$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa File: fa63886b-397a-3d98-acbc-150482f89826.roa (raw, json) Hash identifier: 2qVx99Uczy+OD9Z2xS2Yx9rpntJczY0NWtGkfDdeLok= Subject key identifier: D2:66:93:70:6F:40:32:90:AA:78:AB:BD:88:B2:89:39:70:80:DE:88 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584F2ABD0AD04481E64BACA1DF40 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 40948 IP address blocks: 153.75.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:0a:d0:44:81:e6:4b:ac:a1:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=19c6f52d-0a14-4ab4-aff0-31985a77b0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:35:a7:89:d0:cb:63:05:e4:33:e2:63:89: 0a:4f:a1:b6:59:16:41:55:ad:41:f5:8a:79:2e:d7: 1a:15:e7:e7:a0:7b:b5:2e:c7:06:90:27:e6:8a:d7: 73:a1:ce:2f:88:41:f4:b5:a0:9e:96:5d:17:03:68: b2:39:79:7c:13:e0:94:84:b6:39:2c:fd:4b:18:70: 02:a1:87:73:73:1c:46:5b:1c:96:c4:a9:34:4b:87: 90:45:ae:7e:f3:0c:f0:ae:44:20:e5:31:5d:c5:74: 88:08:21:55:41:1d:a3:75:4f:86:aa:37:46:7d:10: 7d:70:a0:77:79:ea:3d:90:63:ec:1b:a1:b3:1b:18: 48:c9:c2:92:96:db:22:f3:be:60:66:d2:c8:eb:40: bb:56:1f:8e:50:fc:ee:ad:00:01:ca:71:a1:a8:b2: a0:8e:a2:ed:ff:36:6e:e1:a2:dd:98:86:9b:4a:69: 24:7f:15:2c:9e:ce:b9:c8:50:2c:4b:12:6f:bb:f8: a7:79:ba:98:5b:f0:09:ae:b9:fa:30:93:13:1b:9c: 51:a2:8e:51:75:44:62:95:06:a5:3b:ca:1e:af:d6: 28:77:ff:8c:f9:5e:f3:76:34:76:a9:83:50:e1:40: 6f:25:77:a3:4b:44:09:48:97:f7:42:02:89:fc:ac: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:66:93:70:6F:40:32:90:AA:78:AB:BD:88:B2:89:39:70:80:DE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/fa63886b-397a-3d98-acbc-150482f89826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 153.75.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:31:3d:87:81:19:3b:ce:55:89:66:60:1f:71:0b:83:e7:6b: 5e:05:a4:40:36:00:fa:a4:7c:50:6a:85:e2:28:8c:b4:21:c0: 5b:38:ad:a0:79:48:d5:d1:83:54:04:68:b1:f9:56:ba:49:ff: 87:95:e7:0b:71:c3:a1:7c:b4:82:91:c0:ca:7d:1a:17:c5:b3: 7c:68:ab:ab:0d:2e:aa:bc:d3:f1:ca:b4:b5:85:c1:40:7f:f3: 82:ab:5c:fc:bd:63:42:58:24:40:24:d0:e8:38:48:73:b8:ba: 93:b6:8b:cb:9c:0b:87:94:2b:9b:57:3e:80:f4:51:bc:12:4e: 36:55:41:3a:3b:d4:04:5a:88:59:1a:48:4b:30:35:63:a3:49: 90:33:72:8e:36:fd:0d:8e:45:41:df:fb:87:0a:2c:92:b0:11: 97:5e:c1:4c:ef:39:ac:fe:7e:a8:73:7d:55:74:65:ba:d9:9f: f8:b2:f4:38:9f:0a:bb:a5:47:49:c2:4a:00:5d:82:af:8e:74: a6:1f:63:9b:aa:04:d2:7f:98:e6:b0:c8:6f:31:7d:c7:30:3e: a5:77:db:16:90:0a:5f:21:fb:5a:ac:b4:5b:cc:28:39:96:f3: 09:03:8c:77:60:81:4e:cb:1b:40:8d:07:57:4c:22:f2:49:22: e2:a8:4d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQrQRIHmS6yh30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MTljNmY1MmQtMGExNC00YWI0LWFmZjAtMzE5ODVhNzdiMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim81p4nQy2MF5DPiY4kKT6G2WRZBVa1B9Yp5 LtcaFefnoHu1LscGkCfmitdzoc4viEH0taCell0XA2iyOXl8E+CUhLY5LP1LGHAC oYdzcxxGWxyWxKk0S4eQRa5+8wzwrkQg5TFdxXSICCFVQR2jdU+GqjdGfRB9cKB3 eeo9kGPsG6GzGxhIycKSltsi875gZtLI60C7Vh+OUPzurQABynGhqLKgjqLt/zZu 4aLdmIabSmkkfxUsns65yFAsSxJvu/inebqYW/AJrrn6MJMTG5xRoo5RdURilQal O8oer9Yod/+M+V7zdjR2qYNQ4UBvJXejS0QJSJf3QgKJ/KxVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJmk3BvQDKQqnirvYiyiTlwgN6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvZmE2Mzg4NmItMzk3YS0z ZDk4LWFjYmMtMTUwNDgyZjg5ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmUsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIxPYeBGTvOVYlmYB9xC4Pna14FpEA2APqkfFBqheIojLQhwFs4raB5 SNXRg1QEaLH5VrpJ/4eV5wtxw6F8tIKRwMp9GhfFs3xoq6sNLqq80/HKtLWFwUB/ 84KrXPy9Y0JYJEAk0Og4SHO4upO2i8ucC4eUK5tXPoD0UbwSTjZVQTo71ARaiFka SEswNWOjSZAzco42/Q2ORUHf+4cKLJKwEZdewUzvOaz+fqhzfVV0ZbrZn/iy9Dif CrulR0nCSgBdgq+OdKYfY5uqBNJ/mOawyG8xfccwPqV32xaQCl8h+1qstFvMKDmW 8wkDjHdggU7LG0CNB1dMIvJJIuKoTds= -----END CERTIFICATE-----Generated at Sun Oct 4 00:08:47 2026 by rpki-client