$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa File: 1dea2b87-2ac9-378e-9508-bdc020438a1e.roa (raw, json) Hash identifier: DVFNOM/C4NnwWTWsDVCwmqZRPGywfYBRKEszJyQ2hgc= Subject key identifier: 5A:79:9A:64:A0:D2:93:A5:1A:EC:EA:BA:58:82:08:04:5B:4D:37:48 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584F0D6CDF4C1B1F8B695A7FB570 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 62610 IP address blocks: 128.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:df:4c:1b:1f:8b:69:5a:7f:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9161ed36-0c3c-49aa-9fcb-b13cf9b7467b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:5e:ce:df:76:34:f2:2c:58:24:24:83:03: 20:91:63:45:95:60:f2:cd:4d:e6:a5:8a:bd:25:a3: ed:e4:b8:4d:4b:a1:3b:ab:d9:71:d8:d7:2c:98:dc: d8:ab:6c:a2:3d:80:7c:ac:75:c6:74:51:32:88:9d: de:c5:60:f8:6b:b5:ef:38:7a:d3:e9:3c:fd:1f:17: 92:28:d2:2c:a4:57:18:54:1d:10:ec:d1:7a:22:6b: 04:4c:5e:76:ef:90:ac:3c:f4:fe:65:1e:2f:26:10: 65:db:9d:c8:db:3d:64:36:61:81:e5:e7:51:05:ca: b3:a2:8b:52:bb:e1:14:67:3d:82:29:11:71:ea:26: 56:3b:3a:b9:9e:a4:6c:2e:c7:ec:d4:41:46:61:14: 4e:8f:9d:ff:e6:76:55:70:88:e9:0c:35:6b:cd:81: 35:e8:1e:40:56:86:87:96:77:3b:57:47:94:a6:33: a2:d6:a9:af:0d:ef:f9:37:b8:17:37:ec:a5:3b:91: eb:8a:d4:20:28:8e:36:2f:91:ec:1c:26:cc:93:52: 78:e0:9e:3a:9d:06:89:ae:d9:f0:17:d0:bc:6f:d5: 24:ef:c7:eb:b1:06:a1:b2:cc:ba:1f:9a:36:14:ed: 7e:bf:9c:e6:a5:1f:f4:8d:0a:92:ba:23:d4:d4:e7: a0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:79:9A:64:A0:D2:93:A5:1A:EC:EA:BA:58:82:08:04:5B:4D:37:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:99:8b:57:74:50:de:43:67:3c:44:5e:33:0f:06:01:a1:d3: 86:48:00:ef:54:e3:33:8b:d0:13:51:40:be:8d:95:53:33:b0: 9b:55:30:18:1e:e1:2c:8c:55:fa:f2:66:30:2b:a8:22:ab:bd: 0d:cd:76:a8:c1:ec:db:33:d8:fb:91:02:b4:8d:63:d4:3c:88: d2:d7:21:6d:b9:58:21:9d:c3:1f:0a:ee:68:3d:c4:5d:a6:4a: 19:48:ea:a7:2f:38:be:52:59:f1:e9:b7:9b:77:be:0b:e3:4f: 29:86:51:47:cd:05:74:50:8d:f2:28:9b:4b:b9:8d:93:68:d3: 76:ca:f9:10:67:d8:1a:37:02:fc:da:ca:49:43:37:30:79:68: 84:f3:5a:14:2c:c5:a2:c9:92:77:57:06:61:67:60:1f:a1:1f: f0:af:18:df:46:3d:22:5b:77:37:0b:83:19:69:f0:f4:ef:b2: 80:c5:b3:91:54:e8:8a:9c:46:c4:12:fc:29:b7:cd:8d:42:dd: a0:bc:0a:0c:fc:04:dd:1d:5d:41:58:ef:3c:ce:99:4a:9b:2b: f5:86:05:cd:6a:32:27:18:35:67:e8:80:42:d9:74:ed:74:b1: a6:0f:32:26:4d:0a:25:cb:93:46:b0:52:9e:56:46:21:09:66: e1:2d:5b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN9MGx+LaVp/tXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OTE2MWVkMzYtMGMzYy00OWFhLTlmY2ItYjEzY2Y5Yjc0NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQNezt92NPIsWCQkgwMgkWNFlWDyzU3mpYq9 JaPt5LhNS6E7q9lx2NcsmNzYq2yiPYB8rHXGdFEyiJ3exWD4a7XvOHrT6Tz9HxeS KNIspFcYVB0Q7NF6ImsETF5275CsPPT+ZR4vJhBl253I2z1kNmGB5edRBcqzootS u+EUZz2CKRFx6iZWOzq5nqRsLsfs1EFGYRROj53/5nZVcIjpDDVrzYE16B5AVoaH lnc7V0eUpjOi1qmvDe/5N7gXN+ylO5HritQgKI42L5HsHCbMk1J44J46nQaJrtnw F9C8b9Uk78frsQahssy6H5o2FO1+v5zmpR/0jQqSuiPU1OegvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp5mmSg0pOlGuzquliCCARbTTdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWRlYTJiODctMmFjOS0z NzhlLTk1MDgtYmRjMDIwNDM4YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Zi1d0UN5DZzxEXjMPBgGh04ZIAO9U4zOL0BNRQL6NlVMzsJtVMBge 4SyMVfryZjArqCKrvQ3NdqjB7Nsz2PuRArSNY9Q8iNLXIW25WCGdwx8K7mg9xF2m ShlI6qcvOL5SWfHpt5t3vgvjTymGUUfNBXRQjfIom0u5jZNo03bK+RBn2Bo3Avza yklDNzB5aITzWhQsxaLJkndXBmFnYB+hH/CvGN9GPSJbdzcLgxlp8PTvsoDFs5FU 6IqcRsQS/Cm3zY1C3aC8Cgz8BN0dXUFY7zzOmUqbK/WGBc1qMicYNWfogELZdO10 saYPMiZNCiXLk0awUp5WRiEJZuEtWyg= -----END CERTIFICATE-----Generated at Sat Sep 5 04:59:53 2026 by rpki-client