$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/21a7afa3-7250-36d4-b632-253969ccdd2c.roa File: 21a7afa3-7250-36d4-b632-253969ccdd2c.roa (raw, json) Hash identifier: vjO61GlzGWCKFPJ2bddsKSF4RUP4/oqB/J4AlCCrJxM= Subject key identifier: F0:51:10:48:2F:73:32:C3:20:3C:82:1F:83:CB:0D:24:3A:D9:EC:86 Certificate issuer: /CN=b2fad91b-4146-4274-9411-fc471c444156 Certificate serial: 010D0C9F4328584F686B782A455D863A1526C6A0 Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/21a7afa3-7250-36d4-b632-253969ccdd2c.roa Signing time: Tue 06 Oct 2026 03:16:03 +0000 ROA not before: Tue 06 Oct 2026 03:16:03 +0000 ROA not after: Mon 04 Jan 2027 04:16:03 +0000 asID: 11696 IP address blocks: 64.190.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:6b:78:2a:45:5d:86:3a:15:26:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156 Validity Not Before: Oct 6 03:16:03 2026 GMT Not After : Jan 4 04:16:03 2027 GMT Subject: CN=c3a088d0-38b8-4581-bd77-4a0f80acbf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:77:50:8b:5e:fb:81:26:fe:01:f8:ab:c9:23: c4:83:65:7c:82:f1:72:9c:12:3b:a4:1c:c6:c2:8a: 36:d6:a7:bd:14:02:3d:6f:3f:61:e4:a2:78:f7:42: e2:cc:9a:cc:49:cd:4c:d4:d1:a8:6d:37:3f:60:f3: cf:db:5f:5b:8a:c0:00:40:06:d3:e1:89:21:06:ef: 21:a4:19:06:fe:92:40:b9:c1:00:44:ba:de:8d:71: 20:99:06:49:37:bf:50:4a:c4:ae:57:e2:02:30:e2: f7:a6:4b:98:8b:c0:6a:f6:f2:08:75:9e:e4:5c:93: f0:03:3b:bf:de:fc:bd:60:20:e7:af:b6:1a:c7:ca: 6b:8c:ad:31:0e:e5:ad:c5:b8:9b:d4:99:a1:6b:7b: 03:7e:8a:38:5b:20:28:a6:39:58:c5:1c:ad:4f:8f: 09:75:d5:92:57:07:58:29:09:24:7c:7a:68:28:92: 03:e3:5c:5f:7d:aa:f8:81:9e:14:32:f2:92:6b:49: c9:ab:40:10:20:fa:35:24:a2:d4:2a:d4:ab:71:af: 16:81:0d:a5:e9:f4:e5:db:85:17:f6:50:0a:f2:a4: 58:e9:48:04:ad:b3:fe:b3:68:24:91:c1:b7:61:03: cc:33:6f:cd:c6:3a:bb:8e:2e:28:75:0f:75:5e:1a: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:51:10:48:2F:73:32:C3:20:3C:82:1F:83:CB:0D:24:3A:D9:EC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/21a7afa3-7250-36d4-b632-253969ccdd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl X509v3 Authority Key Identifier: keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer sbgp-ipAddrBlock: critical IPv4: 64.190.