$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa File: 29b0455b-b0db-3bef-ad71-5d8eab166a05.roa (raw, json) Hash identifier: Jq7DNbLBwsrNbUMTnYZ7j5W0K4jWYFOKyp4V5P8eFNs= Subject key identifier: 36:12:40:B6:4F:1E:6F:B1:A2:C4:72:6B:5E:BC:4E:F5:0C:76:21:DA Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584FB0BDEC74199109D6387E9B00 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 13768 IP address blocks: 64.29.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ec:74:19:91:09:d6:38:7e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=1b6dfaf9-45e9-4404-9b89-d1969d41c754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:6d:38:1c:de:ba:f9:af:25:1a:87:96:34: f4:a2:6d:9f:4e:ff:63:c9:7a:cf:70:ca:bd:d2:59: d4:74:ad:c3:04:87:0e:ac:4f:99:7b:1c:24:f2:3d: 39:02:ea:8e:ea:4f:89:0f:01:a1:5f:ea:de:1a:35: 0d:46:3e:49:52:06:74:c6:8e:b3:dc:37:f7:4a:91: 84:e5:a6:74:59:d1:f6:ad:36:70:1a:56:13:3d:f8: f4:f1:08:0c:4d:da:96:ad:7a:78:c7:d4:b3:4d:f8: 2b:4d:85:6f:b3:f1:af:b8:e9:2d:5a:d5:55:81:4d: 71:a2:60:41:76:9d:66:5a:89:51:b2:9a:b7:27:29: ec:b7:af:e1:1e:7e:16:95:46:5c:b8:76:32:02:d2: 35:5f:d1:68:c2:2a:8a:ab:28:00:32:0e:23:24:00: da:a8:7e:7a:b0:4e:2b:eb:20:39:84:51:cb:43:93: 0c:3e:be:4b:2e:70:78:49:9c:a1:a1:45:df:55:db: be:d3:af:eb:e7:14:66:fb:c1:b3:84:52:b9:87:b4: 24:36:01:3b:d8:8d:27:2f:9e:23:f5:71:64:89:3e: a1:7d:6f:cf:3b:b4:82:2a:e1:05:a1:62:f0:9e:e2: a9:8b:35:6a:a3:d4:ed:12:b6:30:f6:63:68:4a:01: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:40:B6:4F:1E:6F:B1:A2:C4:72:6B:5E:BC:4E:F5:0C:76:21:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.29.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9d:1a:54:28:2f:da:00:d4:fb:e3:5c:0e:aa:6f:80:88:85: c3:0d:d4:ba:d8:4d:91:d0:fd:03:3b:bf:3d:7b:f4:47:fb:f7: 19:4d:db:a0:b0:5d:e3:c5:35:d4:a2:ed:df:3b:5c:25:84:96: 59:7c:b7:ed:df:c1:2e:fa:a8:17:4b:f2:72:fd:d3:0d:80:2c: f8:da:da:57:b9:ae:18:21:ba:70:25:35:b8:f3:24:08:68:a1: 84:3e:ef:f5:f4:4c:e6:c0:32:9f:f4:76:1f:f4:11:89:fd:54: 3a:3f:76:a1:19:50:d2:18:64:a8:44:19:6f:04:05:73:4c:26: 02:f2:36:b9:82:d6:4d:dc:f3:62:f4:a2:c4:e4:79:40:22:eb: a0:78:c6:40:64:a8:4d:b9:e3:ca:de:63:86:be:56:21:a2:04: 95:14:cc:af:59:90:22:df:d4:6b:fc:50:6b:42:e4:cc:48:c2: a8:97:4b:db:4f:bf:ca:18:f7:a8:01:b2:87:2c:81:0c:89:3a: 9f:b5:29:10:2a:af:1e:bb:9e:5c:f9:4e:6d:c6:a5:4f:17:19: c0:53:e3:92:e8:6e:c0:7a:0f:c3:ce:9a:c1:59:a4:50:d5:54: 5d:c2:a6:44:a9:c2:de:7e:15:3c:0f:e7:a4:6b:f4:ee:fb:5d: b4:25:8e:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvex0GZEJ1jh+mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MWI2ZGZhZjktNDVlOS00NDA0LTliODktZDE5NjlkNDFjNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FtOBzeuvmvJRqHljT0om2fTv9jyXrPcMq9 0lnUdK3DBIcOrE+Zexwk8j05AuqO6k+JDwGhX+reGjUNRj5JUgZ0xo6z3Df3SpGE 5aZ0WdH2rTZwGlYTPfj08QgMTdqWrXp4x9SzTfgrTYVvs/GvuOktWtVVgU1xomBB dp1mWolRspq3Jynst6/hHn4WlUZcuHYyAtI1X9FowiqKqygAMg4jJADaqH56sE4r 6yA5hFHLQ5MMPr5LLnB4SZyhoUXfVdu+06/r5xRm+8GzhFK5h7QkNgE72I0nL54j 9XFkiT6hfW/PO7SCKuEFoWLwnuKpizVqo9TtErYw9mNoSgFnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYSQLZPHm+xosRya168TvUMdiHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMjliMDQ1NWItYjBkYi0z YmVmLWFkNzEtNWQ4ZWFiMTY2YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACidGlQoL9oA1PvjXA6qb4CIhcMN1LrYTZHQ/QM7vz179Ef79xlN26Cw XePFNdSi7d87XCWElll8t+3fwS76qBdL8nL90w2ALPja2le5rhghunAlNbjzJAho oYQ+7/X0TObAMp/0dh/0EYn9VDo/dqEZUNIYZKhEGW8EBXNMJgLyNrmC1k3c82L0 osTkeUAi66B4xkBkqE2548reY4a+ViGiBJUUzK9ZkCLf1Gv8UGtC5MxIwqiXS9tP v8oY96gBsocsgQyJOp+1KRAqrx67nlz5Tm3GpU8XGcBT45LobsB6D8POmsFZpFDV VF3CpkSpwt5+FTwP56Rr9O77XbQljr0= -----END CERTIFICATE-----Generated at Sun Nov 15 17:58:21 2026 by rpki-client