$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa File: b58118a6-9203-312d-87af-37c8aacc07d7.roa (raw, json) Hash identifier: TQk1nO2kO3NIYz5lFwz8fn0w2loOxJqO/ovvRnYHaLs= Subject key identifier: C9:EE:7B:6C:35:09:80:63:F7:2E:03:77:2E:EE:CB:43:50:14:A9:CB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDF72205479195D57DCC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398576 IP address blocks: 216.66.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:df:72:20:54:79:19:5d:57:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=45c77de1-51dc-4a15-986b-18520d0ad4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:48:fd:bd:55:40:c4:ab:02:4a:a6:bd:34: 65:18:2e:f8:17:0d:de:44:bd:38:24:6c:53:5a:cd: 99:64:18:fd:0e:c1:4a:63:6e:26:12:e4:f3:f6:7e: 8c:7d:97:06:4f:9e:b7:df:76:6b:ef:6e:1e:a1:6f: d6:84:06:76:15:3d:35:7f:21:70:21:db:6c:73:5c: 58:18:8d:8b:c3:c6:73:84:84:60:33:36:38:b2:d4: 6d:9f:2f:a0:92:27:61:30:63:57:07:05:e0:b0:56: e9:80:ac:c7:93:f8:a8:92:df:a8:03:ef:7a:22:bf: ca:f7:98:ba:c3:87:06:ff:fe:a3:37:16:fc:19:e6: d3:a7:74:a3:e9:5d:d0:f6:81:e3:ed:23:b7:76:b8: f5:f4:cc:c8:8c:e2:10:e1:11:9d:e3:43:ed:cb:64: 4d:3b:f7:13:5b:80:f3:a5:5a:51:f3:b1:2b:e3:37: db:d7:8d:a1:02:a2:8e:2b:12:11:79:d3:79:41:b6: 6e:fd:3a:37:a9:a8:0d:e8:0f:b0:a0:bf:9f:f6:cd: af:49:81:28:72:38:10:fd:9a:54:56:e0:78:50:6b: 2e:9c:fb:01:4c:73:28:04:25:35:8f:29:f8:b3:90: 53:5d:36:43:a3:20:69:1b:df:55:8d:87:ef:df:e4: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:7B:6C:35:09:80:63:F7:2E:03:77:2E:EE:CB:43:50:14:A9:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b58118a6-9203-312d-87af-37c8aacc07d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 216.66.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:93:65:7c:9a:3a:db:23:03:f1:14:2f:5c:bd:fb:84:27:70: e2:1e:3e:3f:ca:ab:1a:83:b5:ba:8f:c4:79:2f:42:6c:bd:b0: 56:72:ca:9f:ec:ef:de:ac:96:c0:09:17:99:84:f2:0d:a2:5d: 58:0f:56:ed:40:11:9a:8d:c1:e3:ef:ca:8d:4a:fe:7b:7f:a2: e8:f1:56:71:27:f9:04:54:ce:51:81:79:6a:f2:33:44:41:c0: a2:00:ba:67:8e:b1:8d:ba:0b:c3:2b:f7:50:62:c6:a7:0f:55: 22:94:82:19:bf:d7:ba:a2:95:c2:ba:62:c9:37:7c:32:c1:23: 95:12:e6:74:4b:e7:f9:33:03:f6:d6:a9:28:cd:07:f2:81:b0: 56:81:45:a8:74:18:5f:a8:77:90:df:b0:4e:5c:78:cf:8d:b2: d5:72:c4:5b:bb:56:ea:fd:af:a6:b1:c4:ce:6d:01:80:fe:bb: 28:9b:02:a3:0f:cc:55:7b:8c:8e:8e:ba:a3:19:8c:d8:2f:c2: eb:11:5b:10:36:e4:55:41:58:b6:e7:e5:cd:4c:05:e0:d7:c9: d6:72:83:4d:6c:c9:bf:cc:b9:f4:2f:9b:98:67:57:0c:4f:51: a2:cf:3f:95:31:50:bf:db:78:2b:98:9e:9a:03:89:92:a6:70: 14:45:fe:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fd9yIFR5GV1X3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDVjNzdkZTEtNTFkYy00YTE1LTk4NmItMTg1MjBkMGFkNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEdI/b1VQMSrAkqmvTRlGC74Fw3eRL04JGxT Ws2ZZBj9DsFKY24mEuTz9n6MfZcGT56333Zr724eoW/WhAZ2FT01fyFwIdtsc1xY GI2Lw8ZzhIRgMzY4stRtny+gkidhMGNXBwXgsFbpgKzHk/iokt+oA+96Ir/K95i6 w4cG//6jNxb8GebTp3Sj6V3Q9oHj7SO3drj19MzIjOIQ4RGd40Pty2RNO/cTW4Dz pVpR87Er4zfb142hAqKOKxIRedN5QbZu/To3qagN6A+woL+f9s2vSYEocjgQ/ZpU VuB4UGsunPsBTHMoBCU1jyn4s5BTXTZDoyBpG99VjYfv3+Qe6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnue2w1CYBj9y4Ddy7uy0NQFKnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjU4MTE4YTYtOTIwMy0z MTJkLTg3YWYtMzdjOGFhY2MwN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiTZXyaOtsjA/EUL1y9+4QncOIePj/KqxqDtbqPxHkvQmy9sFZyyp/s 796slsAJF5mE8g2iXVgPVu1AEZqNwePvyo1K/nt/oujxVnEn+QRUzlGBeWryM0RB wKIAumeOsY26C8Mr91BixqcPVSKUghm/17qilcK6Ysk3fDLBI5US5nRL5/kzA/bW qSjNB/KBsFaBRah0GF+od5DfsE5ceM+NstVyxFu7Vur9r6axxM5tAYD+uyibAqMP zFV7jI6OuqMZjNgvwusRWxA25FVBWLbn5c1MBeDXydZyg01syb/MufQvm5hnVwxP UaLPP5UxUL/beCuYnpoDiZKmcBRF/v0= -----END CERTIFICATE-----Generated at Wed Oct 28 14:18:18 2026 by rpki-client