$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: yfNY1EbugTYE8rk8ZJpDs/igDRsVvJ32nqMWP24+Moc= Subject key identifier: EB:43:C0:55:4E:32:22:01:5A:1B:E3:B7:D4:27:C7:A7:49:13:B0:FA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584F30526F641A577AF4896C8FC0 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:6f:64:1a:57:7a:f4:89:6c:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=8438ad59-3af1-40b9-ba27-38b6de09d10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:f7:88:b0:91:71:30:fd:9f:10:b7:7a:69: 32:74:53:9a:8a:63:d3:21:7d:3b:0f:24:55:a3:89: 35:31:6e:99:66:71:34:9d:80:f4:82:b5:6f:50:1a: 80:47:6f:3f:c2:8d:a6:90:00:dc:cb:ef:7d:14:85: 9c:8f:ca:e8:55:39:64:39:6c:87:49:3b:1f:f5:b4: 57:2b:f7:14:13:79:d6:d2:08:3e:6d:ab:fd:f5:dc: cf:a4:80:ad:51:aa:fa:d5:f2:fe:49:08:28:8e:e2: e8:ce:f1:68:cb:78:2f:91:24:b7:51:83:5d:1d:71: 04:94:8b:b8:86:41:87:8a:0f:02:27:8e:f0:0d:01: cf:d4:c8:cb:82:c9:ae:31:e0:55:7c:a4:ce:b4:ff: 37:f4:69:ab:5d:05:4b:65:0e:dc:25:b4:62:6d:c7: 53:22:a6:6b:88:00:9c:c3:d5:08:f2:6e:0c:d4:a3: 2f:a4:b8:29:23:b2:74:56:8f:61:b9:39:45:96:be: e7:1a:15:6e:ee:6b:37:c6:6d:58:b8:7a:8e:c6:4b: d5:f7:ea:66:0e:47:ba:69:52:f7:26:1e:a6:2b:38: 97:d0:9e:bb:1d:0f:ae:9c:53:77:be:f9:7a:b2:82: de:a1:ed:21:3e:ac:2f:26:5c:e9:f7:4f:2c:3c:66: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:C0:55:4E:32:22:01:5A:1B:E3:B7:D4:27:C7:A7:49:13:B0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:70:35:a4:4c:c6:e3:45:33:39:0f:13:b0:66:56:6c:ed:c9: bf:d6:e7:2b:3c:d9:26:0a:9d:43:22:e7:cf:4e:e2:e1:87:58: a6:b9:13:94:15:09:ac:2a:7a:10:9f:a9:fb:30:d4:81:4b:93: 73:07:7f:30:12:1a:0f:db:7b:78:df:73:d0:15:43:13:cd:9b: 02:3a:1b:7c:e5:3b:83:88:bc:d3:1c:8f:c1:f1:a2:a0:11:b9: a0:20:fc:e5:b5:95:ee:ab:e2:9a:b1:4d:77:28:9b:0d:ce:37: b5:1c:47:d4:85:17:2c:a3:b0:eb:dc:f6:19:f5:c4:ed:d7:de: 52:34:1f:77:14:1a:3d:49:34:4a:fd:49:59:aa:bb:cf:90:77: 48:d9:ae:a0:4e:78:3c:3e:e5:e4:b5:39:17:00:94:26:07:f4: b1:f8:66:4c:3f:ea:28:db:9c:98:66:cf:de:d8:e9:98:49:39: 09:bd:77:0b:40:cd:86:08:10:e8:d8:50:a5:ac:1a:ce:ff:f3: 95:88:f8:e8:c1:ad:ed:33:f1:43:a0:1f:fd:10:8d:00:8a:69: 31:4e:cd:6c:9e:db:e5:52:d4:82:49:86:6d:9b:ea:43:a2:d6: ba:bc:c6:7e:bd:92:2f:46:3b:c9:35:90:fa:b0:5f:1a:41:8b: dc:a2:e2:88 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8wUm9kGld69Ilsj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ODQzOGFkNTktM2FmMS00MGI5LWJhMjctMzhiNmRlMDlkMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhub3iLCRcTD9nxC3emkydFOaimPTIX07DyRV o4k1MW6ZZnE0nYD0grVvUBqAR28/wo2mkADcy+99FIWcj8roVTlkOWyHSTsf9bRX K/cUE3nW0gg+bav99dzPpICtUar61fL+SQgojuLozvFoy3gvkSS3UYNdHXEElIu4 hkGHig8CJ47wDQHP1MjLgsmuMeBVfKTOtP839GmrXQVLZQ7cJbRibcdTIqZriACc w9UI8m4M1KMvpLgpI7J0Vo9huTlFlr7nGhVu7ms3xm1YuHqOxkvV9+pmDke6aVL3 Jh6mKziX0J67HQ+unFN3vvl6soLeoe0hPqwvJlzp908sPGbmgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOtDwFVOMiIBWhvjt9Qnx6dJE7D6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcnA1pEzG40UzOQ8TsGZWbO3Jv9bnKzzZJgqdQyLnz07i4YdYprkTlBUJ rCp6EJ+p+zDUgUuTcwd/MBIaD9t7eN9z0BVDE82bAjobfOU7g4i80xyPwfGioBG5 oCD85bWV7qvimrFNdyibDc43tRxH1IUXLKOw69z2GfXE7dfeUjQfdxQaPUk0Sv1J Waq7z5B3SNmuoE54PD7l5LU5FwCUJgf0sfhmTD/qKNucmGbP3tjpmEk5Cb13C0DN hggQ6NhQpawazv/zlYj46MGt7TPxQ6Af/RCNAIppMU7NbJ7b5VLUgkmGbZvqQ6LW urzGfr2SL0Y7yTWQ+rBfGkGL3KLiiA== -----END CERTIFICATE-----Generated at Tue Sep 29 11:02:01 2026 by rpki-client