$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa File: b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa (raw, json) Hash identifier: hjlbsqOPQNqOJhR/VHPE9vl4uTaGAPSbu2eE6cfjC3c= Subject key identifier: 86:D0:05:48:7F:9E:3F:FB:E3:C2:F1:FD:78:98:31:A3:DC:65:63:C2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DDD937D09BB8D1A817A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398576 IP address blocks: 209.51.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:dd:93:7d:09:bb:8d:1a:81:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=ac1312fd-4472-4796-8ac0-81c06206145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:52:74:06:bb:bd:8d:26:6c:f4:b5:b3:22: eb:02:82:aa:b8:22:a9:b0:5f:47:92:2e:c8:bd:85: d3:12:16:a2:df:fb:24:61:cf:c1:59:1f:ee:58:21: c9:ce:ed:73:37:2b:77:1e:d8:a3:ba:2a:3a:f9:30: f1:53:f1:e8:1f:7c:d0:3a:52:db:fc:ea:6d:13:f2: a2:a2:97:fb:70:11:30:a7:4d:56:49:5a:8a:66:5b: 7a:dc:2f:07:fd:a0:fd:18:32:cf:79:6f:71:fb:de: 7f:be:74:ed:db:d9:dc:83:4e:dc:2f:44:6d:36:d8: c2:a8:2d:3a:d0:2a:fd:d8:aa:62:a1:5a:47:4b:dd: a2:91:50:06:5d:eb:c8:39:34:67:a8:5c:9c:7b:2c: 9f:47:7c:a7:aa:e6:8f:67:8f:11:a6:56:14:40:9c: ca:95:1c:86:62:12:a1:70:5c:73:b2:e5:f3:e2:f9: ca:22:e3:7c:f0:d2:c5:b2:97:b3:c4:69:85:38:8b: 8d:ed:77:88:0e:25:2f:08:13:ce:72:85:82:70:cf: 5d:2f:df:19:d8:d3:4d:bb:3a:0c:e5:c6:57:a0:c7: 90:ef:20:ae:a9:0b:e9:25:06:ef:0c:41:35:21:36: b0:bb:0f:24:b0:52:76:85:3a:04:c1:c6:75:c2:9e: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D0:05:48:7F:9E:3F:FB:E3:C2:F1:FD:78:98:31:A3:DC:65:63:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b5b853ef-9a6f-3742-abc5-31456e73e3d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 209.51.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:24:46:4f:d1:ef:c7:d0:87:4d:6e:2e:43:ca:b5:1e:22:6e: 0a:b7:63:93:b6:81:50:f6:c1:a1:0a:20:10:dd:35:98:7e:37: a4:03:dc:81:45:de:a6:95:67:d2:fd:7a:ed:a2:f2:db:8d:ae: 7d:c9:a5:92:e7:d6:17:72:4e:f0:61:ae:61:7d:68:9f:22:b2: 40:5f:90:f9:09:7f:74:fd:c8:7a:0b:b1:a4:b7:15:5a:62:7c: 64:14:e0:64:1f:f2:92:5e:7f:4c:7c:62:e0:aa:48:e5:d3:7c: bc:02:f9:fe:ff:52:8b:fa:af:2f:db:90:36:d5:f2:c8:97:8a: 0f:fc:36:9c:48:c4:7b:69:13:33:0e:19:6c:b0:8b:67:76:be: a9:dd:54:1f:73:ff:e2:a1:02:97:f4:18:4a:13:b5:9f:29:84: 7b:fd:fd:e0:c9:e7:57:81:2c:33:98:e4:42:6b:98:0d:a2:ef: 16:80:9c:2b:42:9f:18:48:a6:5f:73:b5:c3:ed:84:b4:b0:96: 1a:2b:b1:a2:8f:a0:cd:9f:fe:be:eb:33:f8:7f:01:5a:a5:51: b0:7b:47:16:d3:39:07:db:b5:4b:1e:58:f7:89:a4:d4:b1:c5: 1d:19:bd:c2:0c:0c:9e:70:3c:00:06:04:65:68:f5:27:16:0b: 26:ea:ab:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fd2TfQm7jRqBegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YWMxMzEyZmQtNDQ3Mi00Nzk2LThhYzAtODFjMDYyMDYxNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrdSdAa7vY0mbPS1syLrAoKquCKpsF9Hki7I vYXTEhai3/skYc/BWR/uWCHJzu1zNyt3Htijuio6+TDxU/HoH3zQOlLb/OptE/Ki opf7cBEwp01WSVqKZlt63C8H/aD9GDLPeW9x+95/vnTt29ncg07cL0RtNtjCqC06 0Cr92KpioVpHS92ikVAGXevIOTRnqFyceyyfR3ynquaPZ48RplYUQJzKlRyGYhKh cFxzsuXz4vnKIuN88NLFspezxGmFOIuN7XeIDiUvCBPOcoWCcM9dL98Z2NNNuzoM 5cZXoMeQ7yCuqQvpJQbvDEE1ITawuw8ksFJ2hToEwcZ1wp7vlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbQBUh/nj/748Lx/XiYMaPcZWPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjViODUzZWYtOWE2Zi0z NzQyLWFiYzUtMzE0NTZlNzNlM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEkRk/R78fQh01uLkPKtR4ibgq3Y5O2gVD2waEKIBDdNZh+N6QD3IFF 3qaVZ9L9eu2i8tuNrn3JpZLn1hdyTvBhrmF9aJ8iskBfkPkJf3T9yHoLsaS3FVpi fGQU4GQf8pJef0x8YuCqSOXTfLwC+f7/Uov6ry/bkDbV8siXig/8NpxIxHtpEzMO GWywi2d2vqndVB9z/+KhApf0GEoTtZ8phHv9/eDJ51eBLDOY5EJrmA2i7xaAnCtC nxhIpl9ztcPthLSwlhorsaKPoM2f/r7rM/h/AVqlUbB7RxbTOQfbtUseWPeJpNSx xR0ZvcIMDJ5wPAAGBGVo9ScWCybqq5Q= -----END CERTIFICATE-----Generated at Wed Oct 28 00:44:43 2026 by rpki-client