$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa File: df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa (raw, json) Hash identifier: 2WGjH2LBpC1A9gTov+Khx5ihpu30V7fi5PZHmknVqzg= Subject key identifier: DF:FE:A2:B8:6E:6F:D3:15:DE:4A:57:77:C9:23:E4:F6:4A:97:D3:80 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F7E7DF86E6463CB946FDF0000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 22168 IP address blocks: 65.49.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f8:6e:64:63:cb:94:6f:df:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e9f71685-ae27-48fa-bfc6-822de720f287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:31:6a:77:b5:8f:54:6b:28:c5:1b:35:5a: 79:71:a8:38:2a:24:c9:12:66:44:db:0c:bb:a6:1a: cc:cf:d8:26:09:a2:fc:d0:7a:f6:98:d9:03:4c:4f: e2:1c:56:3c:94:56:c8:b0:2b:46:91:69:42:ea:9a: 55:08:8a:7a:17:32:55:31:bb:7f:b6:68:7e:7b:5c: f3:6d:88:60:46:27:b4:2e:16:43:f9:40:60:3b:57: 65:40:c7:d0:72:02:dc:d5:27:71:47:81:cc:82:41: d1:69:59:b3:ba:78:60:60:d2:7b:1c:18:10:a0:63: ca:85:d9:c5:35:b9:98:2f:cd:fb:9a:d0:ad:66:11: c3:b2:e0:ea:e1:3e:01:2b:5f:c5:5a:11:36:98:e0: 6c:83:69:b9:cd:c5:9a:32:cd:bd:a6:25:dc:a0:91: d5:3a:a7:66:80:6e:8f:87:66:98:c6:b9:cf:58:43: 65:16:84:eb:9d:86:ba:41:0d:b8:c9:af:50:bb:c2: 84:7f:aa:52:cf:08:08:98:9b:35:35:cb:a8:a5:1e: 07:67:05:98:a4:94:f4:7a:66:43:7f:7e:7e:8d:be: 6e:44:e7:da:a1:8c:ee:43:5e:cf:99:34:2f:8d:99: 98:1f:97:c7:79:38:ec:ed:27:dc:d2:b5:47:23:b2: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:A2:B8:6E:6F:D3:15:DE:4A:57:77:C9:23:E4:F6:4A:97:D3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df81340e-0b04-3e8f-b8d6-4bf0efe3649f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 65.49.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:46:43:23:f3:73:09:51:d7:3a:1d:21:68:11:80:85:fb:54: 72:28:a1:d8:0d:23:0d:99:ba:e7:f5:20:46:b2:32:47:f9:40: 9f:4e:71:67:50:24:e5:db:11:c1:30:1b:00:7c:7a:b0:40:0e: eb:cc:87:cd:24:05:41:ec:1d:56:c9:ef:06:61:38:46:18:5c: 39:90:d3:18:d6:73:1e:22:1d:43:3d:04:9c:5b:9d:cc:c1:bd: d1:05:75:ab:90:a7:77:3a:1c:b5:82:0f:29:83:53:94:1b:23: 00:d1:10:5c:a8:ce:db:25:bf:fd:2d:f1:33:93:4e:49:03:ec: a2:13:2e:09:ae:c4:04:05:9a:49:1e:33:b0:2e:82:95:80:76: 9f:81:7a:96:4d:a5:8c:30:4b:6c:c4:28:a6:55:cb:9c:82:ed: 09:99:9e:84:09:0f:d4:40:75:7a:27:c3:fb:a4:a3:45:44:5d: b0:a1:25:5c:25:e2:ef:5e:10:03:04:b3:5a:04:91:2d:f1:8f: ff:76:a2:3e:9f:35:cc:89:49:0e:80:0e:a2:47:bc:6c:f5:ff: 44:7a:72:a0:45:01:7d:cd:62:23:72:7d:1c:02:c2:50:4f:c2: 8d:44:a2:64:95:c0:92:fe:d7:f1:76:46:a6:2a:7c:03:53:6d: 04:c3:3a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+ffhuZGPLlG/fAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTlmNzE2ODUtYWUyNy00OGZhLWJmYzYtODIyZGU3MjBmMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixMxane1j1RrKMUbNVp5cag4KiTJEmZE2wy7 phrMz9gmCaL80Hr2mNkDTE/iHFY8lFbIsCtGkWlC6ppVCIp6FzJVMbt/tmh+e1zz bYhgRie0LhZD+UBgO1dlQMfQcgLc1SdxR4HMgkHRaVmzunhgYNJ7HBgQoGPKhdnF NbmYL837mtCtZhHDsuDq4T4BK1/FWhE2mOBsg2m5zcWaMs29piXcoJHVOqdmgG6P h2aYxrnPWENlFoTrnYa6QQ24ya9Qu8KEf6pSzwgImJs1NcuopR4HZwWYpJT0emZD f35+jb5uROfaoYzuQ17PmTQvjZmYH5fHeTjs7Sfc0rVHI7Kp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/+orhub9MV3kpXd8kj5PZKl9OAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY4MTM0MGUtMGIwNC0z ZThmLWI4ZDYtNGJmMGVmZTM2NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1GQyPzcwlR1zodIWgRgIX7VHIoodgNIw2Zuuf1IEayMkf5QJ9OcWdQ JOXbEcEwGwB8erBADuvMh80kBUHsHVbJ7wZhOEYYXDmQ0xjWcx4iHUM9BJxbnczB vdEFdauQp3c6HLWCDymDU5QbIwDREFyoztslv/0t8TOTTkkD7KITLgmuxAQFmkke M7AugpWAdp+BepZNpYwwS2zEKKZVy5yC7QmZnoQJD9RAdXonw/uko0VEXbChJVwl 4u9eEAMEs1oEkS3xj/92oj6fNcyJSQ6ADqJHvGz1/0R6cqBFAX3NYiNyfRwCwlBP wo1EomSVwJL+1/F2RqYqfANTbQTDOtk= -----END CERTIFICATE-----Generated at Sun Nov 1 14:47:36 2026 by rpki-client