$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa File: 5f214b9f-b571-3e5e-862b-39c37c23157a.roa (raw, json) Hash identifier: 3UhQCtUndyOrtv5QCIR5WFRdMjADO9WEEGyoT+3spC8= Subject key identifier: 8B:1E:3E:47:B8:01:22:EC:3C:10:FB:3B:70:24:97:E3:D4:B7:05:83 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EF2E77FF1452935E568FCA080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 401742 IP address blocks: 64.71.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:7f:f1:45:29:35:e5:68:fc:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=cb2b37da-ab2d-4f88-8192-dee6ce8407af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:dc:1e:55:34:28:dc:66:6d:9e:08:6d:28: 5d:20:ad:11:6a:ab:5c:24:4a:72:a2:e7:29:0c:c7: 67:51:39:95:44:02:2c:08:e2:9b:b2:85:78:ee:01: ec:e9:16:ae:a8:81:83:c2:83:ec:13:c7:3f:2e:39: 46:62:68:77:cd:be:e7:58:d6:b1:1f:9b:e3:5d:89: bb:45:46:11:fc:88:01:1f:b7:96:6f:6a:13:63:fa: 77:82:98:49:9a:99:65:10:68:8f:38:25:b7:05:d4: 79:00:ea:75:fb:a1:0c:67:dc:9f:73:76:64:e4:6d: 6e:99:5a:0b:dc:21:85:23:bf:a9:9d:3c:94:ff:73: 9f:f2:b0:6c:71:ab:6f:7b:10:56:45:fe:54:13:dd: aa:e1:31:ef:4e:66:27:8a:5e:2a:56:67:f7:e7:25: 28:a6:ba:2a:42:a6:41:42:7c:77:15:0a:f1:bf:09: 67:28:1a:83:83:4c:83:ab:c7:b5:84:0b:1c:b4:25: 20:29:9c:35:24:d9:58:d4:fe:de:b8:33:f5:ad:c8: bc:cc:84:57:4f:7e:be:ce:eb:5a:ed:d8:b3:66:39: 92:46:75:91:b5:63:4f:c9:79:97:16:91:b0:ec:de: ef:cd:71:a6:37:eb:e3:03:54:f7:cb:31:1d:96:48: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1E:3E:47:B8:01:22:EC:3C:10:FB:3B:70:24:97:E3:D4:B7:05:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f214b9f-b571-3e5e-862b-39c37c23157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:d1:f6:c6:cb:cb:25:e8:62:11:97:8f:01:e5:28:74:e0:39: 88:82:52:e9:3f:10:c3:d7:f4:8b:78:18:46:5e:9e:3b:14:6f: 44:a8:b6:a8:04:e1:e7:ca:28:db:2a:56:62:fd:40:d5:ed:69: 2d:19:cd:a3:f2:0c:fb:36:8d:35:60:f2:8d:a1:38:ca:8b:8b: 08:7c:01:a7:12:e6:89:5d:25:71:88:7a:a3:fa:6a:9e:95:35: 93:b3:73:07:84:72:62:57:36:d1:44:33:41:fe:84:71:ef:0e: 43:bd:2a:86:4a:37:be:fc:d0:4c:a2:57:a1:a5:36:8b:f9:9c: 1f:92:0f:60:8b:ac:25:d8:0e:a8:45:30:33:46:d1:66:66:a4: de:dc:71:0a:12:09:23:18:a0:84:08:91:99:37:92:dc:3a:f2: 5c:cc:44:52:c7:a9:d7:fe:f7:84:b7:b2:20:66:3b:73:69:f7: 36:9a:e6:53:83:17:1b:d6:a7:d3:e5:0a:77:ee:00:35:bb:f7: a7:2f:85:d5:53:0e:72:54:48:d0:36:fc:e2:84:0c:9a:a2:cf: 5c:f2:7c:b1:3b:b1:1e:86:53:0a:08:7e:c7:3a:fd:c0:5a:e1: 08:da:0c:32:65:33:bc:0f:8b:47:d5:c6:52:b2:62:e5:ab:e4: d7:93:79:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53/xRSk15Wj8oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk Y2IyYjM3ZGEtYWIyZC00Zjg4LTgxOTItZGVlNmNlODQwN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiPcHlU0KNxmbZ4IbShdIK0RaqtcJEpyoucp DMdnUTmVRAIsCOKbsoV47gHs6RauqIGDwoPsE8c/LjlGYmh3zb7nWNaxH5vjXYm7 RUYR/IgBH7eWb2oTY/p3gphJmpllEGiPOCW3BdR5AOp1+6EMZ9yfc3Zk5G1umVoL 3CGFI7+pnTyU/3Of8rBscatvexBWRf5UE92q4THvTmYnil4qVmf35yUoproqQqZB Qnx3FQrxvwlnKBqDg0yDq8e1hAsctCUgKZw1JNlY1P7euDP1rci8zIRXT36+zuta 7dizZjmSRnWRtWNPyXmXFpGw7N7vzXGmN+vjA1T3yzEdlkj2CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsePke4ASLsPBD7O3Akl+PUtwWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWYyMTRiOWYtYjU3MS0z ZTVlLTg2MmItMzljMzdjMjMxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrR9sbLyyXoYhGXjwHlKHTgOYiCUuk/EMPX9It4GEZenjsUb0SotqgE 4efKKNsqVmL9QNXtaS0ZzaPyDPs2jTVg8o2hOMqLiwh8AacS5oldJXGIeqP6ap6V NZOzcweEcmJXNtFEM0H+hHHvDkO9KoZKN7780EyiV6GlNov5nB+SD2CLrCXYDqhF MDNG0WZmpN7ccQoSCSMYoIQIkZk3ktw68lzMRFLHqdf+94S3siBmO3Np9zaa5lOD FxvWp9PlCnfuADW796cvhdVTDnJUSNA2/OKEDJqiz1zyfLE7sR6GUwoIfsc6/cBa 4QjaDDJlM7wPi0fVxlKyYuWr5NeTeYU= -----END CERTIFICATE-----Generated at Sun Sep 27 23:56:30 2026 by rpki-client