$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa File: 97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa (raw, json) Hash identifier: VrjaOD1t+AdwpI0FEN+EtoJocOECUOnrfuwn2xxQlTs= Subject key identifier: C7:D0:C4:1B:8E:ED:F3:1B:F6:D3:24:E6:6E:DA:88:93:39:6D:21:1C Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584EA78811211B87D4E1C593FF00 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62610 IP address blocks: 128.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:11:21:1b:87:d4:e1:c5:93:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3eccff3-276a-45f6-898b-b8d51ea67338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:fd:e4:dd:eb:45:de:12:91:0f:7a:4f:97: 09:af:73:bb:c7:06:e5:72:e5:c4:d6:9d:4d:42:04: 89:19:b3:75:d2:4f:31:33:5e:cd:03:06:fb:4f:e7: 89:3b:f3:06:43:88:ef:7b:24:4a:75:8f:06:f9:e0: b2:e7:ec:5f:a7:5f:ac:b9:ab:cf:90:a3:46:8e:55: 1e:7f:5b:e2:b1:b8:75:fd:0d:13:dc:f5:90:06:ff: 88:da:a9:41:06:5b:fb:5a:47:84:81:b1:c9:07:65: 02:ff:13:0b:e0:4e:69:b4:a4:a6:4b:45:c8:2c:a7: fc:73:b0:43:f6:62:ef:eb:2f:9b:01:0a:00:48:8b: 3b:b0:ae:3d:2b:05:37:6f:a4:32:30:42:d1:de:2f: d8:3e:79:56:f5:9b:f0:0e:50:2d:96:39:52:07:36: 92:88:63:44:83:23:2f:36:a1:2a:0a:88:38:68:a2: 85:10:ae:92:45:78:f1:a3:ef:34:80:86:56:b9:0f: 93:92:ca:93:1e:9d:95:cd:db:1b:68:5c:9a:3a:9e: 11:64:a9:1d:67:76:5a:40:b0:c4:2d:18:47:d5:87: 0d:96:8d:bf:22:3e:d0:a8:7e:fd:c2:21:ac:96:51: 56:8f:fa:6b:87:08:b5:ee:2d:09:56:03:e2:13:02: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D0:C4:1B:8E:ED:F3:1B:F6:D3:24:E6:6E:DA:88:93:39:6D:21:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:33:15:e6:ee:7d:47:45:1f:80:2f:66:76:2e:13:32:0a:c5: 23:a4:1a:8a:ce:74:86:41:ac:c2:3d:01:49:ec:59:4d:04:bc: a4:aa:0d:87:36:4d:95:46:ac:f8:b4:f1:2d:1b:0e:0b:c0:f4: 7a:32:b1:99:a8:60:66:57:aa:28:ef:ca:33:20:ec:c9:f3:02: 77:f8:1d:51:08:11:29:06:f7:5d:c4:02:1e:e9:ad:f3:f5:18: b5:98:e2:10:6c:04:03:29:97:6b:38:f9:bf:7d:cc:e0:56:66: 9d:80:01:a2:f5:f3:9d:5c:bc:22:af:5d:01:cd:1e:b9:c1:b7: a3:d5:95:db:04:8e:5c:fc:a4:37:40:c8:40:5f:c2:d7:11:38: ba:bc:bf:52:5f:f1:70:e2:0a:7c:94:a7:12:0c:53:db:d2:81: dd:2e:57:4a:f6:85:79:4b:8a:a7:d9:7d:83:82:06:0a:0e:1d: 1a:a8:ef:fd:07:e1:90:5a:09:68:28:3a:45:98:b6:0d:b3:19: d4:2a:66:be:81:52:6f:5b:33:a9:02:1b:b3:c4:ce:38:3b:67: c8:54:44:82:18:1c:fd:dd:a4:3c:d7:2c:7a:1e:92:ab:1c:cc: 85:3b:18:bb:fd:8f:9d:f8:e6:fd:de:d6:23:4d:f4:93:6d:54: bb:5b:18:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBEhG4fU4cWT/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDNlY2NmZjMtMjc2YS00NWY2LTg5OGItYjhkNTFlYTY3MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCn95N3rRd4SkQ96T5cJr3O7xwblcuXE1p1N QgSJGbN10k8xM17NAwb7T+eJO/MGQ4jveyRKdY8G+eCy5+xfp1+suavPkKNGjlUe f1visbh1/Q0T3PWQBv+I2qlBBlv7WkeEgbHJB2UC/xML4E5ptKSmS0XILKf8c7BD 9mLv6y+bAQoASIs7sK49KwU3b6QyMELR3i/YPnlW9ZvwDlAtljlSBzaSiGNEgyMv NqEqCog4aKKFEK6SRXjxo+80gIZWuQ+TksqTHp2VzdsbaFyaOp4RZKkdZ3ZaQLDE LRhH1YcNlo2/Ij7QqH79wiGsllFWj/prhwi17i0JVgPiEwLCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfQxBuO7fMb9tMk5m7aiJM5bSEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTdlYWE5YzEtYTllYS0z ZTVkLWIyMzUtMDk0MGM1ZGQ2OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQzFebufUdFH4AvZnYuEzIKxSOkGorOdIZBrMI9AUnsWU0EvKSqDYc2 TZVGrPi08S0bDgvA9HoysZmoYGZXqijvyjMg7MnzAnf4HVEIESkG913EAh7prfP1 GLWY4hBsBAMpl2s4+b99zOBWZp2AAaL1851cvCKvXQHNHrnBt6PVldsEjlz8pDdA yEBfwtcROLq8v1Jf8XDiCnyUpxIMU9vSgd0uV0r2hXlLiqfZfYOCBgoOHRqo7/0H 4ZBaCWgoOkWYtg2zGdQqZr6BUm9bM6kCG7PEzjg7Z8hURIIYHP3dpDzXLHoekqsc zIU7GLv9j5345v3e1iNN9JNtVLtbGHc= -----END CERTIFICATE-----Generated at Sat Sep 5 02:04:07 2026 by rpki-client