$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a33fe9e-b6d2-3cf4-b1f2-1bca9f86a7ae.roa File: 9a33fe9e-b6d2-3cf4-b1f2-1bca9f86a7ae.roa (raw, json) Hash identifier: VPHdLFKmMaG7VBLXTzHVcTObJI+Ni+E1NU8HHDFpOzc= Subject key identifier: 0F:9A:05:15:5A:77:EA:F6:95:ED:FD:37:3B:5F:6F:38:0B:46:31:AF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA78861223EDEDD9B52AB1C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a33fe9e-b6d2-3cf4-b1f2-1bca9f86a7ae.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27291 IP address blocks: 64.71.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:61:22:3e:de:dd:9b:52:ab:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=14f59fd8-5b2d-46b7-b3eb-0cc7f004673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:22:40:73:df:11:7f:23:48:96:e1:12:8c: 6d:4f:1e:0f:e7:fd:c7:6f:fa:8f:56:7f:10:ab:ac: 29:0b:56:87:a1:4c:c3:6a:c3:d1:d2:18:91:80:e7: ca:18:95:79:5b:f4:df:41:f3:1b:91:18:62:30:f9: 9e:8b:2f:4a:ca:a0:e2:9d:30:d0:34:28:2f:3e:84: f3:b5:9f:a9:fa:f2:64:24:c4:48:f3:c9:2b:f9:b5: 98:e0:c0:5a:e9:51:b3:61:56:bb:6c:d6:8f:97:b0: 1d:95:32:51:18:96:94:2c:42:b7:eb:6b:81:0f:59: e7:b7:6f:d8:8e:69:7a:38:0b:2d:31:48:6c:97:0a: 90:64:c3:76:01:77:77:91:c8:cb:71:1f:09:25:03: 15:39:14:79:46:b2:7a:b6:29:64:a6:15:c5:c8:fe: d3:eb:67:46:53:d1:72:e4:05:06:23:6a:8d:72:4b: 49:75:3e:6c:9a:c4:03:35:53:6b:d0:96:56:6a:66: 06:5e:3e:03:df:f0:09:e3:51:a1:e2:83:53:ae:a0: 57:51:fa:4d:fe:df:9b:04:9f:10:d9:99:c2:a8:37: 12:aa:71:c7:d5:83:af:a7:96:b6:50:93:af:3a:8a: 8d:e4:a9:bb:19:65:28:74:cd:9e:f5:c0:ee:4e:ca: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9A:05:15:5A:77:EA:F6:95:ED:FD:37:3B:5F:6F:38:0B:46:31:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a33fe9e-b6d2-3cf4-b1f2-1bca9f86a7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:09:3e:de:17:70:90:3f:a4:9e:6f:af:b4:cf:35:93:8e:3c: e3:bd:5a:8a:57:ea:e6:a4:52:39:09:32:36:f5:ea:9c:83:67: 54:03:09:a1:38:2e:48:d2:16:20:ee:88:77:94:5c:14:b0:e7: c4:92:f2:36:80:b4:73:4a:42:a5:cc:a0:92:eb:57:cc:69:dd: 2f:bb:15:8d:01:cf:4c:99:38:82:ae:b1:f7:30:72:be:35:57: 98:95:08:dc:95:d8:cc:84:32:e8:7e:bb:82:26:ee:79:39:e4: ed:30:4b:6f:00:73:d1:b5:27:39:a5:39:b4:84:f1:1a:94:e0: b3:23:b1:34:f8:f0:cf:ba:f1:e1:09:3c:d1:79:5e:38:4b:36: 62:7e:42:a9:22:b0:5f:c1:a4:10:1b:56:ad:71:1e:4f:a7:e8: a1:23:ad:5f:5d:fb:1b:63:0e:60:f3:22:58:e4:ce:38:e0:89: ea:06:d3:99:6d:3f:48:61:9a:9c:04:ab:22:3f:89:69:1e:19: 56:c8:a8:36:02:03:26:f0:8c:b7:28:b9:60:4b:a2:3c:d2:da: 51:8a:02:ad:32:64:53:44:dd:a3:f7:78:de:3d:dc:60:70:09: 2e:13:a3:af:8c:e5:bf:6b:3e:2a:77:e0:4d:0e:85:c3:9d:e5: 76:69:f3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGEiPt7dm1KrHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTRmNTlmZDgtNWIyZC00NmI3LWIzZWItMGNjN2YwMDQ2NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJoiQHPfEX8jSJbhEoxtTx4P5/3Hb/qPVn8Q q6wpC1aHoUzDasPR0hiRgOfKGJV5W/TfQfMbkRhiMPmeiy9KyqDinTDQNCgvPoTz tZ+p+vJkJMRI88kr+bWY4MBa6VGzYVa7bNaPl7AdlTJRGJaULEK362uBD1nnt2/Y jml6OAstMUhslwqQZMN2AXd3kcjLcR8JJQMVORR5RrJ6tilkphXFyP7T62dGU9Fy 5AUGI2qNcktJdT5smsQDNVNr0JZWamYGXj4D3/AJ41Gh4oNTrqBXUfpN/t+bBJ8Q 2ZnCqDcSqnHH1YOvp5a2UJOvOoqN5Km7GWUodM2e9cDuTsoGfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+aBRVad+r2le39NztfbzgLRjGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWEzM2ZlOWUtYjZkMi0z Y2Y0LWIxZjItMWJjYTlmODZhN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgJPt4XcJA/pJ5vr7TPNZOOPOO9WopX6uakUjkJMjb16pyDZ1QDCaE4 LkjSFiDuiHeUXBSw58SS8jaAtHNKQqXMoJLrV8xp3S+7FY0Bz0yZOIKusfcwcr41 V5iVCNyV2MyEMuh+u4Im7nk55O0wS28Ac9G1JzmlObSE8RqU4LMjsTT48M+68eEJ PNF5XjhLNmJ+QqkisF/BpBAbVq1xHk+n6KEjrV9d+xtjDmDzIljkzjjgieoG05lt P0hhmpwEqyI/iWkeGVbIqDYCAybwjLcouWBLojzS2lGKAq0yZFNE3aP3eN493GBw CS4To6+M5b9rPip34E0OhcOd5XZp81k= -----END CERTIFICATE-----Generated at Sat Aug 1 01:46:38 2026 by rpki-client