$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: 2CsGqO0RJJ63O913rIsME61riYkekq8FricbT1XKNkE= Subject key identifier: 9F:68:E4:78:F6:82:72:FC:97:36:0C:84:3B:E8:B1:6C:9C:50:9F:CD Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584E8DEF9C7DA5961FCE1E1FBC00 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:9c:7d:a5:96:1f:ce:1e:1f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=ca24e21e-4694-45d0-bad9-250d6e56593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:85:f5:77:87:8a:25:91:5e:79:24:5b:74: c4:51:86:24:b6:e8:c5:a8:9a:54:24:ce:cd:8c:eb: e4:eb:78:66:6e:76:cd:fe:fd:82:72:19:b9:e0:fa: 7b:a8:8a:7e:de:07:36:5a:c3:8c:4f:4b:77:36:a0: b8:48:c7:35:a6:9d:88:dc:94:2b:76:be:26:85:cf: b3:ee:75:4a:df:50:30:b3:7b:88:73:af:5a:15:68: cc:9a:61:d0:86:3c:3c:40:de:91:77:ad:05:df:4a: 5e:32:a9:5e:b1:01:b8:b7:b9:c5:2f:73:ee:53:df: c8:d3:5a:1a:73:ba:11:df:b2:7f:b3:64:4e:1e:f1: c5:ed:b9:b3:f4:65:12:b2:5a:a9:97:15:ee:0a:36: e2:5a:25:b2:a9:5d:c2:1c:fb:40:d5:34:9e:5d:cb: 09:67:8c:3a:f5:20:ef:be:3a:ec:c8:5b:34:90:5b: dd:c4:7b:e9:5b:06:f6:1a:ff:af:de:a8:a4:70:33: 51:8e:a2:6a:81:a4:66:c0:73:a4:5e:47:1d:07:9c: b1:e9:d1:22:d5:23:44:87:af:27:f4:f4:89:18:5f: 78:18:33:67:25:42:ed:a7:e1:23:fb:25:d6:31:11: 22:5d:cb:7b:4f:48:c9:0d:60:0b:01:b8:40:e7:e2: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:68:E4:78:F6:82:72:FC:97:36:0C:84:3B:E8:B1:6C:9C:50:9F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ac:b3:b2:04:a7:38:9f:1e:b6:99:47:ab:8b:f8:16:d4:70: 4b:2a:7d:56:f9:7a:2b:a3:00:4d:56:49:37:a2:98:a2:bb:c5: df:99:b1:8a:77:80:1a:4a:48:90:36:5d:f8:bd:2c:d6:73:d6: c1:5b:28:e6:d2:23:e0:dd:80:f6:e9:03:2d:d8:7e:85:66:b0: dd:a5:c8:bc:48:e0:1f:a6:cb:a7:39:10:49:1c:d6:c7:22:bb: e4:8c:08:3a:98:ab:8b:07:32:e2:24:a1:fd:c2:ac:0a:3d:35: 7c:df:69:73:eb:70:9f:11:2a:91:65:21:68:e1:af:ff:ee:a0: 5d:a3:30:b0:92:f7:5e:91:5f:77:55:c5:65:1a:e9:b1:45:13: 17:1b:9d:fa:c9:b4:eb:88:1e:a1:4a:db:3d:18:58:f1:c9:b5: 17:d3:81:36:a4:bd:05:11:51:91:47:1b:80:c0:71:bb:c6:0f: 7c:5c:58:73:d2:ff:e3:98:73:15:90:b2:5f:dd:20:d7:9e:94: be:31:6e:0b:69:8a:17:bf:6b:00:e8:68:ed:79:8b:22:0c:0b: b7:88:21:2a:a4:73:4c:6b:74:e7:69:f9:91:d6:eb:50:f1:08: 65:80:6a:7e:8a:dd:ae:21:d9:d6:fc:9f:49:c1:c9:62:ce:d0: 6a:33:ec:ea -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6N75x9pZYfzh4fvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk Y2EyNGUyMWUtNDY5NC00NWQwLWJhZDktMjUwZDZlNTY1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2GF9XeHiiWRXnkkW3TEUYYktujFqJpUJM7N jOvk63hmbnbN/v2Cchm54Pp7qIp+3gc2WsOMT0t3NqC4SMc1pp2I3JQrdr4mhc+z 7nVK31Aws3uIc69aFWjMmmHQhjw8QN6Rd60F30peMqlesQG4t7nFL3PuU9/I01oa c7oR37J/s2ROHvHF7bmz9GUSslqplxXuCjbiWiWyqV3CHPtA1TSeXcsJZ4w69SDv vjrsyFs0kFvdxHvpWwb2Gv+v3qikcDNRjqJqgaRmwHOkXkcdB5yx6dEi1SNEh68n 9PSJGF94GDNnJULtp+Ej+yXWMREiXct7T0jJDWALAbhA5+LAhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ9o5Hj2gnL8lzYMhDvosWycUJ/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWayzsgSnOJ8etplHq4v4FtRwSyp9Vvl6K6MATVZJN6KYorvF35mxineA GkpIkDZd+L0s1nPWwVso5tIj4N2A9ukDLdh+hWaw3aXIvEjgH6bLpzkQSRzWxyK7 5IwIOpiriwcy4iSh/cKsCj01fN9pc+twnxEqkWUhaOGv/+6gXaMwsJL3XpFfd1XF ZRrpsUUTFxud+sm064geoUrbPRhY8cm1F9OBNqS9BRFRkUcbgMBxu8YPfFxYc9L/ 45hzFZCyX90g156UvjFuC2mKF79rAOho7XmLIgwLt4ghKqRzTGt052n5kdbrUPEI ZYBqfordriHZ1vyfScHJYs7QajPs6g== -----END CERTIFICATE-----Generated at Fri Jul 24 08:01:16 2026 by rpki-client