$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa File: 318575d9-1dbf-3047-90b7-19b80a1b4a18.roa (raw, json) Hash identifier: fuDOPQqv/IUXybRI3QxLLzFhSKopTAoVfIFMT0zh+JY= Subject key identifier: BB:E5:35:80:FB:28:DE:61:45:F6:C4:02:57:BE:26:48:1B:7D:CE:97 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584FAB288FFF2DC44CC0801DE460 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 14593 IP address blocks: 144.126.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:8f:ff:2d:c4:4c:c0:80:1d:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=fc49def0-cf27-4366-8212-584fd84ef4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:45:11:25:94:6d:b7:0f:d3:35:de:6c:4b: d0:cd:bc:5f:42:4f:93:10:de:b2:b4:f3:2f:f0:80: 20:c6:6a:5a:8e:8c:7b:9c:69:d1:ce:8e:3b:4d:03: 00:20:20:4b:2f:c2:84:bb:00:3d:89:df:8d:65:ca: 59:e3:7e:60:25:dc:4a:ba:f8:9f:71:4e:55:d5:c2: 8d:64:25:ec:37:1b:2f:81:f4:5b:fa:20:e0:bc:45: 2c:f3:eb:38:bc:a4:20:4c:57:27:4e:05:8b:4b:cb: 03:0e:84:4e:32:b6:a8:ea:7c:8c:98:fe:95:09:f7: e1:ed:5b:c2:ed:7c:24:88:25:14:37:2c:f1:66:d9: 77:ba:57:fb:67:f0:12:5f:89:af:6a:3d:01:f7:67: d5:7e:d8:98:9a:be:50:18:4c:a2:d3:7e:7a:c6:cc: 8e:47:b0:09:1f:6e:18:2d:ce:bb:f9:47:d5:a3:fc: b5:fc:0f:1d:fc:9b:5f:5e:93:34:49:40:e1:8b:67: a9:38:83:94:b1:b7:f0:fb:ec:19:22:06:1d:58:31: ea:82:28:b1:dd:6e:9c:65:07:81:3c:a0:e4:1b:6f: 52:2d:33:8e:47:50:46:6b:19:02:3a:75:fc:43:ba: ba:34:8f:13:9d:66:7b:af:ad:12:a2:83:69:3e:9e: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E5:35:80:FB:28:DE:61:45:F6:C4:02:57:BE:26:48:1B:7D:CE:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/318575d9-1dbf-3047-90b7-19b80a1b4a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 144.126.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:23:e3:0d:8d:26:7d:a3:81:9a:60:37:fb:99:3d:38:25:c6: ce:cc:23:59:49:da:80:8d:b1:4e:c3:c5:55:3f:9c:55:92:60: b0:ab:db:37:eb:05:4c:15:e0:97:54:1b:27:c3:ca:22:5c:83: 4a:08:69:7d:4e:02:69:74:48:0a:c8:52:f1:f7:37:46:5e:ab: 07:96:98:42:34:e5:9b:97:dd:81:cd:a6:8f:16:28:46:b2:f1: 67:4e:42:64:f2:21:44:b0:a3:a0:7e:c9:a1:23:57:29:96:bd: 41:68:d2:df:ae:57:3b:5e:d4:13:15:07:51:9d:73:7a:91:b0: 22:49:c9:1f:89:bc:0b:f5:78:27:5a:04:8d:7a:9f:0c:d9:cf: 1c:38:ce:44:cc:0b:82:62:ed:e0:cf:99:a4:17:d9:11:94:a3: e1:ca:a1:3f:0a:ad:b2:d2:4b:6d:62:09:8e:da:a3:0a:a7:db: 77:99:b0:10:e4:61:b4:59:89:06:9e:f2:05:2d:ca:00:a7:e5: 7b:56:86:1d:fd:a5:37:b0:66:5b:a7:0f:c7:81:9e:98:3f:b7: 3d:49:b9:8f:70:8f:60:21:ab:bb:11:86:1f:b3:aa:97:c5:6e: f0:a9:6f:d5:95:3e:c3:9b:fc:6b:50:2b:eb:aa:bf:a3:0a:26: 11:77:ca:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKI//LcRMwIAd5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk ZmM0OWRlZjAtY2YyNy00MzY2LTgyMTItNTg0ZmQ4NGVmNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9FESWUbbcP0zXebEvQzbxfQk+TEN6ytPMv 8IAgxmpajox7nGnRzo47TQMAICBLL8KEuwA9id+NZcpZ435gJdxKuvifcU5V1cKN ZCXsNxsvgfRb+iDgvEUs8+s4vKQgTFcnTgWLS8sDDoROMrao6nyMmP6VCffh7VvC 7XwkiCUUNyzxZtl3ulf7Z/ASX4mvaj0B92fVftiYmr5QGEyi0356xsyOR7AJH24Y Lc67+UfVo/y1/A8d/JtfXpM0SUDhi2epOIOUsbfw++wZIgYdWDHqgiix3W6cZQeB PKDkG29SLTOOR1BGaxkCOnX8Q7q6NI8TnWZ7r60SooNpPp4QRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvlNYD7KN5hRfbEAle+Jkgbfc6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvMzE4NTc1ZDktMWRiZi0z MDQ3LTkwYjctMTliODBhMWI0YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGkH5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkj4w2NJn2jgZpgN/uZPTglxs7MI1lJ2oCNsU7DxVU/nFWSYLCr2zfr BUwV4JdUGyfDyiJcg0oIaX1OAml0SArIUvH3N0ZeqweWmEI05ZuX3YHNpo8WKEay 8WdOQmTyIUSwo6B+yaEjVymWvUFo0t+uVzte1BMVB1Gdc3qRsCJJyR+JvAv1eCda BI16nwzZzxw4zkTMC4Ji7eDPmaQX2RGUo+HKoT8KrbLSS21iCY7aowqn23eZsBDk YbRZiQae8gUtygCn5XtWhh39pTewZlunD8eBnpg/tz1JuY9wj2Ahq7sRhh+zqpfF bvCpb9WVPsOb/GtQK+uqv6MKJhF3yhc= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:35 2026 by rpki-client