$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa File: 7654818c-dc53-3730-ba27-2df80fc36fca.roa (raw, json) Hash identifier: 8ZDidZU+4Ww1FgQnI8MK+iK6Pc7JIoDdRcBO6yOMjGs= Subject key identifier: 53:58:99:7F:50:EE:25:01:88:11:3F:DB:F1:1C:24:C2:C6:F7:92:4B Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584FAF58A08F05C7BF7D6922EBE0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 27310 IP address blocks: 72.29.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:a0:8f:05:c7:bf:7d:69:22:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=6fdd0a1d-ae65-48e2-8f9d-809a7ba1221b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:c2:de:b6:25:07:7f:44:4e:64:d9:19:c9: bb:e7:73:fb:6d:81:06:06:57:93:f7:31:da:8c:e9: 3f:5a:2c:1c:4b:b4:b0:9c:fc:69:67:ec:92:22:15: 08:ab:47:2e:ce:c6:a2:86:ba:85:80:c2:f0:55:08: db:0b:83:c0:9d:b5:5d:e2:2b:55:c9:ea:46:85:7c: e0:67:f8:5d:f9:ca:63:75:43:4f:87:87:f7:e3:dd: ae:bd:78:5e:06:11:80:3e:c3:86:94:4d:8b:2c:1f: 86:ee:38:9b:78:0f:13:8f:91:7c:18:5a:96:5b:f7: 19:38:6f:34:ed:fc:d9:cc:f9:01:c0:75:8b:58:87: 1d:23:b5:81:be:d8:2b:52:45:84:8f:fe:07:96:e9: da:39:43:19:72:3b:08:d1:75:0d:99:47:0d:af:4e: d6:4f:c3:36:3f:e3:79:70:10:58:7c:f7:48:1a:37: 9e:74:de:ac:9b:ab:e4:f3:a4:03:ec:b5:c3:9e:c0: b6:39:f0:aa:59:0e:0d:6a:1c:32:37:3e:84:c2:dd: c2:b2:92:6e:a9:5b:07:e0:0b:86:b6:8e:47:62:9c: 1a:3b:4c:aa:4e:02:f3:ea:dd:90:3e:07:ad:6b:55: cd:83:98:df:24:b4:85:d3:3c:2c:c1:61:d1:2a:26: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:58:99:7F:50:EE:25:01:88:11:3F:DB:F1:1C:24:C2:C6:F7:92:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7654818c-dc53-3730-ba27-2df80fc36fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.29.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:db:7f:bc:d0:d5:a4:5f:20:1e:86:13:ce:16:48:02:bc:4b: 5a:81:13:5e:b7:92:06:a1:13:42:28:3d:1a:81:43:94:38:60: 0c:05:29:97:7a:01:c1:bd:89:49:f4:40:47:a3:07:f9:36:2d: 22:90:c5:03:1c:8c:7d:a7:ec:e4:82:02:9f:18:3c:92:fe:dc: 9a:fa:3b:1d:4b:e1:d6:27:24:40:36:69:85:88:17:11:86:18: 87:2e:de:ee:36:ed:8c:a6:65:c1:58:05:6d:3c:c9:fd:d5:79: 7b:8e:11:03:ba:d9:7e:fd:42:da:5c:8b:93:c0:a2:8a:37:13: a9:01:a2:e3:83:ef:3a:0e:c9:6e:43:1e:d5:e6:e6:94:fb:8d: a3:ac:d0:5c:7a:02:dd:97:71:0c:c7:a7:dc:49:8a:3b:a3:d7: 34:7f:cd:cf:9c:6c:6c:5f:26:4d:a0:9b:83:a5:a2:5f:36:7c: b4:f8:1c:1f:44:7b:85:94:92:78:bc:ba:76:b8:54:06:0d:4f: 40:93:31:10:76:77:b5:e2:e7:d4:c7:8a:3f:5a:34:b1:f3:a5: 5f:b0:8a:07:66:50:ff:28:32:e9:33:63:4b:c8:d5:d0:e4:47: fd:5b:2e:f9:22:52:f5:9d:4e:a5:78:94:67:e6:7b:5c:0d:59: e1:48:90:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWKCPBce/fWki6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk NmZkZDBhMWQtYWU2NS00OGUyLThmOWQtODA5YTdiYTEyMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ3C3rYlB39ETmTZGcm753P7bYEGBleT9zHa jOk/WiwcS7SwnPxpZ+ySIhUIq0cuzsaihrqFgMLwVQjbC4PAnbVd4itVyepGhXzg Z/hd+cpjdUNPh4f3492uvXheBhGAPsOGlE2LLB+G7jibeA8Tj5F8GFqWW/cZOG80 7fzZzPkBwHWLWIcdI7WBvtgrUkWEj/4HlunaOUMZcjsI0XUNmUcNr07WT8M2P+N5 cBBYfPdIGjeedN6sm6vk86QD7LXDnsC2OfCqWQ4NahwyNz6Ewt3CspJuqVsH4AuG to5HYpwaO0yqTgLz6t2QPgeta1XNg5jfJLSF0zwswWHRKiYwOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNYmX9Q7iUBiBE/2/EcJMLG95JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNzY1NDgxOGMtZGM1My0z NzMwLWJhMjctMmRmODBmYzM2ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjbf7zQ1aRfIB6GE84WSAK8S1qBE163kgahE0IoPRqBQ5Q4YAwFKZd6 AcG9iUn0QEejB/k2LSKQxQMcjH2n7OSCAp8YPJL+3Jr6Ox1L4dYnJEA2aYWIFxGG GIcu3u427YymZcFYBW08yf3VeXuOEQO62X79Qtpci5PAooo3E6kBouOD7zoOyW5D HtXm5pT7jaOs0Fx6At2XcQzHp9xJijuj1zR/zc+cbGxfJk2gm4Olol82fLT4HB9E e4WUkni8una4VAYNT0CTMRB2d7Xi59THij9aNLHzpV+wigdmUP8oMukzY0vI1dDk R/1bLvkiUvWdTqV4lGfme1wNWeFIkFU= -----END CERTIFICATE-----Generated at Sun Nov 15 12:55:54 2026 by rpki-client