$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/471e52f7-324d-3817-a67f-9715ede0ca08.roa File: 471e52f7-324d-3817-a67f-9715ede0ca08.roa (raw, json) Hash identifier: 1A4NBtwPZegxZrebI0dh2yBFswsexjd2X5bROyfYXT8= Subject key identifier: A9:A2:B2:C8:10:66:0C:1E:8E:B3:1A:FE:EE:0D:01:0B:6C:C0:2C:4B Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA8A8EBB6EAD9B1BD52962DC0 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/471e52f7-324d-3817-a67f-9715ede0ca08.roa Signing time: Thu 29 Oct 2026 03:31:36 +0000 ROA not before: Thu 29 Oct 2026 03:31:36 +0000 ROA not after: Wed 27 Jan 2027 04:31:36 +0000 asID: 11696 IP address blocks: 64.190.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:a8:eb:b6:ea:d9:b1:bd:52:96:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 29 03:31:36 2026 GMT Not After : Jan 27 04:31:36 2027 GMT Subject: CN=c8cc22e5-99dc-4486-812d-77be6a59a89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:90:70:e5:af:8b:61:6a:88:82:c8:9b:1d: 74:2e:12:e4:51:b6:25:57:68:12:41:24:a5:95:4b: 73:49:e3:9a:cd:ff:7d:e5:77:21:34:83:aa:4e:50: 5b:cb:7f:ec:71:92:4f:9c:05:fb:d3:9b:60:32:99: ac:79:2d:9c:67:da:b8:15:62:25:5a:3e:1c:cb:97: 6e:0c:6b:d7:33:03:5b:7a:14:fe:39:a6:50:5e:a4: 4c:0a:79:87:d3:ce:77:f1:67:15:c1:e9:40:ca:68: ce:d0:eb:51:45:57:21:83:bd:9c:42:62:a8:89:1b: 80:9f:a5:b8:d2:da:8c:d2:5e:dc:33:89:91:8f:1d: b4:fc:97:ff:e4:1b:9c:bc:40:64:68:dc:cd:fa:0e: 3e:ef:38:b2:8d:6f:07:95:8b:7e:e7:6d:6d:64:1a: 31:2f:06:84:12:49:f1:77:0f:4f:33:5a:dd:e2:4c: e2:b5:a1:d3:df:3b:e1:8c:c9:0d:01:92:12:84:4c: e4:f8:a8:fe:6b:64:94:e7:31:b5:f4:e0:8f:60:64: b8:5a:5a:e1:f0:ce:46:b9:97:41:b1:c7:dc:ba:53: 03:e1:9b:8f:26:58:ac:59:f9:2c:07:2a:11:e7:92: cc:bc:da:91:6c:aa:7f:73:24:43:63:f8:84:27:8e: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A2:B2:C8:10:66:0C:1E:8E:B3:1A:FE:EE:0D:01:0B:6C:C0:2C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/471e52f7-324d-3817-a67f-9715ede0ca08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ba:e9:60:85:b0:6c:4e:31:72:7a:c2:ec:4d:ce:a1:e0:6b: 57:96:14:01:ba:76:d5:57:5c:49:fc:d1:22:e4:26:ea:c3:91: 29:a5:e5:36:ba:6d:a6:1a:47:d5:da:b0:69:61:d4:c9:f2:fd: 57:a5:85:90:a8:fb:6b:d7:0b:4e:6d:60:8e:6d:65:41:34:d3: ca:d7:39:2e:72:fa:62:ed:f3:60:e3:91:ed:e3:32:3f:4c:cf: ee:38:00:20:d4:9d:e1:e2:1c:b0:46:b7:5e:9c:36:38:2d:15: bc:7e:c3:d9:6d:23:ea:bc:4b:09:41:b4:0e:c9:a2:41:8a:01: 6a:d3:83:b7:e8:35:51:01:e0:7f:76:b3:5b:92:c9:1b:f0:ae: 90:0c:df:de:26:94:80:b1:6c:42:2f:52:a5:e2:cd:fa:a7:0e: 81:33:b9:6a:04:d7:90:a6:78:49:86:11:9a:8d:95:57:73:7d: cd:6d:e0:65:a7:8b:d7:6b:2d:cb:17:dc:a2:d5:35:a3:3e:30: 84:82:3d:01:e9:b2:23:e7:2a:8f:18:af:13:d4:2a:5b:7d:f0: 2d:12:55:19:59:5d:e0:cd:98:7f:bd:1c:ab:03:98:34:9d:ec: f2:b3:87:d4:77:e8:c1:33:bc:d5:2a:8c:2e:50:d7:de:21:2a: fe:93:37:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oqOu26tmxvVKWLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyOTAzMzEzNloXDTI3MDEyNzA0MzEzNlowLzEtMCsGA1UEAxMk YzhjYzIyZTUtOTlkYy00NDg2LTgxMmQtNzdiZTZhNTlhODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk6QcOWvi2FqiILImx10LhLkUbYlV2gSQSSl lUtzSeOazf995XchNIOqTlBby3/scZJPnAX705tgMpmseS2cZ9q4FWIlWj4cy5du DGvXMwNbehT+OaZQXqRMCnmH08538WcVwelAymjO0OtRRVchg72cQmKoiRuAn6W4 0tqM0l7cM4mRjx20/Jf/5BucvEBkaNzN+g4+7ziyjW8HlYt+521tZBoxLwaEEknx dw9PM1rd4kzitaHT3zvhjMkNAZIShEzk+Kj+a2SU5zG19OCPYGS4Wlrh8M5GuZdB scfculMD4ZuPJlisWfksByoR55LMvNqRbKp/cyRDY/iEJ47KTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmissgQZgwejrMa/u4NAQtswCxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvNDcxZTUyZjctMzI0ZC0z ODE3LWE2N2YtOTcxNWVkZTBjYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQL5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK66WCFsGxOMXJ6wuxNzqHga1eWFAG6dtVXXEn80SLkJurDkSml5Ta6 baYaR9XasGlh1Mny/VelhZCo+2vXC05tYI5tZUE008rXOS5y+mLt82Djke3jMj9M z+44ACDUneHiHLBGt16cNjgtFbx+w9ltI+q8SwlBtA7JokGKAWrTg7foNVEB4H92 s1uSyRvwrpAM394mlICxbEIvUqXizfqnDoEzuWoE15CmeEmGEZqNlVdzfc1t4GWn i9drLcsX3KLVNaM+MISCPQHpsiPnKo8YrxPUKlt98C0SVRlZXeDNmH+9HKsDmDSd 7PKzh9R36MEzvNUqjC5Q194hKv6TN+Y= -----END CERTIFICATE-----Generated at Sat Oct 31 03:28:44 2026 by rpki-client