$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa File: 8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json) Hash identifier: 2ba96kMILTecMeo1s+z7iHR2WDwjDHZl2tJuhyGZMLw= Subject key identifier: 1C:77:FC:95:15:45:9C:08:11:0A:61:44:A1:8C:C8:67:E2:81:C5:8E Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F4328584D6AAA6AC25CCA0B2D6E540BC0 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 4913 IP address blocks: 64.49.128.0/18 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:6a:c2:5c:ca:0b:2d:6e:54:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=831c0e7c-eb0a-43e5-9736-00ec4e11d00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:62:11:6c:69:f0:cd:1a:34:53:64:c8:69: 67:84:4c:a9:01:7e:b7:01:98:bb:7d:72:8f:4e:ba: 2d:37:d7:77:74:b5:95:6e:33:32:ad:a7:50:ed:95: d9:9d:0a:55:6b:78:dd:46:c6:61:39:7b:0f:b5:da: 50:cc:99:6f:7d:7e:f9:59:f9:29:1b:62:f7:cf:e1: 06:c2:eb:96:23:14:dc:4a:e3:e4:85:fb:98:6e:14: eb:13:90:76:cc:61:f5:95:5b:0d:8e:14:03:10:fb: b8:0e:c1:c6:ef:82:4b:3d:a3:56:38:9f:4c:83:01: 51:e0:4b:db:49:2f:13:b2:41:98:b0:5c:5b:5e:6a: f0:71:de:e7:ec:e2:bd:a2:7d:5d:1b:01:25:1e:27: 08:25:e2:73:0e:af:fa:bf:be:bf:b6:56:d2:7f:f3: f9:b1:e8:79:cc:89:f1:fd:93:4f:da:a3:86:b1:06: 28:49:d7:70:eb:76:a2:39:2f:fa:85:1d:41:9b:7e: 2e:33:db:7c:14:9e:d8:c2:c8:2d:1c:4c:3a:d9:e9: 97:cb:2a:6e:ae:38:a7:03:8c:03:06:e1:7f:f4:a7: f1:4b:88:f2:2d:92:c5:ce:0b:89:a5:c5:f6:49:62: 3f:85:71:7c:47:e1:ba:d1:04:da:55:fb:1e:14:2a: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:77:FC:95:15:45:9C:08:11:0A:61:44:A1:8C:C8:67:E2:81:C5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:8d:a9:1c:2a:23:ed:b6:b3:62:ff:56:35:8b:9b:58:bd:7e: d6:50:bd:25:0e:f4:1d:6b:d6:b9:5d:6a:22:32:80:6c:97:3e: 44:2c:26:04:db:77:7d:0e:46:57:30:c1:93:2b:dd:4b:75:d7: 48:62:53:1c:0d:89:28:ba:f3:1e:5e:07:d5:a7:6b:02:b7:48: 83:a0:ca:d1:f4:b0:fe:de:bd:11:14:41:4b:02:19:0a:0b:e7: 10:54:89:9f:51:e0:e1:e7:95:6e:6a:ba:8b:42:20:97:c0:b1: c8:a9:33:7b:1c:94:55:f6:64:a9:8d:07:7e:d6:f0:c3:73:0d: 2f:10:f6:b3:c3:77:9a:7a:20:12:cb:49:49:4d:7b:f1:f1:ee: 46:7c:96:b0:ca:79:98:02:f7:96:6d:8d:cc:b6:f9:0f:f0:9e: e3:5f:44:3d:d0:31:d1:4a:97:79:f5:da:e4:05:ab:9b:d6:0e: 4c:ca:3c:46:2d:b2:93:cb:1b:68:58:4d:c7:7f:33:dc:b6:7a: 78:91:10:ec:87:d2:e8:ab:26:dd:f8:20:d7:63:90:88:41:65: a5:a1:e5:b4:58:1c:33:16:ce:e1:c2:55:1a:f9:60:a3:98:1b: 57:dc:f3:40:d2:de:64:c9:37:18:e2:64:06:6b:d0:6b:e0:cf: 13:29:f1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmrCXMoLLW5UC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODMxYzBlN2MtZWIwYS00M2U1LTk3MzYtMDBlYzRlMTFkMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTFiEWxp8M0aNFNkyGlnhEypAX63AZi7fXKP TrotN9d3dLWVbjMyradQ7ZXZnQpVa3jdRsZhOXsPtdpQzJlvfX75WfkpG2L3z+EG wuuWIxTcSuPkhfuYbhTrE5B2zGH1lVsNjhQDEPu4DsHG74JLPaNWOJ9MgwFR4Evb SS8TskGYsFxbXmrwcd7n7OK9on1dGwElHicIJeJzDq/6v76/tlbSf/P5seh5zInx /ZNP2qOGsQYoSddw63aiOS/6hR1Bm34uM9t8FJ7YwsgtHEw62emXyypurjinA4wD BuF/9KfxS4jyLZLFzguJpcX2SWI/hXF8R+G60QTaVfseFColywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx3/JUVRZwIEQphRKGMyGfigcWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOGJjODk4NmEtYWMyNi0z MzllLThjZjktNDIzZTA4NWRlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQDGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+NqRwqI+22s2L/VjWLm1i9ftZQvSUO9B1r1rldaiIygGyXPkQsJgTb d30ORlcwwZMr3Ut110hiUxwNiSi68x5eB9WnawK3SIOgytH0sP7evREUQUsCGQoL 5xBUiZ9R4OHnlW5quotCIJfAscipM3sclFX2ZKmNB37W8MNzDS8Q9rPDd5p6IBLL SUlNe/Hx7kZ8lrDKeZgC95Ztjcy2+Q/wnuNfRD3QMdFKl3n12uQFq5vWDkzKPEYt spPLG2hYTcd/M9y2eniREOyH0uirJt34INdjkIhBZaWh5bRYHDMWzuHCVRr5YKOY G1fc80DS3mTJNxjiZAZr0GvgzxMp8aE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:41 2026 by rpki-client