$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa File: d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa (raw, json) Hash identifier: DNIF4/JpGb82zlRrEVWZ8Cf/NZ5t2xuQWVaaHSCp850= Subject key identifier: B7:90:5C:36:64:75:28:AB:0A:5D:52:78:82:E1:AB:8F:D1:44:06:5E Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584EA79C588B1CE9C5ABC36B4300 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 64.53.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:58:8b:1c:e9:c5:ab:c3:6b:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=873beced-05bc-4b5a-a75e-6e3694300b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:ee:75:32:5b:dc:76:3a:4d:2d:43:3d:3e: 3c:5a:36:6c:b2:94:d8:3c:2f:cc:33:db:27:8b:e6: c5:9c:e4:9b:19:4d:5e:19:24:e8:03:b4:f1:7c:25: 66:7a:7d:30:6d:a2:82:7c:6f:02:30:c4:54:8f:c5: f9:60:b1:11:ea:37:d0:e6:f9:2f:26:43:77:50:2f: c0:1b:dd:0d:70:e2:ad:4a:1b:25:7f:af:9e:d6:da: 02:a2:06:8a:c2:76:19:ba:4b:f5:25:1a:42:39:a1: 59:52:a8:6f:ec:fd:71:96:8a:e4:32:53:cc:58:3d: 67:52:de:f1:9c:81:7a:1a:20:84:da:ec:03:be:f4: 58:41:45:03:eb:40:06:aa:cc:00:f1:2e:dc:86:4c: 7d:39:0a:17:a4:fb:59:c8:4b:22:7a:61:32:38:8d: c9:39:37:11:15:e2:d5:5b:4c:42:2d:c5:30:fd:86: f5:55:da:23:c9:8c:df:95:c6:3a:67:5d:b0:c3:39: b6:2a:80:c7:a1:ca:ab:c4:d4:d4:c8:a4:89:04:fd: 05:57:12:c5:c4:10:b4:d5:98:10:59:0c:61:fc:dd: dd:88:de:9f:0b:d2:d9:16:f8:78:4b:36:b0:1e:9f: 8e:92:7e:ea:db:53:2e:b5:f6:e8:7d:91:33:89:a1: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:90:5C:36:64:75:28:AB:0A:5D:52:78:82:E1:AB:8F:D1:44:06:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d5f8e556-b23f-397f-8abc-812a8fa7ea86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 64.53.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:da:6a:56:44:83:af:26:3b:30:87:b7:b9:49:90:66:4e:9c: ff:10:6a:12:a5:94:2e:22:a7:22:ef:55:c9:a0:20:d3:99:ad: 83:2b:c6:9e:37:99:66:57:37:cf:68:bf:05:96:dc:2d:9d:b7: 8f:f8:eb:c6:1e:d8:f1:66:bc:b2:f6:6f:1a:44:31:0f:86:18: 74:1e:c3:9c:2b:18:f3:74:72:5c:b0:23:d7:0f:61:74:56:42: 0f:6f:6d:88:53:04:99:d8:b6:d3:29:fb:7f:08:20:84:42:73: 12:25:fa:53:f3:ae:75:e9:c6:38:a6:5e:35:de:40:0e:bf:f6: 0d:85:26:1d:b9:cb:74:46:af:fc:97:26:14:f0:2d:34:15:e9: a0:36:f1:e1:c7:63:b3:47:0e:48:61:08:ff:fd:fa:b6:70:22: f6:cd:db:94:e7:77:63:ce:20:83:d3:29:55:83:2b:a4:68:41: 72:f9:bb:30:0a:bb:14:8e:9b:86:f4:7a:de:93:ab:5d:11:b7: 01:0e:53:26:d0:25:15:ff:77:5c:46:f2:32:df:61:5b:fc:49: f8:81:7a:b4:64:db:e1:dd:09:85:c5:0b:ef:fb:f5:d1:a8:0f: 88:f0:0b:d3:e1:66:bd:c2:e2:44:24:03:e1:b5:ba:8d:aa:75: 0f:af:b7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnFiLHOnFq8NrQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODczYmVjZWQtMDViYy00YjVhLWE3NWUtNmUzNjk0MzAwYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/udTJb3HY6TS1DPT48WjZsspTYPC/MM9sn i+bFnOSbGU1eGSToA7TxfCVmen0wbaKCfG8CMMRUj8X5YLER6jfQ5vkvJkN3UC/A G90NcOKtShslf6+e1toCogaKwnYZukv1JRpCOaFZUqhv7P1xlorkMlPMWD1nUt7x nIF6GiCE2uwDvvRYQUUD60AGqswA8S7chkx9OQoXpPtZyEsiemEyOI3JOTcRFeLV W0xCLcUw/Yb1VdojyYzflcY6Z12wwzm2KoDHocqrxNTUyKSJBP0FVxLFxBC01ZgQ WQxh/N3diN6fC9LZFvh4SzawHp+Okn7q21MutfbofZEziaEAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeQXDZkdSirCl1SeILhq4/RRAZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvZDVmOGU1NTYtYjIzZi0z OTdmLThhYmMtODEyYThmYTdlYTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLaalZEg68mOzCHt7lJkGZOnP8QahKllC4ipyLvVcmgINOZrYMrxp43 mWZXN89ovwWW3C2dt4/468Ye2PFmvLL2bxpEMQ+GGHQew5wrGPN0clywI9cPYXRW Qg9vbYhTBJnYttMp+38IIIRCcxIl+lPzrnXpxjimXjXeQA6/9g2FJh25y3RGr/yX JhTwLTQV6aA28eHHY7NHDkhhCP/9+rZwIvbN25Tnd2POIIPTKVWDK6RoQXL5uzAK uxSOm4b0et6Tq10RtwEOUybQJRX/d1xG8jLfYVv8SfiBerRk2+HdCYXFC+/79dGo D4jwC9PhZr3C4kQkA+G1uo2qdQ+vt9A= -----END CERTIFICATE-----Generated at Fri Sep 11 05:59:26 2026 by rpki-client