$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa File: dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa (raw, json) Hash identifier: +MGN/BZULDX7YSKW4dOsh1WaGh1Tjbu/8qbVDz00UTg= Subject key identifier: 8E:58:3B:E8:F5:CD:62:6D:93:BA:1E:AB:74:19:2E:48:9C:43:17:07 Certificate issuer: /CN=37d65fc0-6e4c-4477-9488-812657d0d39e Certificate serial: 010D0C9F4328584EA7977D3470F46C453749E3B0 Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 153.45.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:7d:34:70:f4:6c:45:37:49:e3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d03ad782-6b17-43bf-bdfb-9b8dfbfe7bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c7:cb:e1:23:85:1f:c3:14:34:1f:17:05:52: 31:8b:a9:62:99:e7:c7:33:5a:54:1c:14:9d:67:5d: bb:1c:f7:90:77:24:f4:aa:34:b0:27:eb:8a:ee:95: 52:e5:68:81:17:2d:41:8c:b3:9d:10:04:63:dd:db: 4e:fb:1d:4a:99:ba:c8:42:08:a5:84:d7:44:92:63: 0c:ca:a1:cc:2e:15:eb:b1:2d:e4:08:a6:32:80:2c: 1d:aa:e5:a6:b0:e0:a1:06:0d:cd:fc:a2:71:9c:11: b6:9e:68:f0:5a:4c:dc:78:29:85:19:db:6d:d7:2c: d3:89:bd:b8:71:0d:79:8b:67:43:a3:b3:ce:96:74: 7b:45:2b:4f:5b:12:84:58:ea:a6:c5:f3:e3:82:a7: 7a:77:1c:52:ab:1f:24:e1:87:87:5a:3d:24:19:ad: be:0a:e2:90:c3:f8:27:d1:c9:94:21:d2:61:10:23: e5:85:da:6e:40:4b:f3:03:bb:56:14:12:14:b4:03: 7a:c0:3a:af:31:33:9d:9a:4c:d9:2b:90:1c:d8:69: a3:72:a6:6b:2d:79:ab:c5:1b:03:cb:6d:ef:ce:ab: 46:94:8c:fc:7e:55:ab:6e:18:e7:39:02:e1:27:b3: ed:80:cf:63:26:cc:7a:1e:91:5c:f4:db:7c:bb:9c: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:3B:E8:F5:CD:62:6D:93:BA:1E:AB:74:19:2E:48:9C:43:17:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/dcb647a7-46a6-3e1a-a368-fb46e0ee99da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl X509v3 Authority Key Identifier: keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c0:57:d1:5b:2d:23:51:1d:40:2a:0c:d1:db:0d:0f:11:b1: c9:56:c8:84:2c:fb:2f:1d:b0:e9:26:a6:61:d1:90:16:5d:ca: 22:14:90:d4:e3:8a:d1:86:29:e7:08:7c:f0:66:1a:69:66:da: 91:19:14:84:dd:bc:2c:86:18:ee:d2:78:34:3d:75:40:cc:d8: 58:4d:b2:50:ac:38:8a:c5:d1:c8:6f:27:cd:1e:88:0c:63:e2: 4f:0c:f6:c5:af:80:f3:64:ca:3a:24:82:0e:ed:2a:eb:5b:8a: 31:22:9e:d5:d3:38:6c:32:1b:b0:99:fd:b9:ba:e7:6c:f4:65: d3:c0:2f:1f:f6:df:1d:43:18:8a:e8:15:4c:24:40:d1:5a:86: f8:c6:61:3e:28:8f:80:c5:d8:df:ea:fb:25:2d:e0:ca:8d:0a: ae:c9:37:15:10:23:57:0c:cf:4c:e4:c3:5e:e5:23:21:d5:2a: 08:54:d8:1c:3d:93:21:1a:79:18:9a:16:9d:21:42:77:1f:19: f8:23:e3:7b:8c:7f:be:7d:7f:9e:b3:2b:2c:d3:37:63:99:96: 96:57:32:97:9f:a0:bc:ba:85:c6:5d:4b:fa:d2:d1:b5:8e:72: 07:02:ac:0e:20:2a:6e:72:dd:c2:d0:a7:ce:2d:e4:dc:0f:80: c2:f0:47:1a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nl300cPRsRTdJ47AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk MzllMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDAzYWQ3ODItNmIxNy00M2JmLWJkZmItOWI4ZGZiZmU3YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MfL4SOFH8MUNB8XBVIxi6limefHM1pUHBSd Z127HPeQdyT0qjSwJ+uK7pVS5WiBFy1BjLOdEARj3dtO+x1KmbrIQgilhNdEkmMM yqHMLhXrsS3kCKYygCwdquWmsOChBg3N/KJxnBG2nmjwWkzceCmFGdtt1yzTib24 cQ15i2dDo7POlnR7RStPWxKEWOqmxfPjgqd6dxxSqx8k4YeHWj0kGa2+CuKQw/gn 0cmUIdJhECPlhdpuQEvzA7tWFBIUtAN6wDqvMTOdmkzZK5Ac2GmjcqZrLXmrxRsD y23vzqtGlIz8flWrbhjnOQLhJ7PtgM9jJsx6HpFc9Nt8u5xJbwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI5YO+j1zWJtk7oeq3QZLkicQxcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2 NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvZGNiNjQ3YTctNDZhNi0z ZTFhLWEzNjgtZmI0NmUwZWU5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0 ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2 NTdkMGQzOWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmS0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARsBX0VstI1EdQCoM0dsNDxGxyVbIhCz7Lx2w6SamYdGQFl3KIhSQ1OOK 0YYp5wh88GYaaWbakRkUhN28LIYY7tJ4ND11QMzYWE2yUKw4isXRyG8nzR6IDGPi Twz2xa+A82TKOiSCDu0q61uKMSKe1dM4bDIbsJn9ubrnbPRl08AvH/bfHUMYiugV TCRA0VqG+MZhPiiPgMXY3+r7JS3gyo0Krsk3FRAjVwzPTOTDXuUjIdUqCFTYHD2T IRp5GJoWnSFCdx8Z+CPje4x/vn1/nrMrLNM3Y5mWllcyl5+gvLqFxl1L+tLRtY5y BwKsDiAqbnLdwtCnzi3k3A+AwvBHGg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:08 2026 by rpki-client