$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa File: b344852c-5598-346a-94d4-31f24b95426b.roa (raw, json) Hash identifier: zg1ZRgArYZds0SJjEFgPL2QU3hh6LI4y/UpAC5DmJDo= Subject key identifier: 48:7B:2A:FB:50:C7:CF:61:0A:44:CF:85:10:B8:13:6A:6F:E5:E1:6B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF5B318ADAD5F4477D100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 54288 IP address blocks: 64.62.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f5:b3:18:ad:ad:5f:44:77:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=00a31e1d-40da-4eb7-bfe2-0062b55c4c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:a0:b6:80:84:25:9a:d9:70:11:3b:7a:fa: c1:45:2d:a2:f2:b3:16:06:38:27:5f:8a:0b:d0:4b: c5:57:0c:64:8a:8c:e9:fa:1c:da:ad:96:07:9e:47: ca:88:8d:cb:76:4c:60:9a:67:78:89:3f:c8:9e:00: d7:05:6e:5d:09:43:64:26:77:f7:9a:ba:a6:c2:a5: fe:64:00:be:71:b4:0d:c0:60:73:18:66:05:4b:ec: 26:55:ba:ef:fc:d1:08:b4:0b:13:53:0b:1f:f4:0c: 21:b9:52:2e:03:50:4b:f1:e4:74:65:1a:5f:63:41: 4c:41:b7:51:1d:82:40:a8:7b:bb:05:8b:c0:fa:84: 84:22:de:0a:91:b7:ed:1b:dc:ac:35:e5:ef:3c:d1: b5:88:57:35:f5:23:33:63:ac:75:74:20:c3:45:7a: 1c:76:3f:a0:b0:02:88:6b:21:cd:0a:71:b8:e9:4d: d8:b7:40:85:ca:92:08:df:ad:2b:36:e9:e4:78:75: 0b:b6:6b:87:ad:b5:96:fc:1f:aa:9e:14:3e:dc:e7: 47:eb:6f:39:54:8a:31:23:a0:dd:5e:bc:3a:ca:7f: 94:14:c5:b0:13:63:10:0b:a0:b4:a2:08:c3:a3:7d: e4:11:74:62:af:cf:f3:7e:2f:97:d5:ff:ae:10:6c: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7B:2A:FB:50:C7:CF:61:0A:44:CF:85:10:B8:13:6A:6F:E5:E1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b344852c-5598-346a-94d4-31f24b95426b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.62.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6f:1c:73:c1:1f:ea:b8:bb:c3:9c:99:2a:2e:2f:13:4a:0f: 20:5a:65:9b:81:54:76:2e:ea:a3:bc:1c:c1:ec:81:68:ed:37: cb:75:cf:57:26:66:95:27:6b:1b:26:80:2f:86:d8:eb:de:62: 58:bf:f0:df:98:16:fe:02:57:04:83:4f:b1:2f:cb:25:10:9b: cb:6f:6c:fd:7a:c9:74:01:29:81:89:24:be:7d:0f:18:a4:34: 63:d2:37:f6:6c:40:22:1f:1d:6d:a2:74:21:51:08:59:d4:29: e2:3e:a2:41:2e:88:ec:5f:b0:eb:45:e7:5c:c4:d6:ab:aa:1b: 49:e8:48:31:fd:99:d5:f6:3d:74:ba:82:bd:7f:85:59:71:b7: df:4b:83:b1:d1:79:81:86:a7:51:e7:3e:72:43:50:2b:a5:d6: 20:08:01:52:de:a1:06:85:d1:f5:a2:c5:39:af:01:a0:70:de: ea:fa:c0:81:df:77:de:1c:8a:2d:6c:74:ea:01:ed:b3:af:0b: 1e:18:7b:d9:41:da:c4:bf:dd:fe:44:c8:f7:71:dc:a4:76:59: b9:fd:85:ed:06:5f:b7:58:f6:3f:67:b0:e2:96:ce:c5:fb:06: 3c:db:60:fd:56:3c:02:4a:50:20:ac:a0:3d:94:ae:2e:10:e5: c5:09:3d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+ffWzGK2tX0R30QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MDBhMzFlMWQtNDBkYS00ZWI3LWJmZTItMDA2MmI1NWM0YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqKgtoCEJZrZcBE7evrBRS2i8rMWBjgnX4oL 0EvFVwxkiozp+hzarZYHnkfKiI3Ldkxgmmd4iT/IngDXBW5dCUNkJnf3mrqmwqX+ ZAC+cbQNwGBzGGYFS+wmVbrv/NEItAsTUwsf9AwhuVIuA1BL8eR0ZRpfY0FMQbdR HYJAqHu7BYvA+oSEIt4KkbftG9ysNeXvPNG1iFc19SMzY6x1dCDDRXocdj+gsAKI ayHNCnG46U3Yt0CFypII360rNunkeHULtmuHrbWW/B+qnhQ+3OdH6285VIoxI6Dd Xrw6yn+UFMWwE2MQC6C0ogjDo33kEXRir8/zfi+X1f+uEGxVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh7KvtQx89hCkTPhRC4E2pv5eFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjM0NDg1MmMtNTU5OC0z NDZhLTk0ZDQtMzFmMjRiOTU0MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhvHHPBH+q4u8OcmSouLxNKDyBaZZuBVHYu6qO8HMHsgWjtN8t1z1cm ZpUnaxsmgC+G2OveYli/8N+YFv4CVwSDT7EvyyUQm8tvbP16yXQBKYGJJL59Dxik NGPSN/ZsQCIfHW2idCFRCFnUKeI+okEuiOxfsOtF51zE1quqG0noSDH9mdX2PXS6 gr1/hVlxt99Lg7HReYGGp1HnPnJDUCul1iAIAVLeoQaF0fWixTmvAaBw3ur6wIHf d94cii1sdOoB7bOvCx4Ye9lB2sS/3f5EyPdx3KR2Wbn9he0GX7dY9j9nsOKWzsX7 BjzbYP1WPAJKUCCsoD2Uri4Q5cUJPfY= -----END CERTIFICATE-----Generated at Sun Nov 1 21:06:05 2026 by rpki-client