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f3:f1:38:b4:e3:84:9d:84:09:b2:2c:30:88:94:09:56:5e: b5:24:34:bf:07:51:fa:c0:78:06:30:ef:46:7a:d3:6f:35:64: c2:61:ca:c5:eb:61:13:ec:ae:f8:fc:28:a8:f0:6d:73:31:0c: 00:f3:c8:20:6f:fa:95:f6:db:d6:c6:4e:88:a5:9f:6c:65:b8: ec:af:21:1f:dc:cd:03:5b:d0:9e:15:f3:4c:e7:81:76:4e:60: 52:7d:f2:4f:ca:f0:bd:45:96:b3:89:9a:03:db:f9:cf:6e:0e: ad:86:83:a7:cc:86:e9:29:5e:f3:d5:f2:93:9e:71:9a:46:ad: fb:80:03:d8:3d:be:52:f9:a1:af:0c:f1:90:d5:5c:44:26:e8: 8e:d1:26:83:a7:90:c3:08:55:87:3f:2a:95:7a:6e:2e:5b:bc: f0:20:d0:4d:e7:6b:7c:2c:16:b7:b3:c4:4b:b5:c9:7d:97:46: 5a:87:8c:bf:7e:5d:37:12:53:79:18:53:ab:84:17:b7:99:88: 2b:bb:4f:e3:68:5c:ba:6e:68:53:99:1e:34:7e:1f:58:94:f9: 58:b9:c2:0e:58:cc:20:95:f1:d8:14:99:cd:04:15:66:60:c9: 35:e2:43:40:98:ba:3b:d5:f1:3b:f3:a5:90:4e:22:48:d1:27: 2a:86:be:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oa3gqRV2GOhUmxqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmYWQ5MWItNDE0Ni00Mjc0LTk0MTEtZmM0NzFjNDQ0 MTU2MB4XDTI2MTAwNjAzMTYwM1oXDTI3MDEwNDA0MTYwM1owLzEtMCsGA1UEAxMk YzNhMDg4ZDAtMzhiOC00NTgxLWJkNzctNGEwZjgwYWNiZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAindQi177gSb+AfirySPEg2V8gvFynBI7pBzG woo21qe9FAI9bz9h5KJ490LizJrMSc1M1NGobTc/YPPP219bisAAQAbT4YkhBu8h pBkG/pJAucEARLrejXEgmQZJN79QSsSuV+ICMOL3pkuYi8Bq9vIIdZ7kXJPwAzu/ 3vy9YCDnr7Yax8prjK0xDuWtxbib1Jmha3sDfoo4WyAopjlYxRytT48JddWSVwdY KQkkfHpoKJID41xffar4gZ4UMvKSa0nJq0AQIPo1JKLUKtSrca8WgQ2l6fTl24UX 9lAK8qRY6UgErbP+s2gkkcG3YQPMM2/Nxjq7ji4odQ91XhqFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBREEgvczLDIDyCH4PLDSQ62eyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iMmZh ZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3MWM0NDQxNTYvMjFhN2FmYTMtNzI1MC0z NmQ0LWI2MzItMjUzOTY5Y2NkZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjJmYWQ5MWItNDE0Ni00Mjc0LTk0 MTEtZmM0NzFjNDQ0MTU2L2IyZmFkOTFiLTQxNDYtNDI3NC05NDExLWZjNDcxYzQ0 NDE1Ni5jcmwwHwYDVR0jBBgwFoAU7aCvFp+VjxeyKaJpcBRGsbA76wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iMmZhZDkxYi00MTQ2LTQyNzQtOTQxMS1mYzQ3 MWM0NDQxNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPz8Ti044SdhAmyLDCIlAlWXrUkNL8HUfrAeAYw70Z60281ZMJhysXr YRPsrvj8KKjwbXMxDADzyCBv+pX229bGToiln2xluOyvIR/czQNb0J4V80zngXZO YFJ98k/K8L1FlrOJmgPb+c9uDq2Gg6fMhukpXvPV8pOecZpGrfuAA9g9vlL5oa8M 8ZDVXEQm6I7RJoOnkMMIVYc/KpV6bi5bvPAg0E3na3wsFrezxEu1yX2XRlqHjL9+ XTcSU3kYU6uEF7eZiCu7T+NoXLpuaFOZHjR+H1iU+Vi5wg5YzCCV8dgUmc0EFWZg yTXiQ0CYujvV8TvzpZBOIkjRJyqGvpw= -----END CERTIFICATE-----Generated at Sun Oct 11 23:16:00 2026 by rpki-client