$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7a8ae6ca-22b8-3bc1-857a-4d849c3995ba.roa File: 7a8ae6ca-22b8-3bc1-857a-4d849c3995ba.roa (raw, json) Hash identifier: 5Q7Ee6/5l42jsCUjwIQ8jQ0rTUfQW/t50BnQHGN8D30= Subject key identifier: CD:8C:7A:5F:2E:99:75:51:C6:E1:B2:A2:F7:A4:31:DC:19:30:09:E6 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA8A8EBC6A0ED7CC136DA1950 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7a8ae6ca-22b8-3bc1-857a-4d849c3995ba.roa Signing time: Thu 29 Oct 2026 03:31:36 +0000 ROA not before: Thu 29 Oct 2026 03:31:36 +0000 ROA not after: Wed 27 Jan 2027 04:31:36 +0000 asID: 11696 IP address blocks: 64.190.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:a8:eb:c6:a0:ed:7c:c1:36:da:19:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 29 03:31:36 2026 GMT Not After : Jan 27 04:31:36 2027 GMT Subject: CN=d6a33c27-9e70-4724-94c3-23e67a76b2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:fa:ad:8b:00:43:20:d4:ec:da:59:78:66: 9f:24:78:73:d6:be:4a:71:dd:bf:2a:37:d0:4f:d7: 8b:85:0c:46:9a:36:69:58:85:3b:6b:1c:97:19:45: 1b:b0:b9:01:06:c6:a1:e0:90:f4:22:99:91:5c:3c: 51:93:d1:54:b8:db:e9:7a:fb:dc:d4:84:91:f3:37: 37:d3:51:19:f0:0b:f6:01:28:e0:03:98:07:43:df: fe:f6:17:2c:af:3b:50:0f:68:8e:9b:b0:56:6f:54: 62:4f:db:fa:9d:fa:5f:d2:ca:74:0d:03:ba:27:2e: 84:71:37:14:53:50:1e:04:fa:be:d0:82:15:49:3a: 59:67:b1:2b:3e:21:ee:c5:fd:18:cd:60:89:2b:ee: a7:40:bb:d7:a4:20:05:ef:94:06:a0:d1:cd:7b:c3: 91:4a:59:e6:ea:84:19:43:82:f9:60:26:83:e5:60: 08:ad:21:c2:ed:9d:18:0d:f5:56:36:2b:1f:21:5b: 49:8e:bb:f8:70:67:26:26:04:78:c3:c2:08:f1:8f: fb:e8:98:b6:de:8b:aa:05:3e:a0:41:b5:75:63:3d: 3d:89:bb:45:d7:53:4c:1d:43:28:d6:9b:81:aa:97: 60:c5:00:f3:82:c4:81:3a:07:01:f8:43:41:1e:77: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8C:7A:5F:2E:99:75:51:C6:E1:B2:A2:F7:A4:31:DC:19:30:09:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/7a8ae6ca-22b8-3bc1-857a-4d849c3995ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e3:f8:d8:e8:1f:27:29:6c:71:b2:88:4a:22:69:f7:d4:47: 89:96:a8:4f:e3:8c:10:2f:95:9b:b0:06:2b:41:a9:65:f1:b7: eb:fc:5d:74:63:7f:f3:2b:54:c0:a7:b5:16:63:4c:51:68:eb: 71:17:27:a2:d3:e0:4b:2d:1a:f7:1a:ef:18:4d:09:2f:de:6b: d4:ce:99:33:4a:db:b4:1c:51:8f:dc:77:50:60:35:3d:76:57: 17:37:6b:15:43:63:fb:3a:e7:5c:9c:2b:ff:f3:21:8f:62:35: 7e:f7:96:4d:a0:72:dc:1b:e4:82:c9:3d:78:d9:b6:aa:fe:9d: 7c:63:bb:91:3d:9a:4d:27:c4:61:63:f7:8d:28:63:eb:6e:07: 84:23:1b:3e:39:84:0f:d6:94:ce:69:c8:80:38:0e:45:b0:35: 41:c8:f0:d4:1b:e1:ce:09:03:a0:21:25:0f:5d:09:54:7d:ae: 6f:05:53:31:03:78:24:4a:04:18:f7:97:f1:4e:74:40:3c:6b: 60:03:50:b3:61:88:49:2e:c4:84:8e:0c:d3:9c:e3:b7:fd:fa: 50:6d:12:ba:79:12:4c:ff:bf:42:0a:de:e8:9b:61:a4:64:02: ef:6c:2b:74:79:61:a1:d1:91:8b:d4:83:cc:e9:8e:01:28:72: bc:60:08:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oqOvGoO18wTbaGVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyOTAzMzEzNloXDTI3MDEyNzA0MzEzNlowLzEtMCsGA1UEAxMk ZDZhMzNjMjctOWU3MC00NzI0LTk0YzMtMjNlNjdhNzZiMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVP6rYsAQyDU7NpZeGafJHhz1r5Kcd2/KjfQ T9eLhQxGmjZpWIU7axyXGUUbsLkBBsah4JD0IpmRXDxRk9FUuNvpevvc1ISR8zc3 01EZ8Av2ASjgA5gHQ9/+9hcsrztQD2iOm7BWb1RiT9v6nfpf0sp0DQO6Jy6EcTcU U1AeBPq+0IIVSTpZZ7ErPiHuxf0YzWCJK+6nQLvXpCAF75QGoNHNe8ORSlnm6oQZ Q4L5YCaD5WAIrSHC7Z0YDfVWNisfIVtJjrv4cGcmJgR4w8II8Y/76Ji23ouqBT6g QbV1Yz09ibtF11NMHUMo1puBqpdgxQDzgsSBOgcB+ENBHnenkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2Mel8umXVRxuGyovekMdwZMAnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvN2E4YWU2Y2EtMjJiOC0z YmMxLTg1N2EtNGQ4NDljMzk5NWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQL6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHj+NjoHycpbHGyiEoiaffUR4mWqE/jjBAvlZuwBitBqWXxt+v8XXRj f/MrVMCntRZjTFFo63EXJ6LT4EstGvca7xhNCS/ea9TOmTNK27QcUY/cd1BgNT12 Vxc3axVDY/s651ycK//zIY9iNX73lk2gctwb5ILJPXjZtqr+nXxju5E9mk0nxGFj 940oY+tuB4QjGz45hA/WlM5pyIA4DkWwNUHI8NQb4c4JA6AhJQ9dCVR9rm8FUzED eCRKBBj3l/FOdEA8a2ADULNhiEkuxISODNOc47f9+lBtErp5Ekz/v0IK3uibYaRk Au9sK3R5YaHRkYvUg8zpjgEocrxgCCM= -----END CERTIFICATE-----Generated at Sat Oct 31 03:28:21 2026 by rpki-client