$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa File: 504baf8d-e241-376c-b484-bd46bef0f789.roa (raw, json) Hash identifier: sGTc4Z5gKhD/4792iOmseJxdWew/j8T5RxQ+Y1KPTTc= Subject key identifier: 07:B7:90:B9:F0:69:F6:54:0D:7C:7D:53:F1:D3:9A:0E:CB:0E:33:16 Certificate issuer: /CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Certificate serial: 010D0C9F4328584EED5206B906AEAD410CDC3740 Authority key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 22878 IP address blocks: 68.171.208.0/20 maxlen: 20 162.247.76.0/22 maxlen: 22 173.230.240.0/20 maxlen: 20 192.64.32.0/22 maxlen: 22 207.45.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:06:b9:06:ae:ad:41:0c:dc:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529d57aa-cd56-41d8-b3ad-b413b968b610 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=532af7ca-aeba-4f74-a60e-a6d07c630350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c3:ab:53:1d:ba:4e:12:c2:08:79:3c:97:8f: 9e:20:07:87:22:dc:9b:13:49:67:35:1e:0f:3e:64: 38:8a:53:86:61:69:fe:ad:8e:0c:0b:bd:1a:6b:9a: 64:19:25:2f:81:9f:91:04:92:20:5d:a3:65:60:21: 48:b3:fb:7c:75:32:30:58:98:86:b1:d5:0a:05:7b: 3c:a6:cf:af:46:6f:f8:c8:fd:53:50:f4:6c:97:5c: c4:8a:2d:94:7f:4c:f1:97:5d:a8:b4:d5:4a:5f:67: a4:8a:9a:4a:db:b9:1e:0b:8f:7f:2e:ef:8d:eb:41: b6:bd:3f:41:69:48:a0:9a:23:18:5b:66:61:e6:9f: 37:32:13:de:e9:51:73:a1:4b:c0:79:32:e3:e1:9a: fd:02:72:4b:df:a3:dd:fd:15:0c:b4:f4:82:83:c2: 5d:a8:cc:80:d4:f8:df:51:85:2d:71:8a:c8:c2:ad: e8:93:79:13:b5:76:a8:fe:fb:64:01:cd:01:61:24: f1:0e:8f:75:f5:a8:87:cb:f0:eb:59:56:25:a4:e7: dc:81:74:ee:bc:c8:75:12:a5:fc:5c:b1:e5:dd:fb: 13:bb:5c:31:fd:ee:38:07:ad:b4:b9:56:af:a5:fb: 1b:4f:ff:ad:8e:cf:82:c7:71:77:e5:b8:8d:df:f0: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B7:90:B9:F0:69:F6:54:0D:7C:7D:53:F1:D3:9A:0E:CB:0E:33:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/504baf8d-e241-376c-b484-bd46bef0f789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl X509v3 Authority Key Identifier: keyid:2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer sbgp-ipAddrBlock: critical IPv4: 68.171.208.0/20 162.247.76.0/22 173.230.240.0/20 192.64.32.0/22 207.45.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7b:d8:61:77:5c:06:9a:fc:fd:d7:59:3b:03:2e:be:e5:d5: 3c:40:a6:e8:15:d0:88:10:ae:dd:07:6f:4b:cb:4a:bc:9b:10: 77:3c:f0:48:90:a1:40:29:a2:a0:f6:56:7b:72:7d:c9:6e:5a: 72:d9:46:fa:3f:78:85:72:15:c7:f5:07:11:29:20:40:88:a0: 52:51:d0:85:aa:e7:59:a7:27:de:9a:76:44:7d:d6:f3:c4:86: 75:02:84:83:17:52:a9:5b:23:56:e5:4b:8b:25:34:27:17:25: 79:f6:c6:22:96:e8:ed:1e:5d:d7:00:76:10:f6:de:f1:92:c1: 31:3a:9e:e9:fc:58:af:da:f3:5e:5d:88:02:a9:d8:bf:7b:30: 49:48:1f:dd:b7:4a:68:1e:72:6d:bd:a2:16:6b:ee:76:43:71: 7d:00:d6:9e:17:96:18:dd:f0:4c:6b:d9:9a:d3:c7:0a:bd:98: 62:ec:29:a0:a6:7e:8d:e8:c9:0c:ac:a5:74:76:db:a9:35:26: 22:18:f3:d9:87:8c:91:a3:80:b9:3a:7e:cc:9c:b3:1a:49:3c: 97:10:5e:64:f9:36:5e:6f:a3:aa:2b:2d:42:36:c2:ca:16:bc: 15:9a:3e:90:1c:62:a1:88:4e:74:ae:9d:fd:14:7c:99:a5:85: b5:a2:9b:a7 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE7tUga5Bq6tQQzcN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIzYWQtYjQxM2I5Njhi NjEwMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTMyYWY3Y2EtYWViYS00Zjc0LWE2MGUtYTZkMDdjNjMwMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sOrUx26ThLCCHk8l4+eIAeHItybE0lnNR4P PmQ4ilOGYWn+rY4MC70aa5pkGSUvgZ+RBJIgXaNlYCFIs/t8dTIwWJiGsdUKBXs8 ps+vRm/4yP1TUPRsl1zEii2Uf0zxl12otNVKX2ekippK27keC49/Lu+N60G2vT9B aUigmiMYW2Zh5p83MhPe6VFzoUvAeTLj4Zr9AnJL36Pd/RUMtPSCg8JdqMyA1Pjf UYUtcYrIwq3ok3kTtXao/vtkAc0BYSTxDo919aiHy/DrWVYlpOfcgXTuvMh1EqX8 XLHl3fsTu1wx/e44B620uVavpfsbT/+tjs+Cx3F35biN3/AyZQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFAe3kLnwafZUDXx9U/HTmg7LDjMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Mjlk NTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2OGI2MTAvNTA0YmFmOGQtZTI0MS0z NzZjLWI0ODQtYmQ0NmJlZjBmNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIz YWQtYjQxM2I5NjhiNjEwLzUyOWQ1N2FhLWNkNTYtNDFkOC1iM2FkLWI0MTNiOTY4 YjYxMC5jcmwwHwYDVR0jBBgwFoAUKiZIPCGtrlNqMrwgs6FkRixchFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEz Yjk2OGI2MTAuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQERKvQAwQC ovdMAwQErebwAwQCwEAgAwQEzy2wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF572GF3XAaa/P3XWTsDLr7l 1TxApugV0IgQrt0Hb0vLSrybEHc88EiQoUApoqD2VntyfcluWnLZRvo/eIVyFcf1 BxEpIECIoFJR0IWq51mnJ96adkR91vPEhnUChIMXUqlbI1blS4slNCcXJXn2xiKW 6O0eXdcAdhD23vGSwTE6nun8WK/a815diAKp2L97MElIH923Smgecm29ohZr7nZD cX0A1p4Xlhjd8Exr2ZrTxwq9mGLsKaCmfo3oyQyspXR226k1JiIY89mHjJGjgLk6 fsycsxpJPJcQXmT5Nl5vo6orLUI2wsoWvBWaPpAcYqGITnSunf0UfJmlhbWim6c= -----END CERTIFICATE-----Generated at Thu Sep 24 14:35:03 2026 by rpki-client