$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa File: ec903bba-158c-3a3d-b9c7-5969c960d37e.roa (raw, json) Hash identifier: G46iGE7wJ6TQUCdvr+2dOIGdpyzBoHO/EBzchH+189w= Subject key identifier: 48:BD:4A:33:BE:FD:58:94:CB:CE:2B:08:17:72:89:B0:C5:40:8E:47 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584F0672324CD296A61B3B630360 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 11300 IP address blocks: 64.49.131.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:32:4c:d2:96:a6:1b:3b:63:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e040f935-14e3-4b98-81e2-502c7677c7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4f:3b:f9:f7:f1:3d:d9:84:2c:4b:06:8f:c8: 60:53:61:a1:76:f2:91:4b:a8:2f:42:9e:c6:14:57: 4e:a9:58:d5:6a:69:b0:c4:45:89:bb:c6:cc:55:3d: cc:5b:3b:c5:3e:d1:18:41:fd:4b:ce:fd:71:13:ad: 75:e0:70:54:c6:4d:a9:2a:08:be:7f:98:37:e2:51: 49:58:16:fa:22:a0:b7:3d:55:dd:18:2e:88:2d:d9: e4:27:22:00:28:8b:6d:39:1b:34:4a:73:b9:02:35: 78:5e:06:6b:92:66:48:22:3b:80:5c:1e:1a:65:87: 10:ab:71:b3:7d:69:02:fb:6d:69:fb:63:0f:da:94: 37:a8:7e:10:31:6e:af:a2:d8:f6:88:65:5f:0a:a7: ec:a8:62:35:a6:2a:45:72:37:3a:6f:79:e6:a3:1f: 2f:56:bb:35:1f:8e:07:99:ca:5b:1f:0f:a9:83:02: 9e:63:bd:1d:a0:c2:cf:3c:de:07:e5:95:00:f5:6e: a0:12:3a:79:f0:84:a8:23:45:08:91:37:96:67:3b: 46:6e:11:dd:bf:14:ab:6e:da:85:b4:54:09:1d:b4: 4f:4a:44:5d:7a:66:e5:ff:f0:1e:dd:26:3a:e8:c6: 8f:c8:0a:64:b5:c2:3b:25:c6:c9:d2:e3:fb:05:f9: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BD:4A:33:BE:FD:58:94:CB:CE:2B:08:17:72:89:B0:C5:40:8E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:9d:54:42:8a:e5:08:4b:eb:b9:b2:12:32:d4:a7:8f:67:58: aa:28:9b:4c:16:f3:1d:e7:b5:c8:6d:e8:55:43:2f:3a:70:74: ed:22:60:b7:75:92:b8:a8:35:b2:62:7b:ff:f8:d4:a4:25:af: 5d:0b:97:00:81:64:c1:66:cf:a5:42:2e:64:f8:4a:d8:16:1c: c7:b1:ef:a0:6a:e1:b1:78:e3:48:eb:db:8b:d7:4f:2e:0d:f4: 48:8e:bd:47:95:4a:95:f0:76:dd:24:79:3f:cd:d4:34:13:72: c7:c6:77:dd:6e:d9:9b:fb:13:b1:ca:84:64:3f:ae:02:11:5f: 0a:5e:d3:24:12:32:94:c8:a4:12:cf:f9:45:aa:ac:2c:90:11: 4a:48:2d:53:2e:e8:fc:33:49:91:11:ed:1a:75:53:db:a7:c7: 41:44:a2:a4:48:72:c8:32:c2:a9:3d:00:74:ea:e7:a9:f0:bf: dd:d6:38:7b:63:af:b8:00:e6:38:48:c2:88:75:26:6b:2e:8b: 83:53:f9:8c:43:77:e8:45:26:4d:8a:b0:c8:5f:39:f4:1c:bd: 0f:ba:3a:9a:ab:2c:e7:06:bd:2a:c7:4a:63:6e:5a:9a:c2:8e: 73:fd:64:9d:1a:71:15:44:f4:bd:22:5b:3b:be:ac:71:b0:78: cd:38:55:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjJM0pamGztjA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTA0MGY5MzUtMTRlMy00Yjk4LTgxZTItNTAyYzc2NzdjN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU87+ffxPdmELEsGj8hgU2GhdvKRS6gvQp7G FFdOqVjVammwxEWJu8bMVT3MWzvFPtEYQf1Lzv1xE6114HBUxk2pKgi+f5g34lFJ WBb6IqC3PVXdGC6ILdnkJyIAKIttORs0SnO5AjV4XgZrkmZIIjuAXB4aZYcQq3Gz fWkC+21p+2MP2pQ3qH4QMW6votj2iGVfCqfsqGI1pipFcjc6b3nmox8vVrs1H44H mcpbHw+pgwKeY70doMLPPN4H5ZUA9W6gEjp58ISoI0UIkTeWZztGbhHdvxSrbtqF tFQJHbRPSkRdembl//Ae3SY66MaPyApktcI7JcbJ0uP7BfkA8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi9SjO+/ViUy84rCBdyibDFQI5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZWM5MDNiYmEtMTU4Yy0z YTNkLWI5YzctNTk2OWM5NjBkMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqdVEKK5QhL67myEjLUp49nWKoom0wW8x3ntcht6FVDLzpwdO0iYLd1 krioNbJie//41KQlr10LlwCBZMFmz6VCLmT4StgWHMex76Bq4bF440jr24vXTy4N 9EiOvUeVSpXwdt0keT/N1DQTcsfGd91u2Zv7E7HKhGQ/rgIRXwpe0yQSMpTIpBLP +UWqrCyQEUpILVMu6PwzSZER7Rp1U9unx0FEoqRIcsgywqk9AHTq56nwv93WOHtj r7gA5jhIwoh1Jmsui4NT+YxDd+hFJk2KsMhfOfQcvQ+6OpqrLOcGvSrHSmNuWprC jnP9ZJ0acRVE9L0iWzu+rHGweM04VdI= -----END CERTIFICATE-----Generated at Thu Sep 3 09:28:12 2026 by rpki-client