:13:08:bc:b9:39:e5:69:3b:7b:ca:f2:12:b5:7d:bf: 30:9c:c0:16:27:77:77:fb:d9:bf:1f:72:a1:3e:81:64:2d:51: b1:00:74:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdo5TRtNjQ4x+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2RlMDBmNTUtNGQ5MC00MzczLTlkOTktNzIxMTYxMGY1ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwSkzCYud2+mPsIlcxejpe8C/n/qiUs2i8Vi znNeGTFWjmQlgP894C5/XblBSxuxCplRk+tzrPeWtwTI+sdT/JWhOWNXwkpdc+p4 +tPmrIwXLOe0xNjuBR/bsM7iww17jRMlvb+rLGcyQ3aEBCv9P3lYUf5f6/tBMvhS N83h3ITXWGSMUGjx70GGg1iTq68PNm6WpnOZIcug8KNOhZZxvuBGuuVLLNir6Su+ a46Gvc/1641Ghjm2uzHRgzy7uWrJU3KNUe7Kkjh8TFe9Aiu4ld8ev/Rmx80lJ20Q oHHhDachjuSFs0cmxB4gjSW8+t6fgbfRmhbm6MTyZhy2YWERrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKc7Gw8cLqnxKYVQ7lRoWSDdqkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2YwYmJmYmQtMDlmYi0z NjA3LTgwZGMtNjlkM2QyMjRlODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHckDcYrNkBixCdUS7XSe1tPkawREuC1pFsWaJL9nSVuoVmoTAmAijtY N4beoEiPSxoUcVL+fXKWF5RjKbvnQFoAbrryM9lBeZ6OW0NIRQ8zK/Hxo7IHv8Nj uD4uaCMvtrHmDUsm3K2rumFXJDQi0a97TSEKnRmMt/7UvOu0r3PYZ+/x1N6wDCi2 9ByZB5UHCFl2m14ErfedK6AMiO7622lN9H4dJxli91g8akyO2TgDarIz+VKZ8xW5 P4QmlBDCAPXdPpYZhRH3ujXv2lJhBRuZsCQ4Ser+kRRg4hMIvLk55Wk7e8ryErV9 vzCcwBYnd3f72b8fcqE+gWQtUbEAdDA= -----END CERTIFICATE-----Generated at Sun Nov 15 17:23:20 2026 by rpki-client