$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: +rz0yUFeypp6BpIZxipADM2HUQNbFzNYD2PMWjE3ARo= Subject key identifier: 40:C5:49:84:B7:8A:19:23:E5:86:BD:FB:8E:1C:5E:31:58:47:FD:9A Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584DADAACEEA3F2D26CA2E742000 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:ce:ea:3f:2d:26:ca:2e:74:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=5c81adf1-4d8e-4a86-acf9-9f4203df149a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:5c:00:cd:be:88:37:d3:77:86:66:91:b7: fb:ca:31:b9:03:33:32:e6:40:28:20:b8:f8:fe:9f: fd:f5:36:03:db:94:c9:ac:e4:d6:2e:ee:15:da:6b: 8a:92:c1:29:18:fd:5c:42:b5:1c:5a:9c:c2:0b:b3: 77:4d:08:ca:80:72:e2:8f:a6:22:3d:02:29:d7:90: 55:14:3b:f6:66:5e:f0:e1:35:96:94:91:86:4b:54: 9b:33:44:ab:38:55:80:47:b2:4e:60:db:84:76:bd: 13:ec:52:ae:f3:3b:43:45:90:ec:73:ca:14:14:fb: d0:83:3a:8b:9f:14:04:9d:7b:b0:0d:21:cc:01:f2: d3:47:f8:74:51:da:48:8b:d3:e5:e1:e9:c1:e0:11: 0c:13:d0:3b:c5:7f:86:ff:1d:e4:2d:74:8f:a1:95: 77:ef:69:f9:f1:eb:eb:c9:da:b3:1f:e0:27:bb:6f: a9:ca:75:41:54:b0:42:2f:11:10:ea:62:d9:23:08: 6e:c6:33:ea:1e:8c:07:23:bb:6f:0c:12:21:b8:ec: 16:a4:31:f4:ed:5d:fc:72:6a:a3:39:5a:83:02:03: 98:e2:6d:b8:78:30:0c:1d:a7:36:dc:da:52:e6:cd: 22:6d:eb:76:80:97:bc:a2:d9:c1:ef:55:8a:f1:30: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C5:49:84:B7:8A:19:23:E5:86:BD:FB:8E:1C:5E:31:58:47:FD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:76:0c:99:da:4f:7f:af:ac:da:17:d9:58:3a:7e:f4:47:ae: 21:43:54:29:f2:c7:e4:07:a2:63:6a:47:1e:c1:97:14:a0:0f: 72:77:1f:aa:06:b7:03:cd:e0:8a:80:3b:ec:35:21:be:e7:72: 0c:0d:60:61:4a:e2:cf:47:ca:fe:8b:f5:c5:32:5f:01:12:39: 04:05:3b:64:38:3b:09:db:97:f2:07:54:8a:c2:a8:37:a3:39: c4:30:23:9c:4a:16:7a:76:78:c4:f0:6e:db:60:b9:55:a7:f9: 54:88:31:be:44:b5:15:a2:02:77:f3:cd:47:2b:41:6a:07:49: 42:cb:45:51:84:ec:c7:85:59:22:9e:5c:43:d5:fb:f1:d4:09: ff:31:e2:3d:17:b9:8f:10:03:7a:d7:e4:b9:ac:9d:30:32:49: 60:12:d5:bb:15:15:a0:c3:7d:8a:44:06:4e:bb:50:4d:d9:da: 15:06:e5:a1:d8:3f:bd:bd:cd:1c:a9:e8:37:7d:88:0e:48:e6: 66:6e:d3:50:c2:b7:a9:71:7a:7b:dd:1d:af:28:df:b2:d1:cb: 34:5c:69:b6:a5:e3:1c:3f:56:e0:18:90:dd:35:89:a5:07:f1: 88:00:26:39:d0:2f:38:7b:b7:29:b8:49:3a:0f:7d:b1:f4:84: 6c:0b:1d:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2tqs7qPy0myi50IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NWM4MWFkZjEtNGQ4ZS00YTg2LWFjZjktOWY0MjAzZGYxNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsxcAM2+iDfTd4Zmkbf7yjG5AzMy5kAoILj4 /p/99TYD25TJrOTWLu4V2muKksEpGP1cQrUcWpzCC7N3TQjKgHLij6YiPQIp15BV FDv2Zl7w4TWWlJGGS1SbM0SrOFWAR7JOYNuEdr0T7FKu8ztDRZDsc8oUFPvQgzqL nxQEnXuwDSHMAfLTR/h0UdpIi9Pl4enB4BEME9A7xX+G/x3kLXSPoZV372n58evr ydqzH+Anu2+pynVBVLBCLxEQ6mLZIwhuxjPqHowHI7tvDBIhuOwWpDH07V38cmqj OVqDAgOY4m24eDAMHac23NpS5s0ibet2gJe8otnB71WK8TBdywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEDFSYS3ihkj5Ya9+44cXjFYR/2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACnYMmdpPf6+s2hfZWDp+9EeuIUNUKfLH5AeiY2pHHsGXFKAPcncfqga3 A83gioA77DUhvudyDA1gYUriz0fK/ov1xTJfARI5BAU7ZDg7CduX8gdUisKoN6M5 xDAjnEoWenZ4xPBu22C5Vaf5VIgxvkS1FaICd/PNRytBagdJQstFUYTsx4VZIp5c Q9X78dQJ/zHiPRe5jxADetfkuaydMDJJYBLVuxUVoMN9ikQGTrtQTdnaFQblodg/ vb3NHKnoN32IDkjmZm7TUMK3qXF6e90dryjfstHLNFxptqXjHD9W4BiQ3TWJpQfx iAAmOdAvOHu3KbhJOg99sfSEbAsdTg== -----END CERTIFICATE-----Generated at Wed May 13 13:13:43 2026 by rpki-client