$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa File: 8e2546b3-d439-399a-bf4a-a9108c6408f5.roa (raw, json) Hash identifier: UX+KBU7QYlffTob+5Vn9di2pmiRoAL5wu0nA7x7LFL0= Subject key identifier: FC:70:6C:75:07:C5:EB:A2:3C:13:22:53:91:37:5F:00:5B:8A:D8:30 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584F1467A7AC35B09ED57119F718 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 25755 IP address blocks: 207.172.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a7:ac:35:b0:9e:d5:71:19:f7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b890fd83-4a5e-450c-bef5-3c9980f606ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:97:3f:37:b0:f4:5a:2e:05:32:3c:a2:13: 87:23:c0:d8:8a:01:ec:06:e0:f1:df:5d:f1:c1:21: 32:34:82:45:23:c0:99:ca:28:95:9a:93:17:69:d4: 1a:45:f4:ad:c3:81:0c:d7:ab:cd:44:1c:3d:f4:55: d2:d7:39:41:c9:75:c8:f0:ee:c4:3c:23:ba:2f:b7: e8:ed:5d:bc:7d:08:3a:aa:03:12:67:d7:08:df:a8: 2d:3a:3a:a2:94:c0:ef:be:ad:f8:93:18:cc:bd:fd: 4d:b4:7b:88:ff:6a:1e:52:82:bf:6c:04:96:0e:40: 39:c4:a8:cb:c0:21:fa:cf:f5:93:7e:73:86:b6:7b: 5f:cc:51:2f:ed:a1:a9:f5:f0:84:8f:97:9e:91:37: 17:7c:7a:80:a3:13:bb:26:4c:e1:ed:72:42:09:03: a8:46:f2:92:91:4e:14:e3:d1:a4:2c:a6:65:ac:07: 3d:ae:6d:f1:1f:00:e1:d5:6b:a2:a1:92:5b:26:0a: f7:cf:5e:4a:ac:6b:d9:cb:7f:4c:70:6c:f2:dc:b2: e4:29:45:82:e0:7f:11:d6:e5:74:22:2c:c1:42:ed: 37:ae:bd:92:49:45:81:bd:e5:21:46:31:b5:11:59: e2:41:58:e3:c8:7b:54:07:5c:48:96:46:74:6a:83: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:70:6C:75:07:C5:EB:A2:3C:13:22:53:91:37:5F:00:5B:8A:D8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 207.172.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8b:e8:64:48:0a:5a:44:a0:27:c9:7a:e3:5d:e4:e1:ce:2d: 00:20:dc:03:c9:79:f1:58:ef:3a:ca:8b:85:99:21:72:e9:84: 3b:87:9a:57:6f:d1:7c:2a:57:f2:44:d1:8a:02:3a:29:0b:08: e1:a4:e9:92:1f:b9:7e:32:87:8e:66:8e:32:4b:19:45:66:1e: eb:47:10:55:f6:6b:9e:c7:61:53:9e:03:eb:97:16:10:0d:d3: 9b:70:8c:14:c5:b6:f8:40:c2:f4:2f:7a:e8:4d:6f:fe:da:84: 56:af:cc:47:ec:d6:09:59:93:ef:2f:78:b5:06:96:49:a0:fb: 13:7c:51:91:85:32:9b:5f:25:8a:38:93:73:8e:89:38:2c:af: a7:de:57:31:f3:b8:a2:8d:dc:9c:f4:28:0a:a0:7a:ca:6e:8a: e7:f4:82:75:8a:ff:cd:06:b0:ce:11:1d:15:76:91:f3:7b:c4: 18:9c:e8:a6:7c:c0:cc:7b:7f:99:45:4c:79:b0:6b:8d:3b:a7: e1:51:88:17:ae:99:70:51:d0:85:84:69:04:c2:9c:95:c9:dd: b5:46:f1:24:69:85:44:9f:d8:a1:99:d4:4c:04:82:4f:25:39: f3:e4:48:b8:e9:e7:5b:23:9b:40:8d:17:25:14:3a:46:c4:54: f5:f2:92:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6esNbCe1XEZ9xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Yjg5MGZkODMtNGE1ZS00NTBjLWJlZjUtM2M5OTgwZjYwNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8yXPzew9FouBTI8ohOHI8DYigHsBuDx313x wSEyNIJFI8CZyiiVmpMXadQaRfStw4EM16vNRBw99FXS1zlByXXI8O7EPCO6L7fo 7V28fQg6qgMSZ9cI36gtOjqilMDvvq34kxjMvf1NtHuI/2oeUoK/bASWDkA5xKjL wCH6z/WTfnOGtntfzFEv7aGp9fCEj5eekTcXfHqAoxO7Jkzh7XJCCQOoRvKSkU4U 49GkLKZlrAc9rm3xHwDh1WuioZJbJgr3z15KrGvZy39McGzy3LLkKUWC4H8R1uV0 IizBQu03rr2SSUWBveUhRjG1EVniQVjjyHtUB1xIlkZ0aoPLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxwbHUHxeuiPBMiU5E3XwBbitgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvOGUyNTQ2YjMtZDQzOS0z OTlhLWJmNGEtYTkxMDhjNjQwOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6yZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuL6GRIClpEoCfJeuNd5OHOLQAg3APJefFY7zrKi4WZIXLphDuHmldv 0XwqV/JE0YoCOikLCOGk6ZIfuX4yh45mjjJLGUVmHutHEFX2a57HYVOeA+uXFhAN 05twjBTFtvhAwvQveuhNb/7ahFavzEfs1glZk+8veLUGlkmg+xN8UZGFMptfJYo4 k3OOiTgsr6feVzHzuKKN3Jz0KAqgespuiuf0gnWK/80GsM4RHRV2kfN7xBic6KZ8 wMx7f5lFTHmwa407p+FRiBeumXBR0IWEaQTCnJXJ3bVG8SRphUSf2KGZ1EwEgk8l OfPkSLjp51sjm0CNFyUUOkbEVPXykj8= -----END CERTIFICATE-----Generated at Fri Sep 11 02:09:33 2026 by rpki-client