$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa File: 8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json) Hash identifier: 6mXKiinfYYghKmbSDbbBgi8nNgLwsU22ZO5sL2JzTLg= Subject key identifier: 49:D1:A4:94:B4:A7:1A:D0:FF:65:3E:CC:98:D1:A5:BC:A4:0A:89:81 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584F8F3DADE42E16D1F60CB17C40 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 4913 IP address blocks: 64.49.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ad:e4:2e:16:d1:f6:0c:b1:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=aac27af3-450c-421c-89fe-28a95f43dd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fb:8c:06:9d:35:46:6f:35:f7:2f:49:d8:b4: d8:46:d6:b3:e8:59:97:57:3c:a0:5b:d6:f3:a8:5e: 3c:f1:05:5e:ec:3b:d1:f6:c8:6f:16:3e:ff:ab:4e: 6e:bd:10:63:6b:13:75:e2:d8:1c:17:79:0d:c1:39: 78:c7:72:b7:18:a1:26:5b:d4:a6:da:13:5e:09:d2: 36:f7:42:64:84:3b:cc:d2:82:5a:c4:b9:ac:0e:0b: 18:1f:59:cb:13:68:37:a1:92:4c:17:ed:fd:c3:1f: af:1b:5b:4d:a0:d9:45:e5:38:1f:26:4e:fd:c7:a8: 25:3c:2d:a7:5f:83:72:24:b0:13:ec:82:bd:35:1a: df:2b:c4:c1:e8:84:95:19:c6:ed:49:d4:cf:91:24: 16:b5:33:35:b2:16:5c:31:61:21:70:dc:e2:e6:59: 8a:db:78:2a:1e:d9:9e:9d:00:75:ed:de:06:45:f2: 80:99:f2:0d:60:9a:42:41:0c:ea:cb:95:09:3c:54: 9b:63:2f:43:8d:2b:ad:c6:3a:48:5e:3c:35:5f:a3: 65:72:58:da:00:81:01:68:88:67:8d:28:98:3e:57: 6c:bd:a2:7b:1a:7a:59:58:b2:1f:c6:ae:a0:93:e8: 1f:a8:c4:22:df:8c:9a:e6:f8:dd:53:72:17:32:b6: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D1:A4:94:B4:A7:1A:D0:FF:65:3E:CC:98:D1:A5:BC:A4:0A:89:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f9:56:38:8f:f0:d6:3d:5d:57:ec:ac:b7:d5:48:ef:57:05: 74:c6:d3:3c:63:2d:c1:7a:51:4c:1e:5d:f0:d8:3c:86:51:bd: 7b:5d:dc:de:5a:6f:a8:92:8a:eb:fa:11:3f:b8:09:59:c7:2d: fd:49:c2:8f:3c:a8:0b:b0:9f:72:b9:16:36:66:d9:32:d5:bd: c7:90:67:50:ee:4c:b7:40:17:12:85:9a:12:0d:eb:fb:57:b8: 97:71:74:39:21:70:ee:18:50:09:25:51:70:19:a3:1a:44:33: 4c:32:d1:3d:98:ee:58:02:d9:d0:16:07:4f:b3:cb:35:ab:56: 8c:4c:3e:4f:3a:82:08:b5:9c:a8:2e:b4:50:48:eb:bf:2e:5a: 93:0b:37:1d:89:0e:46:4a:57:44:05:ea:64:d8:21:ee:75:9e: a0:25:4c:e2:b2:96:be:09:5a:b0:83:af:d5:8c:91:13:5c:d0: 73:7c:8a:40:e6:ab:90:4e:c0:eb:fb:61:b6:37:0a:f8:47:ff: f2:3d:fc:e2:45:7e:68:d2:b5:41:99:88:c0:32:0d:0f:c4:75: b4:a0:b2:e4:43:97:dd:9c:5a:eb:2f:ed:af:cf:2c:15:e7:e5: 4e:07:86:d8:93:33:98:5e:fb:9f:fa:71:35:30:1b:2a:c6:da: 84:0c:ae:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPa3kLhbR9gyxfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWFjMjdhZjMtNDUwYy00MjFjLTg5ZmUtMjhhOTVmNDNkZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vuMBp01Rm819y9J2LTYRtaz6FmXVzygW9bz qF488QVe7DvR9shvFj7/q05uvRBjaxN14tgcF3kNwTl4x3K3GKEmW9Sm2hNeCdI2 90JkhDvM0oJaxLmsDgsYH1nLE2g3oZJMF+39wx+vG1tNoNlF5TgfJk79x6glPC2n X4NyJLAT7IK9NRrfK8TB6ISVGcbtSdTPkSQWtTM1shZcMWEhcNzi5lmK23gqHtme nQB17d4GRfKAmfINYJpCQQzqy5UJPFSbYy9DjSutxjpIXjw1X6NlcljaAIEBaIhn jSiYPldsvaJ7GnpZWLIfxq6gk+gfqMQi34ya5vjdU3IXMrZlMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnRpJS0pxrQ/2U+zJjRpbykComBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOGJjODk4NmEtYWMyNi0z MzllLThjZjktNDIzZTA4NWRlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT5VjiP8NY9XVfsrLfVSO9XBXTG0zxjLcF6UUweXfDYPIZRvXtd3N5a b6iSiuv6ET+4CVnHLf1Jwo88qAuwn3K5FjZm2TLVvceQZ1DuTLdAFxKFmhIN6/tX uJdxdDkhcO4YUAklUXAZoxpEM0wy0T2Y7lgC2dAWB0+zyzWrVoxMPk86ggi1nKgu tFBI678uWpMLNx2JDkZKV0QF6mTYIe51nqAlTOKylr4JWrCDr9WMkRNc0HN8ikDm q5BOwOv7YbY3CvhH//I9/OJFfmjStUGZiMAyDQ/EdbSgsuRDl92cWusv7a/PLBXn 5U4HhtiTM5he+5/6cTUwGyrG2oQMrjA= -----END CERTIFICATE-----Generated at Mon Oct 26 06:17:27 2026 by rpki-client