$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa File: 8cee6d96-8f05-3001-b70b-2095f26a99d4.roa (raw, json) Hash identifier: 2I+lQb/kJ2yMFkWQJ9YRTx4U84mQpm789Ma+PN1qrH8= Subject key identifier: 14:83:27:EA:20:F7:49:5A:83:FD:83:57:FB:75:61:C0:1A:E0:64:4B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7E01F9A8C925DC8016CD00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398885 IP address blocks: 65.49.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:01:f9:a8:c9:25:dc:80:16:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=c764d8fb-818c-4151-a962-e12592634697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7b:02:1b:77:65:af:bc:53:34:79:48:c7:b0: 7b:4e:70:5d:99:ad:8d:29:2d:f2:e0:54:3a:f4:0d: 8e:b4:62:b2:14:78:5d:66:74:75:20:39:96:53:93: eb:47:98:da:49:93:d7:09:dd:8f:4f:cd:c5:e5:9e: 99:f0:15:08:49:d2:f4:36:2c:c5:cd:a8:ed:b5:21: c4:55:82:ef:b2:8c:0e:45:08:3c:13:e4:f6:15:89: 92:3e:96:c2:97:7a:16:c2:4f:d7:d0:f4:17:a1:be: ed:ca:60:f3:53:97:89:1a:54:a5:d5:c6:37:87:95: 63:4d:bb:ac:3f:a2:be:c8:bd:da:af:af:02:b8:f1: 6a:a0:f9:88:4b:c5:3f:39:c6:54:a2:5b:93:9d:ae: fe:7a:13:0e:66:65:9b:fb:69:b8:10:c2:c8:c1:9e: 06:35:b4:39:7e:7f:9e:62:bc:a7:87:56:5a:98:fe: 7f:b2:54:96:39:64:c5:c4:20:e2:d0:ce:82:c5:cc: f9:ef:40:b9:42:f7:67:97:5f:34:42:c9:0a:12:ab: e8:43:93:08:d3:dc:92:34:97:93:ab:13:18:ea:84: 4c:85:12:ae:a8:8d:9a:1d:7b:f0:a6:9d:bd:55:13: e8:b2:0a:c0:d4:85:5a:aa:6f:94:0e:bf:f2:97:9e: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:83:27:EA:20:F7:49:5A:83:FD:83:57:FB:75:61:C0:1A:E0:64:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8cee6d96-8f05-3001-b70b-2095f26a99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:22:1e:07:63:58:15:48:27:d8:7a:45:3e:c6:01:f3:16:0c: d6:2f:79:63:c0:06:20:06:cd:21:0b:86:22:ab:8a:48:35:14: 83:ef:f7:9f:f9:67:58:e8:59:4a:92:c7:7d:5b:d0:20:c6:07: 1f:cc:ab:e6:9c:43:11:6e:e7:54:96:87:45:68:2d:a9:ad:9c: f1:73:49:4d:3f:b4:22:c6:a8:32:1e:98:11:1c:10:5a:d8:20: 46:3c:0f:70:ce:66:6e:8d:aa:8d:7c:a1:e8:db:c5:ac:e7:31: f1:51:e0:6a:b1:cb:cb:35:b9:8c:3b:d1:d7:58:a5:78:79:22: f7:00:6b:c1:e6:4b:c4:b3:36:c3:42:89:73:87:88:56:17:b5: 66:13:1d:ac:31:f7:18:3d:71:63:a5:1a:8f:5d:b4:b9:95:fb: 86:f7:6e:68:2a:e5:0b:55:dd:cb:dd:20:2c:96:dc:1d:e8:0d: d5:58:fa:b3:cb:29:8a:84:85:3d:b2:cb:97:ff:16:d9:5b:78: 6f:66:ca:ab:ed:fb:fd:76:57:23:25:5f:42:56:1a:d1:47:f2: b5:f9:1e:f5:de:16:ab:91:ad:06:3e:14:8e:7d:0e:9e:1b:2c: 08:f6:11:cd:54:e2:4c:d2:2e:4e:f5:a4:b7:93:62:9a:be:6d: 6f:a5:65:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgH5qMkl3IAWzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Yzc2NGQ4ZmItODE4Yy00MTUxLWE5NjItZTEyNTkyNjM0Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3sCG3dlr7xTNHlIx7B7TnBdma2NKS3y4FQ6 9A2OtGKyFHhdZnR1IDmWU5PrR5jaSZPXCd2PT83F5Z6Z8BUISdL0NizFzajttSHE VYLvsowORQg8E+T2FYmSPpbCl3oWwk/X0PQXob7tymDzU5eJGlSl1cY3h5VjTbus P6K+yL3ar68CuPFqoPmIS8U/OcZUoluTna7+ehMOZmWb+2m4EMLIwZ4GNbQ5fn+e Yrynh1ZamP5/slSWOWTFxCDi0M6Cxcz570C5Qvdnl180QskKEqvoQ5MI09ySNJeT qxMY6oRMhRKuqI2aHXvwpp29VRPosgrA1IVaqm+UDr/yl54HqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSDJ+og90lag/2DV/t1YcAa4GRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGNlZTZkOTYtOGYwNS0z MDAxLWI3MGItMjA5NWYyNmE5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsiHgdjWBVIJ9h6RT7GAfMWDNYveWPABiAGzSELhiKrikg1FIPv95/5 Z1joWUqSx31b0CDGBx/Mq+acQxFu51SWh0VoLamtnPFzSU0/tCLGqDIemBEcEFrY IEY8D3DOZm6Nqo18oejbxaznMfFR4Gqxy8s1uYw70ddYpXh5IvcAa8HmS8SzNsNC iXOHiFYXtWYTHawx9xg9cWOlGo9dtLmV+4b3bmgq5QtV3cvdICyW3B3oDdVY+rPL KYqEhT2yy5f/FtlbeG9myqvt+/12VyMlX0JWGtFH8rX5HvXeFquRrQY+FI59Dp4b LAj2Ec1U4kzSLk71pLeTYpq+bW+lZXA= -----END CERTIFICATE-----Generated at Mon Nov 2 06:57:36 2026 by rpki-client