$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa File: acb33a1f-b419-320b-966b-936077de3fa9.roa (raw, json) Hash identifier: 6dwvix4JYQqdvd4/mj1PeGnsUeMCBCOw1shGNKsgAxI= Subject key identifier: 58:DB:AF:82:1D:C9:7B:48:03:50:30:A6:D0:72:07:52:BB:E0:14:E0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EF2E7623E56980A5B21C0ED00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 401742 IP address blocks: 64.71.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:62:3e:56:98:0a:5b:21:c0:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=b8924351-da0d-4b00-b6ea-fe71caa91dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:a2:c7:3c:ef:68:23:24:77:a3:f4:8b:88: f1:2f:05:5e:74:8a:6e:46:00:c2:68:7c:54:aa:32: b1:f3:96:08:af:72:f1:52:ed:a6:e8:b5:87:79:9b: f1:65:97:c6:11:f5:eb:9b:bd:bf:2f:65:8a:e3:55: 8e:96:2f:26:bb:7a:e5:67:87:c7:55:49:7a:1c:56: f0:87:b8:a8:71:48:a1:58:ac:98:64:e3:7e:86:23: 0b:7f:39:6b:83:6c:23:94:87:a7:5a:32:b0:24:7f: dd:a3:e4:45:5d:29:d0:af:ed:60:61:4a:79:ce:77: 6a:1d:3a:00:9c:78:ed:a1:d8:c4:ec:b9:27:36:98: 1f:22:9e:66:1a:a5:2c:90:ff:17:40:a0:7c:ae:e9: 43:ea:7f:bb:3e:b5:c3:b4:72:ca:0c:26:1d:3a:a4: 43:31:66:4d:4d:f3:a7:ec:c4:73:78:7b:a5:1d:e3: dd:da:df:4b:45:53:d3:73:cc:8d:8e:88:54:32:9d: bd:c5:43:b2:9a:98:c4:26:6c:c6:31:e3:ea:0d:b8: 6d:10:ff:2c:98:b7:b2:bd:55:02:13:22:9d:a3:25: 9a:da:30:fd:b4:8e:29:ef:50:83:74:b2:10:af:59: 1c:4c:62:db:2c:77:2c:e0:17:de:31:fe:fb:a8:25: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:AF:82:1D:C9:7B:48:03:50:30:A6:D0:72:07:52:BB:E0:14:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/acb33a1f-b419-320b-966b-936077de3fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 64.71.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fb:a9:25:7a:32:5d:64:ce:af:1c:f8:9e:ba:56:05:eb:fc: e1:ce:01:70:c6:d7:17:0b:1b:9c:c8:67:24:ca:68:b0:10:4f: 49:43:db:db:09:fe:54:e6:0e:d9:fa:15:74:c4:29:bc:69:b4: 8e:44:b0:7e:0d:19:24:24:3b:17:7c:8b:6d:8f:59:7d:4d:f8: 48:14:54:16:06:99:ec:13:08:c3:3f:57:2d:30:51:f5:7a:34: d9:d0:0b:b0:1c:75:13:cc:8e:83:8e:2f:75:d3:ce:dd:2b:84: 2e:36:9a:dd:23:f6:29:df:ae:fc:08:27:d9:6d:f8:1e:7b:e3: d2:85:c0:73:e5:86:72:7f:75:0b:08:ea:56:7d:a7:3b:43:ec: 37:a1:0c:0c:21:d7:ed:ab:de:74:6c:32:4e:1b:e8:53:1e:93: 48:cb:4c:74:02:e5:cd:7b:7c:04:f3:4b:04:ae:c5:bf:24:b5: bf:f2:a4:27:70:3d:e5:5f:35:7f:56:ff:57:48:e5:6f:08:7f: b9:36:b8:55:5f:04:67:df:a0:af:e3:b4:07:5f:2c:b1:00:3a: 5b:18:99:5f:00:fc:99:42:a4:b2:06:11:f6:ad:98:76:ac:30: 2f:95:c4:a1:2d:dd:86:7e:71:6d:d5:ff:7b:b1:2f:9e:c2:c8: 9e:0e:da:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52I+VpgKWyHA7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk Yjg5MjQzNTEtZGEwZC00YjAwLWI2ZWEtZmU3MWNhYTkxZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC6ixzzvaCMkd6P0i4jxLwVedIpuRgDCaHxU qjKx85YIr3LxUu2m6LWHeZvxZZfGEfXrm72/L2WK41WOli8mu3rlZ4fHVUl6HFbw h7iocUihWKyYZON+hiMLfzlrg2wjlIenWjKwJH/do+RFXSnQr+1gYUp5zndqHToA nHjtodjE7LknNpgfIp5mGqUskP8XQKB8rulD6n+7PrXDtHLKDCYdOqRDMWZNTfOn 7MRzeHulHePd2t9LRVPTc8yNjohUMp29xUOympjEJmzGMePqDbhtEP8smLeyvVUC EyKdoyWa2jD9tI4p71CDdLIQr1kcTGLbLHcs4BfeMf77qCVIzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjbr4IdyXtIA1AwptByB1K74BTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWNiMzNhMWYtYjQxOS0z MjBiLTk2NmItOTM2MDc3ZGUzZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH37qSV6Ml1kzq8c+J66VgXr/OHOAXDG1xcLG5zIZyTKaLAQT0lD29sJ /lTmDtn6FXTEKbxptI5EsH4NGSQkOxd8i22PWX1N+EgUVBYGmewTCMM/Vy0wUfV6 NNnQC7AcdRPMjoOOL3XTzt0rhC42mt0j9infrvwIJ9lt+B5749KFwHPlhnJ/dQsI 6lZ9pztD7DehDAwh1+2r3nRsMk4b6FMek0jLTHQC5c17fATzSwSuxb8ktb/ypCdw PeVfNX9W/1dI5W8If7k2uFVfBGffoK/jtAdfLLEAOlsYmV8A/JlCpLIGEfatmHas MC+VxKEt3YZ+cW3V/3uxL57CyJ4O2j4= -----END CERTIFICATE-----Generated at Sat Sep 26 11:42:46 2026 by rpki-client