$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/afc43190-ede1-3796-9e8d-1a9b87315851.roa File: afc43190-ede1-3796-9e8d-1a9b87315851.roa (raw, json) Hash identifier: 0zu8OnB9/F8ewWW6LnUVvQyotZwXrxIZg9VUKtGN3JQ= Subject key identifier: 05:BA:B9:43:BE:B7:A5:E7:B4:EF:EF:69:0C:BD:01:16:C5:13:46:10 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584FA8A8EBE50382A7958AC15180 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/afc43190-ede1-3796-9e8d-1a9b87315851.roa Signing time: Thu 29 Oct 2026 03:31:37 +0000 ROA not before: Thu 29 Oct 2026 03:31:37 +0000 ROA not after: Wed 27 Jan 2027 04:31:37 +0000 asID: 11696 IP address blocks: 64.190.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:a8:eb:e5:03:82:a7:95:8a:c1:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 29 03:31:37 2026 GMT Not After : Jan 27 04:31:37 2027 GMT Subject: CN=a319cb99-2626-44da-a049-7ed0255ea78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:9f:bd:71:1d:88:0b:85:a7:b8:e5:ac:df: be:3f:87:b7:63:7c:d4:02:a6:f0:f6:eb:d1:bd:39: 8b:5e:cf:c5:da:49:d8:d6:d2:65:06:6f:de:72:ae: a9:30:0b:56:37:fa:fa:2c:87:08:53:82:b4:8e:d3: 62:81:46:bb:85:ce:37:4d:89:1f:ad:0b:89:77:68: b3:ed:0b:1b:1f:e2:5f:4b:a7:c8:66:4e:19:52:f1: 80:64:ee:b2:e1:8b:20:29:1b:d2:0b:d2:19:9d:58: 2e:42:f4:26:d9:fb:4c:21:58:0c:e0:0f:6c:a4:67: be:b8:9a:dd:15:29:94:81:fd:12:5d:d7:a1:ff:79: 6c:c6:d6:d9:3d:45:95:34:b6:1a:43:64:11:69:be: 62:85:0d:96:71:a7:7e:d3:bd:fd:0c:32:b6:90:3d: 57:5c:82:06:a9:c1:1f:a3:c4:8c:c1:dc:d9:f4:b8: 2e:b9:d6:5d:79:4e:ef:73:ee:36:63:6d:51:36:8a: 08:ba:07:77:4e:5a:bd:2c:b1:29:61:c3:94:18:0f: 4d:38:d4:fc:b1:06:c9:77:36:e7:61:c1:06:69:e4: ea:40:6a:49:07:d3:01:9d:70:63:aa:04:94:aa:50: d2:aa:3f:11:b6:f0:f8:0f:32:0c:aa:5b:78:29:c6: 34:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BA:B9:43:BE:B7:A5:E7:B4:EF:EF:69:0C:BD:01:16:C5:13:46:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/afc43190-ede1-3796-9e8d-1a9b87315851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:38:56:47:0e:fc:f5:a8:29:02:41:18:24:44:1f:3b:41:cd: 61:42:0d:c2:69:e7:d8:af:e0:9d:dd:4f:66:1b:94:fa:fe:2d: d6:67:f6:83:bd:9d:4e:55:8c:70:ac:58:2a:74:49:24:d0:1d: 2a:cb:fe:c3:c2:ff:70:3b:0b:06:ca:ee:07:a9:ed:cd:87:80: 4f:08:ff:ff:d0:63:cc:21:a6:69:9f:bb:df:d8:ce:26:9a:95: 9d:3e:d4:33:71:92:2a:ab:7c:0a:d9:b2:c4:6e:82:a4:54:63: 57:72:1e:f7:81:1d:24:42:9f:90:57:37:97:f6:8a:33:f0:f8: c6:9f:3d:b2:b6:48:9f:27:0d:4d:a0:1d:ba:73:4c:de:44:5a: be:68:4b:98:38:e0:b3:40:fc:9c:df:3e:2a:39:1b:be:af:25: 9f:b1:d0:b2:04:bc:2c:de:5f:cc:cc:12:60:bb:3e:98:4c:59: 7b:1d:20:09:db:0a:88:dc:ed:7b:cf:64:73:ee:9d:8b:5b:f9: 69:01:f9:a5:10:79:29:93:12:dc:3a:11:5c:8d:10:43:15:b4: 3f:c3:71:cb:3c:2e:6f:3d:8e:76:5a:bf:18:6a:9f:89:73:01: c1:a3:fe:cf:9d:1e:8e:5b:b6:d7:a1:9e:00:56:15:a3:68:35: b7:8e:05:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oqOvlA4KnlYrBUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAyOTAzMzEzN1oXDTI3MDEyNzA0MzEzN1owLzEtMCsGA1UEAxMk YTMxOWNiOTktMjYyNi00NGRhLWEwNDktN2VkMDI1NWVhNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizyfvXEdiAuFp7jlrN++P4e3Y3zUAqbw9uvR vTmLXs/F2knY1tJlBm/ecq6pMAtWN/r6LIcIU4K0jtNigUa7hc43TYkfrQuJd2iz 7QsbH+JfS6fIZk4ZUvGAZO6y4YsgKRvSC9IZnVguQvQm2ftMIVgM4A9spGe+uJrd FSmUgf0SXdeh/3lsxtbZPUWVNLYaQ2QRab5ihQ2Wcad+0739DDK2kD1XXIIGqcEf o8SMwdzZ9LguudZdeU7vc+42Y21RNooIugd3Tlq9LLEpYcOUGA9NONT8sQbJdzbn YcEGaeTqQGpJB9MBnXBjqgSUqlDSqj8RtvD4DzIMqlt4KcY0WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAW6uUO+t6XntO/vaQy9ARbFE0YQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvYWZjNDMxOTAtZWRlMS0z Nzk2LTllOGQtMWE5Yjg3MzE1ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE4VkcO/PWoKQJBGCREHztBzWFCDcJp59iv4J3dT2YblPr+LdZn9oO9 nU5VjHCsWCp0SSTQHSrL/sPC/3A7CwbK7gep7c2HgE8I///QY8whpmmfu9/Yziaa lZ0+1DNxkiqrfArZssRugqRUY1dyHveBHSRCn5BXN5f2ijPw+MafPbK2SJ8nDU2g HbpzTN5EWr5oS5g44LNA/JzfPio5G76vJZ+x0LIEvCzeX8zMEmC7PphMWXsdIAnb Cojc7XvPZHPunYtb+WkB+aUQeSmTEtw6EVyNEEMVtD/Dccs8Lm89jnZavxhqn4lz AcGj/s+dHo5bttehngBWFaNoNbeOBTo= -----END CERTIFICATE-----Generated at Fri Oct 30 23:16:53 2026 by rpki-client