$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa File: 97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa (raw, json) Hash identifier: yYwRrRHx3qNakLPmsz+sKP3WOnuCyE6N4e3RgtncXGk= Subject key identifier: 37:E5:97:84:F4:10:89:A1:D0:C2:B2:24:E0:18:0D:CA:6F:9A:53:ED Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584F4977032E2EBC3378213B2D00 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62610 IP address blocks: 128.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:03:2e:2e:bc:33:78:21:3b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6dd8847-fcb0-4448-b6d4-4c7faa94975f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:97:df:c3:83:b5:3d:9f:25:a9:33:d8:e5: 98:de:7d:0b:da:3f:11:b9:93:3f:db:70:7d:a4:02: 04:5b:d5:1c:91:ed:2f:25:18:c2:b7:b6:58:e2:15: 6c:7b:34:83:27:3a:a0:14:c5:88:f0:04:b3:d4:29: 66:e8:e6:af:a9:50:24:19:e9:9f:b4:0c:2c:3e:90: c4:cb:e7:39:8b:85:08:6c:b2:c1:57:4e:b3:93:47: 20:64:8b:85:ea:7a:b1:58:65:43:4d:d6:c3:b5:f4: f2:59:ea:96:68:b0:cc:21:42:a5:7f:79:7c:4a:0a: d1:5f:5f:0b:e7:09:de:cd:e2:53:6d:62:79:28:8d: 4f:35:aa:92:0c:11:af:b9:d2:12:a0:19:2a:fc:21: 12:b7:c5:56:42:bc:c0:79:ca:e8:ff:92:d1:8a:78: bd:a4:08:fe:bc:7c:b6:ec:71:23:9b:cc:e3:d2:2c: 80:57:b6:84:69:f7:3d:14:c3:26:04:e3:9d:a3:96: d9:82:b7:b3:01:bf:23:72:22:d4:16:3b:23:3b:b4: 2e:2b:56:ff:03:24:cf:67:b6:64:c3:29:f0:8d:a0: f0:ec:47:ea:34:78:ff:7f:02:9c:7a:4a:62:57:c6: eb:79:51:0b:23:18:16:eb:f9:fa:38:a3:44:3d:a4: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:97:84:F4:10:89:A1:D0:C2:B2:24:E0:18:0D:CA:6F:9A:53:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:fb:b3:e9:c7:1f:bc:ee:21:68:21:ae:92:fd:9d:39:53:9b: 69:1e:e5:e8:49:36:a6:d8:6a:35:49:13:f3:52:28:ab:9d:03: a2:c6:47:81:68:ec:77:b3:83:c0:36:c9:68:0d:03:08:d8:f2: f4:da:f1:a5:cd:19:f5:a0:61:ff:81:d5:f4:14:09:a8:2e:d1: 8f:25:79:e0:95:cf:f3:08:b7:d3:df:ef:3d:0e:a7:fc:a7:7f: 46:3f:17:33:c0:b3:ae:ca:50:6a:08:4e:39:28:5c:84:a5:14: 49:6d:62:ad:fb:a1:87:58:1c:b9:5e:61:8c:c1:6d:f1:5c:0d: 39:b4:6b:bd:8c:0e:12:95:25:ea:99:4e:32:56:37:20:8b:a7: 15:3d:d7:21:49:60:39:cc:b0:3b:54:ee:88:4b:e0:6b:93:78: ef:d4:11:8f:20:da:ca:5d:51:bc:7f:0a:a1:6e:c4:3e:36:c3: ec:80:b5:6e:d9:cf:1e:39:ac:64:a2:fa:d8:7c:af:12:08:b0: b8:1b:8d:28:b1:3c:e5:c0:d2:ff:9b:65:4a:93:c9:44:78:bd: 1e:8d:c1:90:2d:ac:ab:f1:b3:7f:3e:46:6f:c1:f4:f2:be:b0: db:f9:9b:81:50:59:81:53:b3:9d:c0:62:88:3f:b2:0e:76:e7: af:e3:2c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdwMuLrwzeCE7LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZkZDg4NDctZmNiMC00NDQ4LWI2ZDQtNGM3ZmFhOTQ5NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKX38ODtT2fJakz2OWY3n0L2j8RuZM/23B9 pAIEW9Ucke0vJRjCt7ZY4hVsezSDJzqgFMWI8ASz1Clm6OavqVAkGemftAwsPpDE y+c5i4UIbLLBV06zk0cgZIuF6nqxWGVDTdbDtfTyWeqWaLDMIUKlf3l8SgrRX18L 5wnezeJTbWJ5KI1PNaqSDBGvudISoBkq/CESt8VWQrzAecro/5LRini9pAj+vHy2 7HEjm8zj0iyAV7aEafc9FMMmBOOdo5bZgrezAb8jciLUFjsjO7QuK1b/AyTPZ7Zk wynwjaDw7EfqNHj/fwKcekpiV8breVELIxgW6/n6OKNEPaQ3QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfll4T0EImh0MKyJOAYDcpvmlPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTdlYWE5YzEtYTllYS0z ZTVkLWIyMzUtMDk0MGM1ZGQ2OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKT7s+nHH7zuIWghrpL9nTlTm2ke5ehJNqbYajVJE/NSKKudA6LGR4Fo 7Hezg8A2yWgNAwjY8vTa8aXNGfWgYf+B1fQUCagu0Y8leeCVz/MIt9Pf7z0Op/yn f0Y/FzPAs67KUGoITjkoXISlFEltYq37oYdYHLleYYzBbfFcDTm0a72MDhKVJeqZ TjJWNyCLpxU91yFJYDnMsDtU7ohL4GuTeO/UEY8g2spdUbx/CqFuxD42w+yAtW7Z zx45rGSi+th8rxIIsLgbjSixPOXA0v+bZUqTyUR4vR6NwZAtrKvxs38+Rm/B9PK+ sNv5m4FQWYFTs53AYog/sg5256/jLMs= -----END CERTIFICATE-----Generated at Sun Sep 27 21:16:45 2026 by rpki-client