$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa File: d822b996-b4d6-3c32-8014-b7c1910343e1.roa (raw, json) Hash identifier: vjTBK4XT3FTW9fm+4ia7/2D41ZV7pgRUqjq7t0I71q4= Subject key identifier: 18:DB:0C:5D:EF:17:D3:52:78:3F:93:EE:3C:75:A0:11:13:39:64:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF344C5E3A4F3AA1C4080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 22300 IP address blocks: 65.19.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f3:44:c5:e3:a4:f3:aa:1c:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=ca30a1ea-95d6-40ca-bb74-f30d0a416673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:4c:96:c7:03:81:5a:b6:7d:54:d3:56:33: cf:17:cd:b3:2e:1e:7e:4e:73:dd:a1:a4:1e:9a:62: a7:c0:a2:b4:e8:e3:4c:54:80:54:4e:77:a9:ba:48: 08:c4:53:ba:93:53:52:6a:59:4d:3a:a5:bf:29:65: ff:7a:b2:d4:42:b1:ea:39:52:f4:d6:7d:19:e6:55: db:18:09:f4:00:c9:35:27:86:03:1f:0a:9d:0a:06: dc:b4:33:54:2b:f2:29:4d:23:1e:60:0a:1b:8a:1f: 78:ae:6d:b2:a6:e7:f3:bd:90:a4:c1:9d:49:00:b8: f0:a4:66:18:4c:92:ae:24:ba:06:68:b5:a9:5a:5a: 07:5b:32:75:52:98:b4:58:1a:b2:db:c2:93:5a:f5: 6c:76:f1:92:f9:36:a1:48:35:2d:07:b9:15:53:fc: fe:8c:fe:1a:e3:f9:06:ff:35:78:39:9e:48:82:a7: 3f:dc:7b:f9:34:1f:68:45:83:3a:0e:5f:70:29:9d: 8f:4e:ce:74:37:9d:53:49:62:8e:d5:21:f9:cb:a6: 53:f9:2f:f2:52:5d:2b:9d:cb:7c:a5:90:9c:f2:bf: a3:b1:a6:8d:bd:14:6d:a9:3b:84:70:ea:34:87:cc: 6b:bd:dd:ab:ec:3e:48:5a:d4:85:ec:50:7e:24:2d: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:0C:5D:EF:17:D3:52:78:3F:93:EE:3C:75:A0:11:13:39:64:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d822b996-b4d6-3c32-8014-b7c1910343e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.19.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0f:28:84:80:61:63:4b:16:11:0b:c1:99:9c:a1:c3:25:16: ad:36:e1:5b:37:77:8d:55:49:98:e8:31:14:f2:6a:a7:25:e8: 86:68:ca:68:ef:64:bc:de:7c:24:43:f1:ed:1e:df:4a:7a:0c: 95:09:a3:58:81:b3:e5:f5:ad:88:f0:3c:b5:c0:cd:b6:06:bd: b8:a8:c2:b3:5f:ed:f0:3f:e2:d9:6a:17:b6:0f:63:c9:ea:d1: 32:69:00:0a:d1:f1:44:5a:78:0f:04:95:93:c5:0c:f0:6e:2e: 01:b3:9c:4c:a6:ca:da:3c:dc:25:e9:ae:1d:52:66:7e:89:15: 29:f4:52:96:fd:b5:ed:d1:0c:09:14:09:3c:e1:e6:b2:6d:62: c1:75:6f:78:6d:84:60:df:a9:0e:7c:56:a3:88:85:38:48:4f: a3:f5:55:b6:29:d3:cf:ca:3c:75:68:ca:e6:52:e7:0e:d0:69: 7f:7b:dc:a2:8a:46:9b:0b:2f:d9:14:83:22:ba:9f:2c:1e:1b: 4f:2e:e1:07:66:33:9a:c6:ef:87:9b:d7:27:57:ec:d8:7f:89: c4:8b:89:ae:21:77:ae:65:c5:b6:7b:e6:cb:e8:60:0d:08:b7: 9d:e7:33:1b:e5:d1:ee:a2:91:48:9d:28:b2:c2:ec:dd:0b:16: f2:0e:b8:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+ffNExeOk86ocQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2EzMGExZWEtOTVkNi00MGNhLWJiNzQtZjMwZDBhNDE2NjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYhMlscDgVq2fVTTVjPPF82zLh5+TnPdoaQe mmKnwKK06ONMVIBUTnepukgIxFO6k1NSallNOqW/KWX/erLUQrHqOVL01n0Z5lXb GAn0AMk1J4YDHwqdCgbctDNUK/IpTSMeYAobih94rm2ypufzvZCkwZ1JALjwpGYY TJKuJLoGaLWpWloHWzJ1Upi0WBqy28KTWvVsdvGS+TahSDUtB7kVU/z+jP4a4/kG /zV4OZ5Igqc/3Hv5NB9oRYM6Dl9wKZ2PTs50N51TSWKO1SH5y6ZT+S/yUl0rnct8 pZCc8r+jsaaNvRRtqTuEcOo0h8xrvd2r7D5IWtSF7FB+JC1qCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjbDF3vF9NSeD+T7jx1oBETOWShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMmI5OTYtYjRkNi0z YzMyLTgwMTQtYjdjMTkxMDM0M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQROUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8PKISAYWNLFhELwZmcocMlFq024Vs3d41VSZjoMRTyaqcl6IZoymjv ZLzefCRD8e0e30p6DJUJo1iBs+X1rYjwPLXAzbYGvbiowrNf7fA/4tlqF7YPY8nq 0TJpAArR8URaeA8ElZPFDPBuLgGznEymyto83CXprh1SZn6JFSn0Upb9te3RDAkU CTzh5rJtYsF1b3hthGDfqQ58VqOIhThIT6P1VbYp08/KPHVoyuZS5w7QaX973KKK RpsLL9kUgyK6nyweG08u4QdmM5rG74eb1ydX7Nh/icSLia4hd65lxbZ75svoYA0I t53nMxvl0e6ikUidKLLC7N0LFvIOuJw= -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:08 2026 by rpki-client